$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer File: 71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer (raw, json) Hash identifier: WneWz4O1yoVrwIB+buhyMXYUcV/WP7eE3Bs6+SBV5Aw= Subject key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D8B5C0ADCB407E45B434C2B60D4EBDC1C875AA7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft caRepository: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 18:40:01 +0000 Certificate not after: Thu 03 Apr 2025 18:45:01 +0000 Subordinate resources: AS: 263004 IP: 143.208.228.0/22 IP: 186.237.16.0/21 IP: 2804:2be4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8b:5c:0a:dc:b4:07:e4:5b:43:4c:2b:60:d4:eb:dc:1c:87:5a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 18:40:01 2024 GMT Not After : Apr 3 18:45:01 2025 GMT Subject: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:4b:bb:35:dc:b7:07:aa:7d:d9:ae:4c:90: f4:35:4e:a5:3f:eb:62:15:12:a0:0a:de:5f:af:13: c2:9c:65:dc:3b:4c:e1:5e:af:f3:4b:3e:fb:b3:25: ba:c5:10:f3:7b:5d:55:89:38:0f:57:66:ec:d2:cc: 74:ad:36:bb:35:08:aa:4e:e8:07:8d:77:a6:e3:98: 5e:34:18:1d:b3:77:54:89:35:1e:8e:86:f4:49:8e: b4:61:a4:96:f6:89:18:13:cb:c4:26:37:38:d3:78: c7:67:ce:57:2e:b6:9f:cf:e7:05:c9:5c:1d:0f:f0: d1:42:e8:4d:7f:14:39:39:6b:d6:6a:17:d9:4e:3b: ee:ec:80:bf:4d:d9:61:2a:01:12:16:c2:d4:0b:f4: 49:46:f1:f6:51:52:9c:2a:86:ad:bb:1b:f0:df:44: 1a:f2:d3:ca:3a:94:20:3e:27:2b:b1:c9:07:84:27: 8c:33:16:ba:7f:d5:56:29:26:a8:9b:54:00:9e:b1: 64:04:a4:bc:43:e4:e3:6a:8c:e3:5c:fb:fb:04:48: 22:ff:69:5c:33:a5:9f:2f:00:87:2c:a6:94:f9:e0: 04:d3:a1:64:bd:92:85:6c:2f:df:c4:79:0a:ce:0e: ab:51:a3:ac:9f:ef:4f:be:a8:75:1c:52:db:db:9e: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.228.0/22 186.237.16.0/21 IPv6: 2804:2be4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263004 Signature Algorithm: sha256WithRSAEncryption 44:e8:c5:36:dc:37:a8:81:c4:de:64:8f:89:b3:34:f6:d9:a0: 04:fb:1c:40:30:08:41:da:9e:bb:4c:93:91:85:77:b7:8b:78: a0:c0:5d:6c:9f:1d:1b:c9:fa:d9:5e:33:43:a0:86:e7:95:82: 1c:cf:c7:30:03:70:6d:f5:e2:66:78:c5:70:ae:d3:60:ae:e1: 43:a1:69:1d:7e:ef:f7:e0:16:ab:22:b9:62:6e:f6:05:6c:55: ea:ea:6b:62:53:19:2f:12:d7:e4:c3:f8:ab:c3:24:ef:4e:2a: c2:fa:4c:67:84:5b:14:c3:70:3a:b5:12:d6:01:46:6b:3b:20: a7:f6:be:be:d0:39:18:a4:99:21:2f:23:4b:26:f2:96:89:ca: 61:e8:6d:81:78:02:e4:3a:1c:ab:15:3f:be:76:69:01:8b:16: 12:b2:4b:13:6e:a7:ce:05:2b:cf:36:15:b8:1b:78:5c:cd:50: 99:be:d8:f4:c6:9e:91:66:b9:c8:8d:0e:03:ef:c1:75:31:b5: 48:c4:58:30:15:4f:d2:28:23:be:54:0a:9a:be:27:68:71:e8: da:76:a1:0d:27:16:e5:05:0a:a3:63:d5:70:10:c6:6c:70:8d: 76:81:a0:57:64:b1:4a:bc:31:e3:78:2c:13:d0:ab:c8:fb:15: d4:dc:3c:0f -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPYtcCty0B+RbQ0wrYNTr3ByHWqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxODQwMDFaFw0yNTA0MDMxODQ1MDFaMDMxMTAvBgNV BAMTKDcxRTMzNkFBMUVBREJFNEE2MTA4NjZFREI0MTQxRDM2QTVCNzdDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS9Eu7Ndy3B6p92a5MkPQ1TqU/ 62IVEqAK3l+vE8KcZdw7TOFer/NLPvuzJbrFEPN7XVWJOA9XZuzSzHStNrs1CKpO 6AeNd6bjmF40GB2zd1SJNR6OhvRJjrRhpJb2iRgTy8QmNzjTeMdnzlcutp/P5wXJ XB0P8NFC6E1/FDk5a9ZqF9lOO+7sgL9N2WEqARIWwtQL9ElG8fZRUpwqhq27G/Df RBry08o6lCA+JyuxyQeEJ4wzFrp/1VYpJqibVACesWQEpLxD5ONqjONc+/sESCL/ aVwzpZ8vAIcsppT54ATToWS9koVsL9/EeQrODqtRo6yf70++qHUcUtvbnhPLAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRx4zaqHq2+SmEI Zu20FB02pbd8UjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUc2 aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5cFlqM3dCOWo5Q3QvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlH Nmh3blhjeG9HVmpOMVlrZlVXcmIzVXloS0FwdEdMOXBZajN3QjlqOUN0LzEvNzFF MzM2QUExRUFEQkU0QTYxMDg2NkVEQjQxNDFEMzZBNUI3N0M1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj9DkAwQDuu0QMA0EAgACMAcDBQAoBCvkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDXDANBgkqhkiG9w0BAQsFAAOCAQEAROjFNtw3 qIHE3mSPibM09tmgBPscQDAIQdqeu0yTkYV3t4t4oMBdbJ8dG8n62V4zQ6CG55WC HM/HMANwbfXiZnjFcK7TYK7hQ6FpHX7v9+AWqyK5Ym72BWxV6uprYlMZLxLX5MP4 q8Mk704qwvpMZ4RbFMNwOrUS1gFGazsgp/a+vtA5GKSZIS8jSybylonKYehtgXgC 5DocqxU/vnZpAYsWErJLE26nzgUrzzYVuBt4XM1Qmb7Y9MaekWa5yI0OA+/BdTG1 SMRYMBVP0igjvlQKmr4naHHo2nahDScW5QUKo2PVcBDGbHCNdoGgV2SxSrwx43gs E9CryPsV1Nw8Dw== -----END CERTIFICATE-----Generated at Sun Jun 2 00:29:16 2024 by rpki-client on console-ams.rpki-client.org