$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8A7E19F4616DCCE6B7D7AE1FB425E1BA4D172100.cer File: 8A7E19F4616DCCE6B7D7AE1FB425E1BA4D172100.cer (raw, json) Hash identifier: iABMX6YCCB+qUeJjt5w9nQH4tAJM5UHxmGwVLzQZI00= Subject key identifier: 8A:7E:19:F4:61:6D:CC:E6:B7:D7:AE:1F:B4:25:E1:BA:4D:17:21:00 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 10292F9271F14F79E87050B44A2C4323A8024C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/8A7E19F4616DCCE6B7D7AE1FB425E1BA4D172100.mft caRepository: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 02 May 2024 17:00:32 +0000 Certificate not after: Thu 01 May 2025 17:05:32 +0000 Subordinate resources: AS: 263442 IP: 177.10.92.0/22 IP: 177.91.144.0/20 IP: 2804:11d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:29:2f:92:71:f1:4f:79:e8:70:50:b4:4a:2c:43:23:a8:02:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 2 17:00:32 2024 GMT Not After : May 1 17:05:32 2025 GMT Subject: CN=8A7E19F4616DCCE6B7D7AE1FB425E1BA4D172100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:02:79:de:4f:f2:10:bd:dc:e8:c8:a7:27:0d: 58:70:1e:3c:57:bb:36:b9:65:b6:0b:d2:b3:89:9f: 49:8b:81:53:96:67:cc:82:a3:57:47:78:c2:dd:ec: f9:4f:6e:20:02:6b:01:8c:ee:2f:37:b3:ef:93:74: ba:9d:ce:36:0c:e1:ed:48:6e:de:2b:fc:7e:33:5a: d8:e1:45:df:35:52:91:70:d0:e4:5b:cb:5f:80:13: da:00:7e:c3:f1:c2:3d:44:ef:70:84:fd:85:19:50: 76:d3:08:95:06:4c:20:9b:95:99:bd:34:50:4b:00: 5b:e9:d9:40:7d:a0:10:b6:05:6d:71:62:3a:62:bb: 9f:4f:05:f0:ac:d7:68:f3:dc:47:59:cd:73:5a:dd: ae:9f:b7:f8:c4:e3:e7:6d:e3:cb:8e:bd:ae:bd:10: d7:2a:72:8d:56:ce:39:af:af:bd:e9:f2:1c:75:8d: 87:95:0c:45:83:f4:e0:ef:cd:71:ca:74:f8:4f:0f: a0:34:de:40:57:6e:17:05:96:36:49:63:ad:f2:53: 40:1e:79:95:a9:3b:c1:44:1b:fa:f8:54:f1:97:0f: 9b:9d:2f:94:4b:0c:eb:bd:8d:8e:bb:2c:3e:ee:e4: 40:0a:26:c2:8f:50:b1:ae:dd:bf:73:10:4e:a7:c8: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:7E:19:F4:61:6D:CC:E6:B7:D7:AE:1F:B4:25:E1:BA:4D:17:21:00 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/8A7E19F4616DCCE6B7D7AE1FB425E1BA4D172100.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.10.92.0/22 177.91.144.0/20 IPv6: 2804:11d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263442 Signature Algorithm: sha256WithRSAEncryption a1:e3:49:6e:92:1d:22:96:7b:45:08:6d:bd:08:c6:cf:d4:d7: 67:f5:52:a9:28:65:6c:a6:2e:84:91:7b:4c:f8:40:81:47:a4: 11:18:ec:a1:e1:53:cb:62:0b:65:22:b7:b8:fa:62:77:17:69: