$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.cer File: 82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.cer (raw, json) Hash identifier: kjLkLhMfksKlkYD1A2z15lXYyI06fF3YhLjKGVmWa8s= Subject key identifier: 82:C0:DC:A4:53:DA:01:49:23:0A:B2:0F:F5:CF:0E:95:CD:57:7E:8B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6607256C2EE727E35580BD182C27A6902F5FCD9F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.mft caRepository: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:14:00 +0000 Certificate not after: Thu 03 Apr 2025 02:19:00 +0000 Subordinate resources: AS: 61862 IP: 138.185.172.0/22 IP: 201.150.120.0/22 IP: 2804:1a7c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:07:25:6c:2e:e7:27:e3:55:80:bd:18:2c:27:a6:90:2f:5f:cd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:14:00 2024 GMT Not After : Apr 3 02:19:00 2025 GMT Subject: CN=82C0DCA453DA0149230AB20FF5CF0E95CD577E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:ce:b0:d3:a2:30:22:f2:d1:0d:08:db:41: cc:24:21:f6:8f:d0:f0:d0:7e:51:d8:c3:3b:10:43: 85:ee:a8:73:ac:51:b9:da:95:ca:2d:f7:08:cf:6c: d2:76:c1:81:aa:ee:fa:75:5d:97:ea:34:4d:bd:6e: 16:23:64:b7:a2:1c:14:54:5d:ae:20:76:31:34:9a: bb:91:3e:90:c6:74:f3:3d:2c:c7:d0:f0:7c:c9:4f: d0:a9:e1:3e:6c:e3:5c:da:f7:d1:85:a1:69:a6:d2: 67:9d:c7:d2:a3:ba:87:df:fc:eb:ab:df:fe:64:81: ae:b3:09:91:ff:2a:3d:af:bd:35:10:7f:44:c5:b7: d7:72:9c:87:7a:4c:7e:85:44:bc:2a:85:99:8e:c6: bc:56:2c:ee:ba:ff:21:37:db:a3:7e:36:15:dc:8f: ee:88:b0:21:a8:83:1b:35:a3:14:03:c5:3c:d6:f8: d0:39:bc:71:dc:4b:b4:bf:61:5a:4d:3e:c2:62:0a: 8c:c6:e2:41:a1:f2:8c:82:13:04:07:24:3f:f7:93: 51:59:9a:5d:78:a6:ad:53:13:06:ce:b1:d3:44:14: da:6e:b1:fd:13:ef:b4:91:7f:23:0e:c7:1b:65:2f: 1b:e2:c3:33:57:95:20:1e:c1:51:cf:a9:07:0a:c5: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:C0:DC:A4:53:DA:01:49:23:0A:B2:0F:F5:CF:0E:95:CD:57:7E:8B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.172.0/22 201.150.120.0/22 IPv6: 2804:1a7c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61862 Signature Algorithm: sha256WithRSAEncryption 7b:79:9c:ba:97:4d:0c:cb:42:b9:30:dd:62:8d:8d:6a:aa:59: ab:7d:17:84:c5:87:eb:d2:92:8e:55:ab:2e:13:8a:99:52:9c: 67:be:9f:a2:83:33:3b:a1:35:6e:10:2d:41:f3:00:d6:5c:78: fe:67:8f:77:73:09:5a:0c:0d:2a:11:97:0e:5c:05:6c:35:d0: db:24:c4:eb:04:9f:9a:59:f9:76:23:a4:41:71:2f:bd:c1:16: cc:ed:b9:89:bd:28:94:95:73:b2:77:9c:2b:ea:b7:54:4b:27: 70:da:67:1a:84:6c:d3:d0:e3:3c:e5:c2:81:a2:94:47:7d:94: 6f:d0:36:0f:0b:47:71:15:e9:0a:79:91:7b:d4:dc:10:df:d0: 03:73:7e:4c:c7:08:90:41:80:cc:d4:27:8a:89:d1:c2:38:b5: 72:39:f2:96:39:87:f7:6a:c7:cf:7b:1b:55:eb:59:82:22:cd: e1:48:85:70:02:c8:49:ff:df:dd:82:63:f4:d7:48:bd:db:4f: 9c:5e:81:2b:01:b4:6c:0c:de:67:a4:4e:7f:82:16:7b:ec:b5: bc:47:09:47:3d:f1:45:53:23:66:d3:f9:55:5e:21:25:f2:5f: b5:f0:a6:68:70:ab:9f:ff:b2:ec:49:a9:d5:00:35:26:3a:ee: b3:53:8a:e3 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUZgclbC7nJ+NVgL0YLCemkC9fzZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjE0MDBaFw0yNTA0MDMwMjE5MDBaMDMxMTAvBgNV BAMTKDgyQzBEQ0E0NTNEQTAxNDkyMzBBQjIwRkY1Q0YwRTk1Q0Q1NzdFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCM6w06IwIvLRDQjbQcwkIfaP 0PDQflHYwzsQQ4XuqHOsUbnalcot9wjPbNJ2wYGq7vp1XZfqNE29bhYjZLeiHBRU Xa4gdjE0mruRPpDGdPM9LMfQ8HzJT9Cp4T5s41za99GFoWmm0medx9Kjuoff/Our 3/5kga6zCZH/Kj2vvTUQf0TFt9dynId6TH6FRLwqhZmOxrxWLO66/yE326N+NhXc j+6IsCGogxs1oxQDxTzW+NA5vHHcS7S/YVpNPsJiCozG4kGh8oyCEwQHJD/3k1FZ ml14pq1TEwbOsdNEFNpusf0T77SRfyMOxxtlLxviwzNXlSAewVHPqQcKxak1AgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSCwNykU9oBSSMK sg/1zw6VzVd+izAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU29o dmpGSEtYcHBrTlFrN1FicXllak41ZlBrWjJjR3JQNDlyNnVBUXZjcy8xLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU29o dmpGSEtYcHBrTlFrN1FicXllak41ZlBrWjJjR3JQNDlyNnVBUXZjcy8xLzgyQzBE Q0E0NTNEQTAxNDkyMzBBQjIwRkY1Q0YwRTk1Q0Q1NzdFOEIubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAoq5rAMEAsmWeDANBAIAAjAHAwUAKAQafDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA8aYwDQYJKoZIhvcNAQELBQADggEBAHt5nLqXTQzL Qrkw3WKNjWqqWat9F4TFh+vSko5Vqy4TiplSnGe+n6KDMzuhNW4QLUHzANZceP5n j3dzCVoMDSoRlw5cBWw10NskxOsEn5pZ+XYjpEFxL73BFsztuYm9KJSVc7J3nCvq t1RLJ3DaZxqEbNPQ4zzlwoGilEd9lG/QNg8LR3EV6Qp5kXvU3BDf0ANzfkzHCJBB gMzUJ4qJ0cI4tXI58pY5h/dqx897G1XrWYIizeFIhXACyEn/392CY/TXSL3bT5xe gSsBtGwM3mekTn+CFnvstbxHCUc98UVTI2bT+VVeISXyX7Xwpmhwq5//suxJqdUA NSY67rNTiuM= -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:31 2024 by rpki-client on console-fra.rpki-client.org