$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer (raw, json) Hash identifier: aP0dTH8SpUWLehhOFOAhAy+IokpDWx2RbL0eis0WqUQ= Subject key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0DBB4C0A4C99597F7505029DFA3E81503ACEF121 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft caRepository: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 21 Apr 2024 02:58:35 +0000 Certificate not after: Sun 20 Apr 2025 03:03:35 +0000 Subordinate resources: AS: 263919 IP: 138.185.236.0/22 IP: 170.0.208.0/22 IP: 2804:27bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 09:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:bb:4c:0a:4c:99:59:7f:75:05:02:9d:fa:3e:81:50:3a:ce:f1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 21 02:58:35 2024 GMT Not After : Apr 20 03:03:35 2025 GMT Subject: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:c8:85:ba:7e:47:78:bd:c3:9e:5a:d4:99: da:b9:4b:e8:a3:b8:7b:06:01:d4:92:05:70:fc:00: 7b:d5:23:43:98:4f:00:71:72:b8:fa:3a:f1:3b:62: 97:d7:48:ca:9d:80:65:42:3f:99:d3:4a:cc:28:8d: 57:1d:ae:e6:87:20:52:8b:b8:23:a2:95:bd:c6:69: 96:00:67:02:de:a9:75:83:08:1b:4f:dc:80:21:2b: cd:08:d0:a7:d6:3a:02:2b:84:27:db:6c:6e:ab:b2: 74:16:2a:1b:e7:31:fd:93:d8:c0:ad:7a:07:ef:ff: 91:96:8a:28:5f:40:f8:d4:86:03:84:8e:73:91:65: ac:09:c6:cc:f0:e0:8c:67:54:c9:2e:26:4d:46:dd: 6b:e5:ff:35:38:a0:43:4f:0b:50:5a:17:e0:dc:ed: 99:d5:ab:6f:2b:e2:cc:6b:ee:e3:84:e3:94:5e:e8: 06:49:0d:e1:3e:0a:41:8b:0c:b0:65:41:72:ac:88: 5c:a3:d4:5b:cb:51:12:f6:ba:90:03:2f:b3:ee:8c: c0:99:64:2f:54:1d:25:fc:7e:7f:49:65:99:f8:6b: ec:28:52:69:13:cc:7d:6d:90:36:41:31:37:cd:7f: 87:d5:ac:18:bf:79:34:42:d4:44:73:97:a7:77:d9: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.236.0/22 170.0.208.0/22 IPv6: 2804:27bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263919 Signature Algorithm: sha256WithRSAEncryption 50:6a:14:f0:b4:b7:f2:33:4f:d3:b4:9b:bd:4a:fb:ee:26:c0: 51:87:b6:f4:d7:1f:e3:1a:6b:21:12:62:73:ec:90:00:53:e8: 29:bc:bf:b2:b0:ef:76:56:b5:b9:dd:08:34:aa:f1:46:f2:2b: ae:b8:2e:1c:93:84:4a:36:01:66:f7:cc:ac:2f:64:df:96:76: a6:25:eb:0b:d9:c9:2c:90:9a:a5:15:44:e3:a7:58:60:55:c0: 5e:f7:26:61:45:87:c5:56:c6:43:3e:fa:9a:61:56:fa:b0:f1: 65:8a:3b:c2:67:50:77:58:e2:da:72:ad:66:ed:ab:8d:55:d9: 1f:d4:7e:5b:6e:9e:2b:44:b7:51:1b:dc:d6:89:32:99:e2:cb: 66:40:32:1f:4f:16:e0:79:75:cf:55:f0:15:63:39:eb:77:37: 61:f0:40:23:bc:f8:23:23:6c:a9:a5:c9:c6:c8:ba:6b:9b:8d: fb:0f:28:5e:a3:54:65:5d:24:88:88:3d:2d:92:fa:c7:91:69: 50:e9:53:01:a2:30:f7:d8:4a:09:3c:31:73:8c:d6:74:f3:50: 30:20:81:47:e3:eb:a2:5e:fb:9a:20:b5:c8:d0:6d:2e:ca:eb: c9:2f:2b:fc:3e:30:61:90:ba:5e:9e:ec:8d:bd:a2:39:58:f5: 77:42:c2:2a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUDbtMCkyZWX91BQKd+j6BUDrO8SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjEwMjU4MzVaFw0yNTA0MjAwMzAzMzVaMDMxMTAvBgNV BAMTKDhCQUU5QzkwRUJDNTA4MkY4MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fciFun5HeL3DnlrUmdq5S+ij uHsGAdSSBXD8AHvVI0OYTwBxcrj6OvE7YpfXSMqdgGVCP5nTSswojVcdruaHIFKL uCOilb3GaZYAZwLeqXWDCBtP3IAhK80I0KfWOgIrhCfbbG6rsnQWKhvnMf2T2MCt egfv/5GWiihfQPjUhgOEjnORZawJxszw4IxnVMkuJk1G3Wvl/zU4oENPC1BaF+Dc 7ZnVq28r4sxr7uOE45Re6AZJDeE+CkGLDLBlQXKsiFyj1FvLURL2upADL7PujMCZ ZC9UHSX8fn9JZZn4a+woUmkTzH1tkDZBMTfNf4fVrBi/eTRC1ERzl6d32bGFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLrpyQ68UIL4Ag Ve+qY2DGYb+FzjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGNH Mm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRj RzJvYkVVWWZNS2hXQVg0NTduRmd6b1RYWVN0aUxLNERhRTM0VkRTSzg1LzEvOEJB RTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2MUJGODVDRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCirnsAwQCqgDQMA0EAgACMAcDBQAoBCe8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQG7zANBgkqhkiG9w0BAQsFAAOCAQEAUGoU8LS3 8jNP07SbvUr77ibAUYe29Ncf4xprIRJic+yQAFPoKby/srDvdla1ud0INKrxRvIr rrguHJOESjYBZvfMrC9k35Z2piXrC9nJLJCapRVE46dYYFXAXvcmYUWHxVbGQz76 mmFW+rDxZYo7wmdQd1ji2nKtZu2rjVXZH9R+W26eK0S3URvc1okymeLLZkAyH08W 4Hl1z1XwFWM563c3YfBAI7z4IyNsqaXJxsi6a5uN+w8oXqNUZV0kiIg9LZL6x5Fp UOlTAaIw99hKCTwxc4zWdPNQMCCBR+Prol77miC1yNBtLsrryS8r/D4wYZC6Xp7s jb2iOVj1d0LCKg== -----END CERTIFICATE-----Generated at Mon Jul 1 06:20:37 2024 by rpki-client on console-fra.rpki-client.org