$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer File: 725BCF70C08F4B2744E301141EF06513A96F28D6.cer (raw, json) Hash identifier: Vo5lbgFDSZuXIeCRlZWiNfn3mqoOSFgJ4WK3MDJAAkk= Subject key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3FC51321F9BCD9C89C8B56BADEDFC423AA488396 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft caRepository: rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:07 +0000 Certificate not after: Wed 02 Apr 2025 18:30:07 +0000 Subordinate resources: AS: 53166 IP: 186.217.0.0/16 IP: 200.145.0.0/16 IP: 2801:88::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c5:13:21:f9:bc:d9:c8:9c:8b:56:ba:de:df:c4:23:aa:48:83:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:07 2024 GMT Not After : Apr 2 18:30:07 2025 GMT Subject: CN=725BCF70C08F4B2744E301141EF06513A96F28D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:82:00:ef:fc:fb:c6:d2:db:f5:d7:32:d9: f8:58:70:ba:90:cb:16:7c:60:99:2b:22:ad:2e:73: c3:40:9a:f1:2e:40:6a:b9:a7:43:24:75:ab:df:c1: c1:8b:e1:6f:39:93:e1:5f:ee:be:32:41:64:87:ae: b4:99:60:ea:6e:72:4d:1d:57:fa:07:12:22:cf:7c: d8:3c:60:e1:1f:42:c4:81:07:47:32:8c:17:7e:66: a8:e4:11:88:01:81:92:8a:9b:06:3f:97:f3:45:f9: 3a:30:b6:5f:f3:29:f3:e3:ef:79:17:a6:7e:20:c4: c6:95:8e:40:ea:9d:ce:28:92:03:88:88:43:d5:5c: 32:cf:e1:6a:42:b1:25:50:83:8e:fb:b5:39:06:d9: 5b:73:05:88:e2:6c:da:2a:14:74:86:66:1f:6a:6a: 15:c1:39:e2:49:f7:d3:e0:80:5c:0c:23:06:58:5f: d9:83:3f:ed:a8:18:f5:64:8a:fe:76:3d:51:38:c9: ce:b3:7e:6e:ae:ae:ea:a3:da:6a:da:52:14:07:19: 74:1d:62:d3:65:96:59:f9:0c:cb:cd:5d:95:c8:e3: 06:39:d7:73:fd:b1:fb:96:ac:64:bd:64:6a:00:a2: 98:a8:36:6a:74:61:11:27:d1:22:a1:36:34:8f:d1: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.217.0.0/16 200.145.0.0/16 IPv6: 2801:88::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53166 Signature Algorithm: sha256WithRSAEncryption d1:e3:f8:f6:e8:af:ef:a7:6c:6a:ea:63:ff:68:91:dc:07:1c: de:32:36:2f:53:75:86:c9:07:7c:bd:95:17:4d:a6:33:83:43: d7:5a:24:0b:7d:5f:6c:8b:4e:d5:3c:09:19:ca:b0:d5:fa:0f: 51:c9:32:67:a9:b0:0f:27:fd:f7:f3:a8:0e:d4:99:b0:cf:9a: aa:f2:b8:ee:92:9a:87:31:a8:91:07:9d:a6:fb:ff:5f:fc:c2: ca:9a:d5:d7:d1:42:75:32:bd:62:bc:1b:2e:ee:00:6f:c6:e4: dc:0d:54:ec:e0:96:17:b9:78:75:26:7a:0e:bd:65:48:26:0e: 5f:90:48:6c:af:27:45:56:e5:08:6a:fc:83:d4:93:07:6d:ad: d6:1d:dc:ed:c6:20:92:04:4a:10:43:29:84:e8:05:4e:44:60: a7:d3:43:8f:2b:6a:11:14:b2:32:03:01:1e:4e:09:92:ec:38: b1:ee:f3:81:95:85:23:18:b6:2e:45:9b:7a:c3:9e:2a:2e:8e: a9:df:2c:8f:a9:0f:ad:6a:4e:bb:eb:b8:ff:a8:7f:1b:94:6c: 4b:c1:8b:c4:bd:ca:de:d5:bf:fe:55:c0:43:50:93:6f:11:fc: 8f:96:97:3a:3f:f1:ea:72:d8:96:3c:65:50:5a:52:83:a0:62: a4:b9:d6:5d -----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgIUP8UTIfm82cici1a63t/EI6pIg5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1MDdaFw0yNTA0MDIxODMwMDdaMDMxMTAvBgNV BAMTKDcyNUJDRjcwQzA4RjRCMjc0NEUzMDExNDFFRjA2NTEzQTk2RjI4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ioIA7/z7xtLb9dcy2fhYcLqQ yxZ8YJkrIq0uc8NAmvEuQGq5p0MkdavfwcGL4W85k+Ff7r4yQWSHrrSZYOpuck0d V/oHEiLPfNg8YOEfQsSBB0cyjBd+ZqjkEYgBgZKKmwY/l/NF+Towtl/zKfPj73kX pn4gxMaVjkDqnc4okgOIiEPVXDLP4WpCsSVQg477tTkG2VtzBYjibNoqFHSGZh9q ahXBOeJJ99PggFwMIwZYX9mDP+2oGPVkiv52PVE4yc6zfm6uruqj2mraUhQHGXQd YtNllln5DMvNXZXI4wY513P9sfuWrGS9ZGoAopioNmp0YREn0SKhNjSP0eB9AgMB AAGjggM9MIIDOTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRyW89wwI9LJ0Tj ARQe8GUTqW8o1jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTR3 V0Q2aVp5OWltUjJNamhvQjQ3S1NtQXZQdk1pY2k4MVlqQ1k5ZXBBMmovMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTR3 V0Q2aVp5OWltUjJNamhvQjQ3S1NtQXZQdk1pY2k4MVlqQ1k5ZXBBMmovMS83MjVC Q0Y3MEMwOEY0QjI3NDRFMzAxMTQxRUYwNjUxM0E5NkYyOEQ2Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMgYIKwYBBQUHAQcB Af8EIzAhMBAEAgABMAoDAwC62QMDAMiRMA0EAgACMAcDBQAoAQCIMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDPrjANBgkqhkiG9w0BAQsFAAOCAQEA0eP49uiv76ds aupj/2iR3Acc3jI2L1N1hskHfL2VF02mM4ND11okC31fbItO1TwJGcqw1foPUcky Z6mwDyf99/OoDtSZsM+aqvK47pKahzGokQedpvv/X/zCyprV19FCdTK9YrwbLu4A b8bk3A1U7OCWF7l4dSZ6Dr1lSCYOX5BIbK8nRVblCGr8g9STB22t1h3c7cYgkgRK EEMphOgFTkRgp9NDjytqERSyMgMBHk4Jkuw4se7zgZWFIxi2LkWbesOeKi6Oqd8s j6kPrWpOu+u4/6h/G5RsS8GLxL3K3tW//lXAQ1CTbxH8j5aXOj/x6nLYljxlUFpS g6BipLnWXQ== -----END CERTIFICATE-----Generated at Sat Nov 23 00:06:13 2024 by rpki-client on console-ams.rpki-client.org