$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer File: 8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer (raw, json) Hash identifier: EPujFSJIOH4Q886YIPaL+bxwobU1TaqyAsy0TAFv0GE= Subject key identifier: 8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2E532731EDD4ECDC296FDF7DFC4FAC7254A3E7DC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft caRepository: rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 01:33:06 +0000 Certificate not after: Fri 04 Apr 2025 01:38:06 +0000 Subordinate resources: AS: 271623 IP: 138.121.36.0/22 IP: 2804:7e6c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 03:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:53:27:31:ed:d4:ec:dc:29:6f:df:7d:fc:4f:ac:72:54:a3:e7:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 5 01:33:06 2024 GMT Not After : Apr 4 01:38:06 2025 GMT Subject: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:4c:54:da:cb:56:20:f8:11:96:c9:5e:53: 7e:79:79:68:61:b2:30:14:1e:c4:36:f1:2c:63:dd: ae:2f:4b:4c:78:26:7c:aa:5f:f3:64:87:30:1f:21: 3a:9b:af:e0:8e:1f:92:e2:2d:cf:c4:7b:b4:d8:58: 52:3c:c5:de:04:54:1b:1f:24:ab:eb:9f:47:80:26: 72:1b:85:8e:98:07:26:79:1c:c1:cd:eb:ac:95:13: 4b:8b:aa:30:1c:9c:80:ec:29:92:f4:9b:74:af:1a: a1:28:53:dd:2e:26:e1:2c:2d:0f:f6:cb:89:a3:e0: 99:41:58:8e:a2:d1:1c:c3:a3:60:53:22:3d:ba:a0: e3:05:53:08:7a:71:b7:bc:07:b7:c6:9b:7e:2f:56: ee:c2:d7:60:c5:47:08:b0:6e:c7:d1:0b:44:98:ef: 46:83:a6:b5:71:f4:d4:ac:98:01:6f:c6:56:85:0b: 4d:bd:6e:b5:a1:4a:97:47:6f:12:b8:d7:1c:a0:62: 99:50:28:38:b8:e4:59:c3:c9:f8:af:36:a4:70:c9: 63:77:ea:0c:ef:ff:7b:be:d6:43:fe:3c:b5:09:59: 2e:ff:8c:81:52:7c:5a:fd:a0:8a:0f:7f:89:8a:11: c9:02:40:3c:38:c4:42:db:7f:a7:70:1c:dd:bb:36: 46:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.36.0/22 IPv6: 2804:7e6c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271623 Signature Algorithm: sha256WithRSAEncryption 58:08:dc:d1:4e:0d:4a:11:c4:a8:f5:15:16:19:5f:03:f0:3b: 45:a9:09:89:42:67:4e:f5:44:e0:fa:fa:4f:a2:c9:9d:78:dd: e6:c0:c7:80:65:3b:b7:21:48:a2:dc:77:7c:91:aa:b9:e2:03: 38:71:8d:79:ab:93:d7:86:af:f4:1d:26:43:9b:39:2d:cc:52: 26:22:dc:b4:bc:4e:34:51:dd:19:ce:77:3f:57:51:02:cc:ad: 2c:54:8b:32:46:1d:11:b0:96:4a:c2:83:63:60:8d:d6:0b:90: d9:35:78:7c:04:bb:5c:0b:ee:a1:77:93:24:fd:f0:36:04:c6: fd:c1:ff:fb:62:9e:0a:e1:8b:14:84:58:96:a2:45:d3:39:42: a6:43:ff:a4:aa:37:94:4f:4a:b2:2b:15:2c:fe:d9:51:f4:0d: ba:1a:8a:7c:ad:1a:9f:f5:ba:2a:ca:bc:23:51:66:d2:4d:48: b9:8b:91:57:93:fc:e3:75:31:0b:0d:38:60:eb:30:c7:f1:1d: 8f:79:8b:9b:f4:ca:ff:c9:1c:76:68:07:eb:4c:c2:b3:42:d0: b3:bd:4f:d2:89:90:ed:3d:b0:d6:28:6a:9d:a6:85:67:17:f9: c9:34:58:0a:40:77:9e:d8:1d:7b:ad:0f:f1:0c:f3:e6:66:42: b4:78:8c:56 -----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgIULlMnMe3U7Nwpb999/E+sclSj59wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDUwMTMzMDZaFw0yNTA0MDQwMTM4MDZaMDMxMTAvBgNV BAMTKDhCOEI0RTFGMzI5Qjg4RjcwREUzNURBMzMwRkMxRjlDQTJCOTIwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQx0xU2stWIPgRlsleU355eWhh sjAUHsQ28Sxj3a4vS0x4JnyqX/NkhzAfITqbr+COH5LiLc/Ee7TYWFI8xd4EVBsf JKvrn0eAJnIbhY6YByZ5HMHN66yVE0uLqjAcnIDsKZL0m3SvGqEoU90uJuEsLQ/2 y4mj4JlBWI6i0RzDo2BTIj26oOMFUwh6cbe8B7fGm34vVu7C12DFRwiwbsfRC0SY 70aDprVx9NSsmAFvxlaFC029brWhSpdHbxK41xygYplQKDi45FnDyfivNqRwyWN3 6gzv/3u+1kP+PLUJWS7/jIFSfFr9oIoPf4mKEckCQDw4xELbf6dwHN27NkbzAgMB AAGjggM3MIIDMzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLi04fMpuI9w3j XaMw/B+corkghDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbUFE WDQ3QUVEeG81U1c1SHlTUTV5dmdta1Y4VDc0anFrejJYdEUxZU1qOC8xMIGJBggr BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9tQURY NDdBRUR4bzVTVzVIeVNRNXl2Z21rVjhUNzRqcWt6Mlh0RTFlTWo4LzEvOEI4QjRF MUYzMjlCODhGNzBERTM1REEzMzBGQzFGOUNBMkI5MjA4NC5tZnQwPwYIKwYBBQUH MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCinkkMA0EAgACMAcDBQAoBH5sMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwQlBzANBgkqhkiG9w0BAQsFAAOCAQEAWAjc0U4NShHEqPUVFhlf A/A7RakJiUJnTvVE4Pr6T6LJnXjd5sDHgGU7tyFIotx3fJGqueIDOHGNeauT14av 9B0mQ5s5LcxSJiLctLxONFHdGc53P1dRAsytLFSLMkYdEbCWSsKDY2CN1guQ2TV4 fAS7XAvuoXeTJP3wNgTG/cH/+2KeCuGLFIRYlqJF0zlCpkP/pKo3lE9KsisVLP7Z UfQNuhqKfK0an/W6Ksq8I1Fm0k1IuYuRV5P843UxCw04YOswx/Edj3mLm/TK/8kc dmgH60zCs0LQs71P0omQ7T2w1ihqnaaFZxf5yTRYCkB3ntgde60P8Qzz5mZCtHiM Vg== -----END CERTIFICATE-----Generated at Sun Jun 2 03:39:06 2024 by rpki-client on console-ams.rpki-client.org