$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer File: 809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer (raw, json) Hash identifier: /SMVCgu2fwyHHngnaq8/f8oJi+YhRgGy/hx1QpUdB4o= Subject key identifier: 80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 355C2C60723E1B7B059C78CEF8019A186A9058E6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft caRepository: rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 00:02:05 +0000 Certificate not after: Thu 03 Apr 2025 00:07:05 +0000 Subordinate resources: AS: 28219 IP: 186.236.224.0/20 IP: 189.124.16.0/20 IP: 2804:29a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Jul 2024 20:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5c:2c:60:72:3e:1b:7b:05:9c:78:ce:f8:01:9a:18:6a:90:58:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 00:02:05 2024 GMT Not After : Apr 3 00:07:05 2025 GMT Subject: CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:f0:1b:b2:98:1e:24:72:2e:94:69:b7:9d: cb:a2:da:d4:e1:44:1a:7c:f2:4b:e3:f0:09:4d:60: 08:5b:98:81:9d:ab:94:ea:8f:c2:35:71:4e:55:9e: b8:40:0d:48:55:a6:94:26:d7:9b:43:a5:0b:01:de: 8f:40:4c:30:85:f3:52:fe:ed:7a:8c:f8:fd:78:01: 96:ad:02:2f:f8:02:a8:1b:08:d6:62:03:42:f8:5b: 7e:90:7d:46:a8:18:ce:6f:f5:75:37:95:80:f3:2b: 19:d1:ab:9b:d5:34:71:1b:ae:a9:19:16:c9:ff:73: 86:7a:66:12:2e:ad:38:31:34:e1:7e:42:b2:20:aa: 07:ea:7d:d0:8f:9f:a0:e5:79:9b:2a:d4:c4:78:77: 01:5e:aa:c0:cd:1b:28:ec:9f:ad:02:63:e2:48:77: 85:ed:2e:c5:b8:cc:71:29:e5:6c:97:37:7b:f8:c5: f0:fe:32:ea:82:c2:89:0d:b7:34:62:d7:4e:f4:14: 44:1e:62:7d:28:36:6f:a0:7b:d4:f7:4e:1c:66:2d: 22:cd:dd:b6:aa:63:0a:c0:ab:ef:a7:20:17:62:45: bb:07:0d:5c:06:15:8d:b1:29:82:b9:02:f3:fc:3e: 77:89:27:3c:e0:34:74:64:a7:ac:56:ec:43:4c:09: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.236.224.0/20 189.124.16.0/20 IPv6: 2804:29a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28219 Signature Algorithm: sha256WithRSAEncryption 35:1f:57:4f:db:d8:01:04:29:dd:16:6c:a0:ff:f9:35:85:5d: ac:70:d2:4a:40:7f:b1:ff:15:09:23:17:25:37:64:68:1f:3e: 9e:b8:d9:6c:6e:ab:c9:bc:64:3d:c0:f3:3a:22:20:3c:47:4a: ba:7f:0a:c8:55:91:9a:dd:ef:6a:e8:2f:65:74:a4:8d:3a:7b: 0d:96:17:b6:38:85:ff:05:db:39:98:47:4e:af:a0:20:82:28: bf:c3:68:88:22:02:fa:43:8e:11:58:cd:14:00:7c:6a:19:4a: 1c:38:40:23:35:0f:4b:81:61:db:ae:04:f5:50:fc:f1:e8:15: 52:4c:1e:19:60:ee:06:ab:2c:36:b1:3e:9a:f1:71:40:f2:23: 84:16:8a:6b:35:1e:cc:68:2c:28:f8:f1:22:33:15:45:5e:00: bb:78:23:19:00:bb:9c:4e:be:06:7d:ed:23:e9:e1:cd:fc:93: 06:e4:e3:57:b6:bf:8a:95:0c:8f:bd:2f:90:f2:7b:49:8e:21: a4:0a:d3:11:7c:0b:65:26:ed:ba:3c:18:04:19:69:4f:66:b1: 82:a0:fa:b3:db:aa:96:eb:22:f5:4b:6d:87:bf:5f:34:d7:6f: e3:30:e2:26:05:41:08:92:91:e0:8c:e7:3b:2d:66:a5:41:12: 9c:cc:df:9d -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUNVwsYHI+G3sFnHjO+AGaGGqQWOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMDAyMDVaFw0yNTA0MDMwMDA3MDVaMDMxMTAvBgNV BAMTKDgwOUQ5RkQyRjc0MUNEMkM2RUFDQTkxQkNBOEQyOTU4MjQ5NDg1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyvAbspgeJHIulGm3ncui2tTh RBp88kvj8AlNYAhbmIGdq5Tqj8I1cU5VnrhADUhVppQm15tDpQsB3o9ATDCF81L+ 7XqM+P14AZatAi/4AqgbCNZiA0L4W36QfUaoGM5v9XU3lYDzKxnRq5vVNHEbrqkZ Fsn/c4Z6ZhIurTgxNOF+QrIgqgfqfdCPn6DleZsq1MR4dwFeqsDNGyjsn60CY+JI d4XtLsW4zHEp5WyXN3v4xfD+MuqCwokNtzRi1070FEQeYn0oNm+ge9T3ThxmLSLN 3baqYwrAq++nIBdiRbsHDVwGFY2xKYK5AvP8PneJJzzgNHRkp6xW7ENMCaN9AgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSAnZ/S90HNLG6s qRvKjSlYJJSFbDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1Vm N3FKMVFWcDhIZG9GN2I2VW5QUjI1QzdnZjNoemNCRk5FSDNkNDRDZG4vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1Vm N3FKMVFWcDhIZG9GN2I2VW5QUjI1QzdnZjNoemNCRk5FSDNkNDRDZG4vMS84MDlE OUZEMkY3NDFDRDJDNkVBQ0E5MUJDQThEMjk1ODI0OTQ4NTZDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAS67OADBAS9fBAwDQQCAAIwBwMFACgEKaAwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICbjswDQYJKoZIhvcNAQELBQADggEBADUfV0/b2AEE Kd0WbKD/+TWFXaxw0kpAf7H/FQkjFyU3ZGgfPp642Wxuq8m8ZD3A8zoiIDxHSrp/ CshVkZrd72roL2V0pI06ew2WF7Y4hf8F2zmYR06voCCCKL/DaIgiAvpDjhFYzRQA fGoZShw4QCM1D0uBYduuBPVQ/PHoFVJMHhlg7garLDaxPprxcUDyI4QWims1Hsxo LCj48SIzFUVeALt4IxkAu5xOvgZ97SPp4c38kwbk41e2v4qVDI+9L5Dye0mOIaQK 0xF8C2Um7bo8GAQZaU9msYKg+rPbqpbrIvVLbYe/XzTXb+Mw4iYFQQiSkeCM5zst ZqVBEpzM350= -----END CERTIFICATE-----Generated at Sun Jun 30 19:52:44 2024 by rpki-client on console-ams.rpki-client.org