$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer File: 821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer (raw, json) Hash identifier: YbCc7u3Oy+5Uw+KcKsfZn75IhCLP1XRuWZyH6wDAkf0= Subject key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3C1EE622ED6C9BD7BD9FE8C919D2EC01AD58A5B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.mft caRepository: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 15:05:30 +0000 Certificate not after: Thu 03 Apr 2025 15:10:30 +0000 Subordinate resources: AS: 263026 IP: 138.36.20.0/22 IP: 170.83.80.0/22 IP: 186.249.208.0/21 IP: 2804:a28::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 18 Jun 2024 12:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1e:e6:22:ed:6c:9b:d7:bd:9f:e8:c9:19:d2:ec:01:ad:58:a5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 15:05:30 2024 GMT Not After : Apr 3 15:10:30 2025 GMT Subject: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:0c:15:6b:73:9c:3c:34:c9:4a:03:df:78: e2:5b:5c:84:27:54:2c:7f:19:1b:70:5c:da:e6:cc: 14:66:46:6d:3a:12:8e:ad:b7:5d:d0:41:10:70:f5: 13:ab:47:56:58:ff:68:75:8b:db:be:f8:14:a6:f4: 26:44:b6:80:d3:e2:15:43:c4:71:39:04:09:c5:bb: 2f:e8:a7:9c:0b:b2:75:fc:d6:ea:b6:a5:e9:a9:56: 22:6d:4f:5c:af:d2:4a:1c:39:00:eb:4a:49:e4:5a: 9c:fa:97:3b:f6:26:2b:52:e5:91:eb:d6:b8:23:83: f4:fa:41:3a:0a:ae:9c:52:61:b6:b3:7b:3a:e4:e8: b3:54:44:e4:fc:00:68:da:45:85:d4:77:7b:14:2e: 39:90:cd:ae:3c:7c:10:a2:92:05:8a:b0:3a:ed:17: 05:8c:c7:03:0c:85:d9:05:56:a6:9d:01:f0:a7:fc: 75:ed:f7:34:64:b1:92:31:38:e8:d9:81:81:8e:05: 05:20:7a:0e:e3:2a:98:94:b3:6f:d6:79:81:ab:14: 47:3f:d9:e3:d2:98:9f:ee:a1:1e:32:51:4b:9c:d0: a9:ed:e4:87:e7:a8:97:e3:fc:f0:b0:64:88:65:16: b5:39:2c:cb:14:8c:2a:b1:ca:3b:e6:dc:c0:95:a7: ba:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.20.0/22 170.83.80.0/22 186.249.208.0/21 IPv6: 2804:a28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263026 Signature Algorithm: sha256WithRSAEncryption c5:91:10:b9:41:ac:fc:1d:01:b7:53:c5:23:a4:40:e2:69:32: a0:8c:24:5c:33:8c:8b:9c:f1:f7:e6:79:57:78:d0:df:a0:32: 42:4b:62:50:58:a7:3e:6d:50:75:65:1a:c5:a7:51:81:c9:c1: fe:d2:10:c6:ce:9a:bc:e8:b8:25:81:9a:8b:3d:bf:bf:37:ac: ee:4e:a0:40:44:9a:27:f8:eb:1e:80:a0:95:13:b0:53:9e:7d: a2:e8:22:76:c5:7a:e3:1f:55:35:1b:1d:00:31:4f:d7:f8:2f: 17:58:14:52:5e:2e:53:be:b6:ae:98:ef:04:8a:cb:30:42:0a: a3:74:a6:89:7e:ba:21:b2:f4:2d:8d:77:e3:60:d2:5f:1f:b4: d0:cc:58:58:49:c5:1f:27:fa:5a:4f:a4:30:a0:8d:34:c4:0b: 8c:dc:e8:f9:f8:60:49:70:ec:b4:4b:3b:a6:06:3b:3c:30:98: 9c:1f:a3:c1:f8:15:0f:79:94:d8:4c:af:ec:2d:e7:6e:f2:40: de:d8:d3:36:5f:18:25:2c:9c:a8:4b:d0:4c:71:df:8a:4c:dc: 7e:69:30:05:dc:73:5d:1b:61:20:99:8d:1e:e0:b3:29:f2:42: c7:23:f4:e4:d6:52:28:dc:6f:10:27:85:cc:78:a4:80:b9:8b: 35:60:15:c9 -----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgIUPB7mIu1sm9e9n+jJGdLsAa1YpbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNTA1MzBaFw0yNTA0MDMxNTEwMzBaMDMxMTAvBgNV BAMTKDgyMUFDMEJEQUFCQ0NFMjFCMjdCNkNFMDUxRTg0QjNCNDBEQkEzNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeswwVa3OcPDTJSgPfeOJbXIQn VCx/GRtwXNrmzBRmRm06Eo6tt13QQRBw9ROrR1ZY/2h1i9u++BSm9CZEtoDT4hVD xHE5BAnFuy/op5wLsnX81uq2pempViJtT1yv0kocOQDrSknkWpz6lzv2JitS5ZHr 1rgjg/T6QToKrpxSYbazezrk6LNUROT8AGjaRYXUd3sULjmQza48fBCikgWKsDrt FwWMxwMMhdkFVqadAfCn/HXt9zRksZIxOOjZgYGOBQUgeg7jKpiUs2/WeYGrFEc/ 2ePSmJ/uoR4yUUuc0Knt5IfnqJfj/PCwZIhlFrU5LMsUjCqxyjvm3MCVp7phAgMB AAGjggNDMIIDPzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSCGsC9qrzOIbJ7 bOBR6Es7QNujSDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veFhw c0FndnA2OXRLbXAzUDVCRTlZZGlkdUF6MmRCTjhFV2FuMXRWQUNiYy8xMIGJBggr BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94WHBz QWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzEvODIxQUMw QkRBQUJDQ0UyMUIyN0I2Q0UwNTFFODRCM0I0MERCQTM0OC5tZnQwPwYIKwYBBQUH MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/ BCswKTAYBAIAATASAwQCiiQUAwQCqlNQAwQDuvnQMA0EAgACMAcDBQAoBAooMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQDcjANBgkqhkiG9w0BAQsFAAOCAQEAxZEQ uUGs/B0Bt1PFI6RA4mkyoIwkXDOMi5zx9+Z5V3jQ36AyQktiUFinPm1QdWUaxadR gcnB/tIQxs6avOi4JYGaiz2/vzes7k6gQESaJ/jrHoCglROwU559ougidsV64x9V NRsdADFP1/gvF1gUUl4uU762rpjvBIrLMEIKo3SmiX66IbL0LY1342DSXx+00MxY WEnFHyf6Wk+kMKCNNMQLjNzo+fhgSXDstEs7pgY7PDCYnB+jwfgVD3mU2Eyv7C3n bvJA3tjTNl8YJSycqEvQTHHfikzcfmkwBdxzXRthIJmNHuCzKfJCxyP05NZSKNxv ECeFzHikgLmLNWAVyQ== -----END CERTIFICATE-----Generated at Mon Jun 17 14:51:42 2024 by rpki-client on console-ams.rpki-client.org