$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer File: 71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer (raw, json) Hash identifier: 0u2xGg3J5t35z5Wg437mSsTGtGrJ8NxZXaCJqta+q1M= Subject key identifier: 71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0A15C46DDED142E656F53ADD9F0E28420274EF93 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.mft caRepository: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 21:55:26 +0000 Certificate not after: Wed 02 Apr 2025 22:00:26 +0000 Subordinate resources: AS: 52593 IP: 170.83.208.0/22 IP: 177.87.232.0/22 IP: 2804:d10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:15:c4:6d:de:d1:42:e6:56:f5:3a:dd:9f:0e:28:42:02:74:ef:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 21:55:26 2024 GMT Not After : Apr 2 22:00:26 2025 GMT Subject: CN=71F86B10A77D1BB0176438DDC470DFE2D19A6F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:29:b0:34:56:e5:0e:e1:de:31:dd:73:42:77: b3:58:58:d3:f6:10:35:17:ff:66:af:44:b7:d4:ac: 75:b0:2c:65:01:fb:20:13:56:11:77:33:ac:c4:70: 41:e3:72:76:b6:5f:6f:d3:c3:65:2b:d6:b6:fd:f9: 3d:c0:ea:eb:e8:c4:01:fa:56:13:07:6c:f7:f6:d4: c5:0e:91:81:4d:9f:59:58:e8:2c:12:80:0b:fd:a6: 08:14:c9:07:d2:d6:c6:0f:1b:c5:70:52:9f:db:af: 2b:38:0e:21:b2:0b:77:75:9d:ce:12:b7:21:f1:48: 35:21:d1:06:ae:19:48:75:72:4b:8e:31:0f:a9:94: 16:c9:b7:a1:18:5c:4c:a0:91:5f:0c:88:f7:b5:dd: ce:ba:ca:6f:25:8f:a8:99:1a:c6:fb:10:ad:9c:0c: 0d:a6:ac:e1:07:6d:dd:d6:0d:e5:e1:13:5f:f4:1d: 53:4d:8a:bf:dd:88:9f:bb:0e:5b:1b:96:b6:52:88: 65:3e:2a:0c:0a:b8:ed:2b:83:4c:ea:ee:4d:bc:cf: e5:99:d9:93:34:8b:35:98:6e:66:5b:fb:d5:1c:50: 58:ac:02:d1:65:75:6d:4f:d9:ff:76:75:70:1e:a8: bd:7a:29:1d:ef:b3:b7:ef:49:6c:6c:23:8b:c7:e3: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.83.208.0/22 177.87.232.0/22 IPv6: 2804:d10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52593 Signature Algorithm: sha256WithRSAEncryption 26:12:d9:59:e6:10:31:5f:55:89:8d:68:e8:81:c9:8c:43:a9: d4:9d:51:b1:68:36:13:3a:7a:18:53:e4:b9:99:2c:c5:f9:b6: ef:32:ae:2f:a9:01:c9:de:f0:d5:53:c1:8c:2f:ff:68:23:74: 8e:8c:4b:3a:97:ae:ec:c4:d2:d8:24:0e:be:e9:3e:9b:b2:6e: b6:e9:a9:b1:2f:d1:70:6f:d7:21:f1:f1:85:bb:00:c7:12:ac: de:9b:68:ec:03:1b:8e:a0:0d:6c:1b:18:da:4c:ce:83:08:53: d9:75:7a:85:d8:4a:2c:b7:ec:c6:e2:ce:39:d4:1f:85:c7:0a: 00:38:26:38:8c:69:aa:97:24:09:83:f9:be:d8:2b:e7:68:c5: 7b:e7:a8:76:57:70:ab:74:80:84:39:a2:1c:e6:68:b9:e1:ad: 9d:f5:2f:7f:b0:1a:65:09:4c:d0:64:4d:46:2b:60:4a:9e:5a: 8f:59:85:ad:91:97:e0:eb:40:df:a8:22:34:cf:77:41:f2:1c: b0:25:1b:19:27:10:01:17:44:36:9f:47:43:67:43:4c:9f:54: d8:23:8b:d7:be:ce:51:cd:cd:38:e8:94:16:f6:be:60:77:ef: 99:97:83:a4:5b:b6:cd:13:ed:95:8d:01:d1:af:79:60:38:f8: 44:0b:74:1c -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUChXEbd7RQuZW9Trdnw4oQgJ075MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMTU1MjZaFw0yNTA0MDIyMjAwMjZaMDMxMTAvBgNV BAMTKDcxRjg2QjEwQTc3RDFCQjAxNzY0MzhEREM0NzBERkUyRDE5QTZGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKbA0VuUO4d4x3XNCd7NYWNP2 EDUX/2avRLfUrHWwLGUB+yATVhF3M6zEcEHjcna2X2/Tw2Ur1rb9+T3A6uvoxAH6 VhMHbPf21MUOkYFNn1lY6CwSgAv9pggUyQfS1sYPG8VwUp/brys4DiGyC3d1nc4S tyHxSDUh0QauGUh1ckuOMQ+plBbJt6EYXEygkV8MiPe13c66ym8lj6iZGsb7EK2c DA2mrOEHbd3WDeXhE1/0HVNNir/diJ+7DlsblrZSiGU+KgwKuO0rg0zq7k28z+WZ 2ZM0izWYbmZb+9UcUFisAtFldW1P2f92dXAeqL16KR3vs7fvSWxsI4vH44/zAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRx+GsQp30bsBdk ON3EcN/i0ZpvFDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOE1T VlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdNSDcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhN U1ZYcTJBcG9QaVpScVphUEMzcnE3Nm5ZTFRVS2c3VDlLWlFhWlh3TUg3LzEvNzFG ODZCMTBBNzdEMUJCMDE3NjQzOEREQzQ3MERGRTJEMTlBNkYxNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlPQAwQCsVfoMA0EAgACMAcDBQAoBA0QMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDNcTANBgkqhkiG9w0BAQsFAAOCAQEAJhLZWeYQ MV9ViY1o6IHJjEOp1J1RsWg2Ezp6GFPkuZksxfm27zKuL6kByd7w1VPBjC//aCN0 joxLOpeu7MTS2CQOvuk+m7JutumpsS/RcG/XIfHxhbsAxxKs3pto7AMbjqANbBsY 2kzOgwhT2XV6hdhKLLfsxuLOOdQfhccKADgmOIxpqpckCYP5vtgr52jFe+eodldw q3SAhDmiHOZoueGtnfUvf7AaZQlM0GRNRitgSp5aj1mFrZGX4OtA36giNM93QfIc sCUbGScQARdENp9HQ2dDTJ9U2COL177OUc3NOOiUFva+YHfvmZeDpFu2zRPtlY0B 0a95YDj4RAt0HA== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:30 2024 by rpki-client on console-fra.rpki-client.org