$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.cer File: 85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.cer (raw, json) Hash identifier: 9crXTg8kMxqfs3oroc16T5Xj81T1hvBCJ/U7YJ5JK2Y= Subject key identifier: 85:DB:34:EB:E6:98:EE:D5:7C:70:A2:DA:30:F6:87:0F:D1:E7:4C:E3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 734FE1DF8374ED99193288147B67AAE5AD1E097D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.mft caRepository: rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 00:49:03 +0000 Certificate not after: Fri 04 Apr 2025 00:54:03 +0000 Subordinate resources: AS: 264592 IP: 200.170.76.0/22 IP: 2804:221c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Jul 2024 20:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4f:e1:df:83:74:ed:99:19:32:88:14:7b:67:aa:e5:ad:1e:09:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 5 00:49:03 2024 GMT Not After : Apr 4 00:54:03 2025 GMT Subject: CN=85DB34EBE698EED57C70A2DA30F6870FD1E74CE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:09:e1:e7:f2:88:73:c8:55:32:f3:68:8d:b0: 82:99:8f:c0:30:cb:26:a7:61:4a:33:2b:d3:9a:ad: a5:c8:0c:14:a6:f1:e9:bf:e0:b7:2b:07:91:5b:07: 39:b2:95:3e:d5:d5:2e:a8:0b:5a:d8:ae:f2:68:7a: 40:a7:34:1a:55:0c:be:0a:f9:bc:4f:40:67:ae:94: c9:dd:3d:e1:db:78:4b:9b:fe:ba:d9:2e:cd:e9:09: a5:2a:bb:77:35:69:67:33:e7:47:34:5c:ae:3f:04: b0:6a:30:91:c6:53:90:22:e7:b3:4e:82:d1:47:04: 32:5b:ba:07:42:8b:07:8b:5a:9b:1d:42:06:97:17: b9:ec:80:bd:7b:e6:6e:fe:9f:14:51:84:e8:40:6e: 0a:ab:d6:7e:a5:ea:a3:66:7e:2a:32:b3:a5:1f:4c: e5:14:10:82:dc:8f:61:fa:fc:3f:d6:21:5f:75:aa: 12:c2:f3:74:98:06:6c:09:22:1f:53:1b:cc:8a:39: 66:a7:ab:1c:f6:b8:83:6a:3e:88:37:83:27:06:34: 10:c4:2e:59:53:dd:9e:62:ea:78:5b:cf:81:5a:86: 2b:8d:38:a5:c2:6a:2d:2a:e2:3c:c9:55:3b:52:54: a1:50:0c:d1:4f:ad:0e:75:f8:a2:23:20:e5:2f:2f: d5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:DB:34:EB:E6:98:EE:D5:7C:70:A2:DA:30:F6:87:0F:D1:E7:4C:E3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.170.76.0/22 IPv6: 2804:221c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264592 Signature Algorithm: sha256WithRSAEncryption 47:f9:ae:19:00:35:09:04:dd:3c:56:39:4c:54:5e:85:4e:1b: 16:6c:e6:80:26:f0:8b:34:da:a8:d9:07:6d:2e:8b:2b:b6:bc: 04:ae:53:04:bc:39:8a:7f:09:f0:d5:81:5b:3f:d8:fa:e2:65: 7a:8c:8c:2b:65:8c:42:e0:d7:66:2c:77:5b:27:03:d8:69:44: 3c:7a:21:fe:54:fb:2c:f6:c6:d2:0f:2a:b0:b7:6e:6e:e6:00: f0:6a:c0:71:b2:7f:bf:9c:64:a6:37:4f:bf:85:e7:e0:ed:d5: c7:c2:57:8a:1a:64:89:65:dd:68:8d:c8:ba:58:2e:33:ed:21: 7b:0b:90:27:27:f5:49:94:fe:58:9e:a6:41:33:5b:08:13:0a: e4:d0:6f:f7:4f:81:09:20:39:8b:8f:69:5d:a5:38:8c:3a:dd: c7:31:74:da:6d:23:d6:d4:d8:25:48:6a:b4:be:db:05:04:30: 9b:1e:d9:00:52:b9:b0:58:72:d3:51:27:a0:25:1b:54:05:77: 48:f2:61:f1:9d:15:92:f4:e4:93:24:15:49:24:e0:1f:b9:2b: 52:f5:19:2d:bd:48:fe:6d:5b:69:05:4d:45:92:f8:a2:ab:ff: e8:52:25:51:2d:9a:66:81:76:32:7b:bf:4e:92:5a:8f:c7:ab: e0:d8:f4:88 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUc0/h34N07ZkZMogUe2eq5a0eCX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDUwMDQ5MDNaFw0yNTA0MDQwMDU0MDNaMDMxMTAvBgNV BAMTKDg1REIzNEVCRTY5OEVFRDU3QzcwQTJEQTMwRjY4NzBGRDFFNzRDRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoCeHn8ohzyFUy82iNsIKZj8Aw yyanYUozK9OaraXIDBSm8em/4LcrB5FbBzmylT7V1S6oC1rYrvJoekCnNBpVDL4K +bxPQGeulMndPeHbeEub/rrZLs3pCaUqu3c1aWcz50c0XK4/BLBqMJHGU5Ai57NO gtFHBDJbugdCiweLWpsdQgaXF7nsgL175m7+nxRRhOhAbgqr1n6l6qNmfioys6Uf TOUUEILcj2H6/D/WIV91qhLC83SYBmwJIh9TG8yKOWanqxz2uINqPog3gycGNBDE LllT3Z5i6nhbz4FahiuNOKXCai0q4jzJVTtSVKFQDNFPrQ51+KIjIOUvL9VTAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSF2zTr5pju1Xxw otow9ocP0edM4zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnZX ZThQZkVldEpyM1Z2M0ZETjVxaEtXYVZvNXB5bTNRQ3pHMkJzaUVwU1EvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ2 V2U4UGZFZXRKcjNWdjNGRE41cWhLV2FWbzVweW0zUUN6RzJCc2lFcFNRLzEvODVE QjM0RUJFNjk4RUVENTdDNzBBMkRBMzBGNjg3MEZEMUU3NENFMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyKpMMA0EAgACMAcDBQAoBCIcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQJkDANBgkqhkiG9w0BAQsFAAOCAQEAR/muGQA1CQTdPFY5 TFRehU4bFmzmgCbwizTaqNkHbS6LK7a8BK5TBLw5in8J8NWBWz/Y+uJleoyMK2WM QuDXZix3WycD2GlEPHoh/lT7LPbG0g8qsLdubuYA8GrAcbJ/v5xkpjdPv4Xn4O3V x8JXihpkiWXdaI3IulguM+0hewuQJyf1SZT+WJ6mQTNbCBMK5NBv90+BCSA5i49p XaU4jDrdxzF02m0j1tTYJUhqtL7bBQQwmx7ZAFK5sFhy01EnoCUbVAV3SPJh8Z0V kvTkkyQVSSTgH7krUvUZLb1I/m1baQVNRZL4oqv/6FIlUS2aZoF2Mnu/TpJaj8er 4Nj0iA== -----END CERTIFICATE-----Generated at Sun Jun 30 18:31:19 2024 by rpki-client on console-fra.rpki-client.org