$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/88E960B3D235DBDC14E2A9BB84E6EF99BE5139FF.cer File: 88E960B3D235DBDC14E2A9BB84E6EF99BE5139FF.cer (raw, json) Hash identifier: Jz0s3VckEiffTr1pL1Mjjkr/9GL3vCYvpI6cg8HRqds= Subject key identifier: 88:E9:60:B3:D2:35:DB:DC:14:E2:A9:BB:84:E6:EF:99:BE:51:39:FF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0BC4ED72721D5E75C19A330513DA0480D8AF8E87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/1/88E960B3D235DBDC14E2A9BB84E6EF99BE5139FF.mft caRepository: rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 05:08:18 +0000 Certificate not after: Thu 03 Apr 2025 05:13:18 +0000 Subordinate resources: AS: 264178 IP: 138.99.72.0/22 IP: 2804:23b4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c4:ed:72:72:1d:5e:75:c1:9a:33:05:13:da:04:80:d8:af:8e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 05:08:18 2024 GMT Not After : Apr 3 05:13:18 2025 GMT Subject: CN=88E960B3D235DBDC14E2A9BB84E6EF99BE5139FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:de:ab:c5:14:57:d0:73:71:ea:a0:4a:1b: 49:4e:99:8b:3d:c3:99:16:6b:6f:93:06:a3:4c:46: 43:34:e7:d8:cc:84:a9:d4:b8:c9:e1:d5:c6:2d:c4: f8:27:c5:7e:7a:58:79:13:4f:81:46:b0:00:af:a5: d0:5f:ef:cb:0e:9d:37:a2:30:ea:67:4b:1b:62:88: 38:5b:12:4a:1d:16:d0:60:48:fd:94:a0:c4:89:68: be:f8:bd:ba:9e:2d:38:f8:16:f2:78:1b:bd:42:ed: 50:e5:19:22:ab:38:4b:4a:f4:74:98:2e:9f:1d:69: 90:29:6e:d4:53:b4:c7:5e:b7:eb:d9:e3:a8:46:e7: 9b:da:f2:79:3a:27:3d:5e:2d:0b:32:3d:aa:ef:4c: 95:da:cd:ff:6f:2f:d2:c9:d8:6b:aa:af:a1:1d:86: c4:17:ad:a1:79:30:be:94:ae:0a:4e:12:52:99:7e: 64:0b:d3:89:a0:db:a1:ff:9e:c3:9a:15:2d:41:fd: c5:b0:79:39:a0:38:ba:2f:1b:89:c5:47:a8:f9:65: 60:b2:35:9d:a8:2f:3f:31:26:24:de:a6:8c:a2:34: a2:49:2a:7d:69:fc:31:64:8f:07:62:a9:f1:b2:f1: 40:4c:e5:4a:d1:10:d5:d7:cf:01:d2:69:43:b5:54: 1c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:E9:60:B3:D2:35:DB:DC:14:E2:A9:BB:84:E6:EF:99:BE:51:39:FF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/1/88E960B3D235DBDC14E2A9BB84E6EF99BE5139FF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.72.0/22 IPv6: 2804:23b4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264178 Signature Algorithm: sha256WithRSAEncryption bb:7d:31:ab:5f:d9:81:08:2b:a0:51:a9:59:76:7b:bc:c3:6a: f6:56:b9:91:ff:f5:4b:af:e7:a5:46:ad:7e:10:2f:5a:f9:0d: 81:0b:1e:a7:5f:64:c6:9a:06:4a:9a:9b:56:20:7f:52:78:df: 08:b1:52:a6:f3:b4:3d:58:d4:14:fa:2f:14:9e:de:5a:c0:95: 98:17:96:bb:d6:4a:38:18:e3:b7:2c:8e:e7:18:ea:1a:ca:c7: 27:12:d7:99:16:d3:2c:8b:58:5a:22:65:b0:06:f0:80:53:f8: 07:c1:95:0f:3c:40:f9:6a:4c:aa:6b:9c:50:a4:60:3c:04:d8: 9f:74:25:78:96:f2:af:1e:ae:52:99:55:37:04:a9:7c:90:b4: 62:ac:b0:81:ac:01:96:46:ad:93:7c:e4:96:6a:0b:7d:d9:57: 12:c1:fe:70:25:ec:aa:09:56:14:9b:47:08:16:f2:c1:78:44: 07:c7:89:01:de:2c:9f:7a:6f:0e:85:11:35:4c:8a:70:aa:18: e4:0c:61:25:9b:c8:c9:af:fe:11:c1:80:1f:68:89:50:b4:56: 19:15:d1:96:90:59:65:a8:70:85:85:94:88:67:57:30:6e:7f: 46:71:94:0b:94:3b:1a:95:5a:38:e6:f4:e1:b1:ac:5a:3e:85: 14:48:1b:77 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUC8TtcnIdXnXBmjMFE9oEgNivjocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNTA4MThaFw0yNTA0MDMwNTEzMThaMDMxMTAvBgNV BAMTKDg4RTk2MEIzRDIzNURCREMxNEUyQTlCQjg0RTZFRjk5QkU1MTM5RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwiN6rxRRX0HNx6qBKG0lOmYs9 w5kWa2+TBqNMRkM059jMhKnUuMnh1cYtxPgnxX56WHkTT4FGsACvpdBf78sOnTei MOpnSxtiiDhbEkodFtBgSP2UoMSJaL74vbqeLTj4FvJ4G71C7VDlGSKrOEtK9HSY Lp8daZApbtRTtMdet+vZ46hG55va8nk6Jz1eLQsyParvTJXazf9vL9LJ2Guqr6Ed hsQXraF5ML6UrgpOElKZfmQL04mg26H/nsOaFS1B/cWweTmgOLovG4nFR6j5ZWCy NZ2oLz8xJiTepoyiNKJJKn1p/DFkjwdiqfGy8UBM5UrRENXXzwHSaUO1VBwfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSI6WCz0jXb3BTi qbuE5u+ZvlE5/zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Nv SFY0ZlJMdEI0aWFIRVI1OWZLdGlqM1ZCQ1M2c3FMa1Z4TlhaUlhlRDIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dz b0hWNGZSTHRCNGlhSEVSNTlmS3RpajNWQkNTNnNxTGtWeE5YWlJYZUQyLzEvODhF OTYwQjNEMjM1REJEQzE0RTJBOUJCODRFNkVGOTlCRTUxMzlGRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCimNIMA0EAgACMAcDBQAoBCO0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQH8jANBgkqhkiG9w0BAQsFAAOCAQEAu30xq1/ZgQgroFGp WXZ7vMNq9la5kf/1S6/npUatfhAvWvkNgQsep19kxpoGSpqbViB/UnjfCLFSpvO0 PVjUFPovFJ7eWsCVmBeWu9ZKOBjjtyyO5xjqGsrHJxLXmRbTLItYWiJlsAbwgFP4 B8GVDzxA+WpMqmucUKRgPATYn3QleJbyrx6uUplVNwSpfJC0YqywgawBlkatk3zk lmoLfdlXEsH+cCXsqglWFJtHCBbywXhEB8eJAd4sn3pvDoURNUyKcKoY5AxhJZvI ya/+EcGAH2iJULRWGRXRlpBZZahwhYWUiGdXMG5/RnGUC5Q7GpVaOOb04bGsWj6F FEgbdw== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:32 2024 by rpki-client on console-fra.rpki-client.org