d1:d8:ba:32:de:0f:46:e7:f9:82:ca:54:cb:53:c9:b1:ee:5c: 5c:26:2e:ab:87:c3:43:e5:29:8b:35:0f:ae:a9:95:f6:1a:93: ca:f3:fa:8f:5a:d5:6f:3b:fb:d5:8a:66:ce:67:6d:53:65:5a: 7c:d8:90:4d:e0:ad:0f:06:0e:d3:18:f4:c0:bb:49:ad:86:73: 09:9b:39:b0:54:ee:9b:4b:d8:7d:47:46:0c:05:9b:b5:11:46: 62:29:e3:13:9d:d9:27:71:37:d5:e8:25:f2:5c:63:83:af:4b: 17:65:0d:0d:de:62:36:94:99:8c:cc:13:3d:2c:9c:39:9f:ca: 74:dc:db:e5:b1:d2:ee:7d:16:8a:e9:ef:f1:39:8f:ab:11:50: 66:34:f7:a0:9e:eb:14:54:1d:c6:77:4e:1f:be:72:00:15:38: a2:99:2c:64:8f:b9:8a:ab:2c:61:14:fa:16:b7:a9:fe:d4:e6: 7f:33:94:9b:e1:15:2c:91:ae:40:2d:92:5c:eb:63:b8:4a:4b: 59:fd:38:5a -----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgITECkvknHxT3nocFC0SixDI6gCTDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3 Q0E4QTRCMB4XDTI0MDUwMjE3MDAzMloXDTI1MDUwMTE3MDUzMlowMzExMC8GA1UE AxMoOEE3RTE5RjQ2MTZEQ0NFNkI3RDdBRTFGQjQyNUUxQkE0RDE3MjEwMDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPYCed5P8hC93OjIpycNWHAePFe7 NrlltgvSs4mfSYuBU5ZnzIKjV0d4wt3s+U9uIAJrAYzuLzez75N0up3ONgzh7Uhu 3iv8fjNa2OFF3zVSkXDQ5FvLX4AT2gB+w/HCPUTvcIT9hRlQdtMIlQZMIJuVmb00 UEsAW+nZQH2gELYFbXFiOmK7n08F8KzXaPPcR1nNc1rdrp+3+MTj523jy469rr0Q 1ypyjVbOOa+vvenyHHWNh5UMRYP04O/Nccp0+E8PoDTeQFduFwWWNkljrfJTQB55 lak7wUQb+vhU8ZcPm50vlEsM672NjrssPu7kQAomwo9Qsa7dv3MQTqfI6wsCAwEA AaOCAz4wggM6MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFIp+GfRhbczmt9eu H7Ql4bpNFyEAMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBPgYIKwYBBQUHAQsEggEwMIIBLDBdBggr BgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9xOWc2 QVFVVmVVZGhZSlFEVGY4MXFjU2VKam5DTUtvZlgxNDFHUkRFbW8xLzAvMIGJBggr BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9xOWc2 QVFVVmVVZGhZSlFEVGY4MXFjU2VKam5DTUtvZlgxNDFHUkRFbW8xLzAvOEE3RTE5 RjQ2MTZEQ0NFNkI3RDdBRTFGQjQyNUUxQkE0RDE3MjEwMC5tZnQwPwYIKwYBBQUH MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/ BCUwIzASBAIAATAMAwQCsQpcAwQEsVuQMA0EAgACMAcDBQAoBBHUMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwQFEjANBgkqhkiG9w0BAQsFAAOCAQEAoeNJbpIdIpZ7 RQhtvQjGz9TXZ/VSqShlbKYuhJF7TPhAgUekERjsoeFTy2ILZSK3uPpidxdp0di6 Mt4PRuf5gspUy1PJse5cXCYuq4fDQ+UpizUPrqmV9hqTyvP6j1rVbzv71Ypmzmdt U2VafNiQTeCtDwYO0xj0wLtJrYZzCZs5sFTum0vYfUdGDAWbtRFGYinjE53ZJ3E3 1egl8lxjg69LF2UNDd5iNpSZjMwTPSycOZ/KdNzb5bHS7n0Wiunv8TmPqxFQZjT3 oJ7rFFQdxndOH75yABU4opksZI+5iqssYRT6Frep/tTmfzOUm+EVLJGuQC2SXOtj uEpLWf04Wg== -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:39 2024 by rpki-client on console-ams.rpki-client.org