$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer File: 8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer (raw, json) Hash identifier: k/ukdZTeuWD7frTwQPpk4gPMnFyfnpkq2kZYTs5Pb3Q= Subject key identifier: 8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 30BA350F142CFB70508022F54140D75A4124F606 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft caRepository: rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 03:17:00 +0000 Certificate not after: Thu 03 Apr 2025 03:22:00 +0000 Subordinate resources: AS: 263574 IP: 138.94.84.0/22 IP: 177.185.40.0/21 IP: 2804:f44::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 02:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ba:35:0f:14:2c:fb:70:50:80:22:f5:41:40:d7:5a:41:24:f6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 03:17:00 2024 GMT Not After : Apr 3 03:22:00 2025 GMT Subject: CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:3f:73:2e:a8:43:25:4d:76:72:fc:10:6c:83: ef:8b:d7:5a:48:5f:38:85:b3:f9:d0:f8:56:a4:66: 81:c6:25:0d:f8:84:31:66:8c:76:14:1a:bc:bf:80: a0:cc:ba:93:e1:0f:62:d3:93:4c:32:ac:40:98:24: 54:ca:0d:55:98:04:2b:5d:57:c2:4f:58:af:9f:b8: 59:8f:4c:45:b4:0b:5b:c3:1f:d7:d6:5c:d9:a1:6e: aa:2a:af:af:fd:ad:e7:61:58:2e:ab:a4:db:de:cb: 15:18:c1:5e:5e:d4:52:90:21:04:01:90:15:3f:8f: e5:15:9e:12:70:e2:16:f4:5c:cd:fc:ac:7c:af:7d: fc:bf:d4:92:90:54:3b:92:87:68:82:34:8b:b6:ab: 32:f9:1b:26:b3:6f:ad:63:12:74:4a:b0:a6:57:6a: 80:a1:a4:ed:02:e4:95:d0:88:b0:9a:6d:0e:5a:d9: 4b:a9:e6:af:50:72:06:1c:6c:2e:a9:72:53:7a:31: ce:df:62:4b:da:81:b3:5f:f5:9e:81:8f:a2:b5:0c: 5c:76:9c:82:10:3f:56:83:e8:ea:2a:fb:b2:bd:1e: f1:dc:59:35:16:fe:a9:11:06:0f:20:a8:c4:06:93: d5:9b:f4:b6:9a:83:d2:f2:27:b2:c6:ea:5e:32:21: 41:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.84.0/22 177.185.40.0/21 IPv6: 2804:f44::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263574 Signature Algorithm: sha256WithRSAEncryption 02:8d:00:ba:88:fc:8f:37:1a:e3:27:1d:23:00:ce:d4:6e:8d: 0e:65:d3:44:e8:ba:56:50:4f:fe:eb:1a:4d:8d:46:0e:97:f2: 52:83:b9:7f:5c:22:cf:86:cf:e8:12:7c:20:2e:27:ef:67:4e: 82:f4:c9:06:30:dc:f0:be:6f:c2:2d:ed:94:31:da:f2:0b:20: 45:f7:98:bd:5d:8c:d4:fe:52:c1:92:80:7a:30:fa:4c:32:ae: ad:3c:20:57:57:5b:09:94:f6:93:68:bd:24:a9:67:c4:af:b6: 0f:96:98:73:ae:81:ac:6c:6a:f9:96:e0:ef:88:0a:04:39:66: a7:0d:ee:1b:92:87:41:d3:8c:e6:52:f9:f4:0a:05:80:59:93: 98:c1:7e:29:23:15:17:0f:0d:00:b7:bb:ec:62:5b:76:19:b9: 23:c9:30:d0:5d:d5:54:af:71:ec:aa:f1:d3:69:f5:e0:7e:25: 43:12:c3:b9:92:d0:6f:bd:72:86:3b:dd:55:bd:79:e5:2d:0a: df:32:26:10:0e:79:29:26:c3:3b:57:64:38:8d:2a:ec:5b:49: 11:34:a1:1d:32:e7:53:50:d6:28:9e:c6:69:e4:99:b1:8b:b4: 36:b9:aa:c9:f0:1b:17:01:b4:af:71:d9:99:5d:82:87:bf:b7: 0c:66:a9:55 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUMLo1DxQs+3BQgCL1QUDXWkEk9gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMzE3MDBaFw0yNTA0MDMwMzIyMDBaMDMxMTAvBgNV BAMTKDhEMEY3OTlEREUzNjlCNDRCM0EwOTMxREJFQ0M2NDgzRTI3MDUwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5P3MuqEMlTXZy/BBsg++L11pI XziFs/nQ+FakZoHGJQ34hDFmjHYUGry/gKDMupPhD2LTk0wyrECYJFTKDVWYBCtd V8JPWK+fuFmPTEW0C1vDH9fWXNmhbqoqr6/9redhWC6rpNveyxUYwV5e1FKQIQQB kBU/j+UVnhJw4hb0XM38rHyvffy/1JKQVDuSh2iCNIu2qzL5Gyazb61jEnRKsKZX aoChpO0C5JXQiLCabQ5a2Uup5q9QcgYcbC6pclN6Mc7fYkvagbNf9Z6Bj6K1DFx2 nIIQP1aD6Ooq+7K9HvHcWTUW/qkRBg8gqMQGk9Wb9Laag9LyJ7LG6l4yIUGhAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSND3md3jabRLOg kx2+zGSD4nBQxjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMTNy eDJMSlV2QU1XRXRXblBTU3NGeERuY3pwSHJTcWdjeDU3VnVDTHllYnIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzEz cngyTEpVdkFNV0V0V25QU1NzRnhEbmN6cEhyU3FnY3g1N1Z1Q0x5ZWJyLzEvOEQw Rjc5OURERTM2OUI0NEIzQTA5MzFEQkVDQzY0ODNFMjcwNTBDNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCil5UAwQDsbkoMA0EAgACMAcDBQAoBA9EMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFljANBgkqhkiG9w0BAQsFAAOCAQEAAo0Auoj8 jzca4ycdIwDO1G6NDmXTROi6VlBP/usaTY1GDpfyUoO5f1wiz4bP6BJ8IC4n72dO gvTJBjDc8L5vwi3tlDHa8gsgRfeYvV2M1P5SwZKAejD6TDKurTwgV1dbCZT2k2i9 JKlnxK+2D5aYc66BrGxq+Zbg74gKBDlmpw3uG5KHQdOM5lL59AoFgFmTmMF+KSMV Fw8NALe77GJbdhm5I8kw0F3VVK9x7Krx02n14H4lQxLDuZLQb71yhjvdVb155S0K 3zImEA55KSbDO1dkOI0q7FtJETShHTLnU1DWKJ7GaeSZsYu0NrmqyfAbFwG0r3HZ mV2Ch7+3DGapVQ== -----END CERTIFICATE-----Generated at Mon Jul 1 02:27:45 2024 by rpki-client on console-ams.rpki-client.org