$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer File: 8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer (raw, json) Hash identifier: IFZZQwl1jVXVwDagjN3gTeCJc+FqBw+Xb0xwgpMifkM= Subject key identifier: 8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0508002944BD41F327F80109955B42A8F9112477 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.mft caRepository: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 17 Apr 2024 11:31:57 +0000 Certificate not after: Wed 16 Apr 2025 11:36:57 +0000 Subordinate resources: AS: 273431 IP: 186.227.76.0/22 IP: 191.7.0.0/23 IP: 2804:8e84::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 13:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:08:00:29:44:bd:41:f3:27:f8:01:09:95:5b:42:a8:f9:11:24:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 17 11:31:57 2024 GMT Not After : Apr 16 11:36:57 2025 GMT Subject: CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:8b:58:8d:3e:5f:54:b2:eb:93:1d:f9:86: 5e:47:85:67:09:63:3d:e8:72:7f:ef:4f:4b:d1:a8: 69:40:ac:de:ec:0e:a6:3c:fe:5c:13:eb:52:61:a5: c0:1b:ad:2c:dd:af:92:f8:49:68:21:19:42:4c:51: 4a:4c:8b:e9:f2:05:72:fe:0b:02:be:cf:20:32:c9: 13:af:54:2c:50:dd:67:15:93:ed:76:7c:02:12:43: 6d:7e:95:61:79:15:02:d4:d9:19:1d:f5:ed:35:47: 18:fd:0c:10:48:ec:aa:bd:74:67:57:97:f7:ab:6e: 40:ee:f3:38:03:35:5e:b3:44:3a:a8:5e:05:74:89: 40:d3:be:06:a9:39:40:78:4b:c8:f0:e6:35:10:ca: df:49:b5:8c:67:5b:14:1d:01:6f:a7:82:60:fc:2f: c4:90:d5:f0:14:1f:e6:89:1d:c0:d8:75:f6:33:ca: 43:ef:7d:26:e0:dd:a4:62:db:0a:a0:75:8f:28:e0: 75:0a:63:cb:7f:40:4e:fe:cd:07:97:a2:5e:6d:66: df:6c:70:0d:e6:86:26:8c:c5:80:1a:0a:fc:a4:50: 6a:ea:d6:28:a8:76:f4:f0:2d:79:00:6b:e4:30:33: c4:81:47:cc:2f:16:f6:bd:96:1b:7e:d7:63:52:44: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.227.76.0/22 191.7.0.0/23 IPv6: 2804:8e84::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273431 Signature Algorithm: sha256WithRSAEncryption b5:6a:a1:e1:a4:77:4f:65:82:34:c0:6a:98:39:e6:ec:21:0e: 24:e3:76:b4:8f:e6:cd:51:11:86:28:5b:98:41:6e:16:8a:c1: 85:73:32:24:55:7f:6a:8a:db:dc:47:5f:6a:d7:a9:d7:49:1f: 4a:bf:1a:2d:d5:a1:b9:f1:54:f8:1b:5f:04:0d:51:63:5d:0b: 5b:f2:47:0f:8f:c0:56:f5:5a:32:29:20:a3:2e:0f:df:1b:d1: 98:7f:82:24:30:c5:4c:02:78:ff:a3:38:d3:fe:52:ee:08:c3: 7a:b8:09:b5:6e:50:0f:74:71:3c:73:c0:ca:8d:8b:bb:1f:2b: 09:38:be:df:67:96:17:02:0c:00:ee:99:07:b8:5c:e5:a0:5d: eb:23:1e:ac:d4:03:72:81:87:58:3a:2f:a4:24:bd:65:0a:9a: a0:b6:28:58:b9:cb:ad:5d:25:b8:14:5a:03:fe:f9:17:bf:ee: ba:6d:ca:f2:fd:91:c6:f4:c9:cc:2a:d7:09:60:2b:f4:4a:b2: 25:09:df:0b:3c:f7:2d:ad:56:90:4a:3c:8d:5c:34:da:10:b6: ac:ef:43:ae:07:c2:0b:73:ac:b3:d5:11:b2:8e:8e:79:e1:5f: b9:37:95:a9:d9:2a:66:e2:17:c8:64:06:a8:b9:36:2a:27:7d: 45:f5:fd:31 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUBQgAKUS9QfMn+AEJlVtCqPkRJHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MTcxMTMxNTdaFw0yNTA0MTYxMTM2NTdaMDMxMTAvBgNV BAMTKDhERUUwRjhFNENERkZFMTBGRDFFMDA5QkNCQTBCNzM3NUZFQ0JGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWotYjT5fVLLrkx35hl5HhWcJ Yz3ocn/vT0vRqGlArN7sDqY8/lwT61JhpcAbrSzdr5L4SWghGUJMUUpMi+nyBXL+ CwK+zyAyyROvVCxQ3WcVk+12fAISQ21+lWF5FQLU2Rkd9e01Rxj9DBBI7Kq9dGdX l/erbkDu8zgDNV6zRDqoXgV0iUDTvgapOUB4S8jw5jUQyt9JtYxnWxQdAW+ngmD8 L8SQ1fAUH+aJHcDYdfYzykPvfSbg3aRi2wqgdY8o4HUKY8t/QE7+zQeXol5tZt9s cA3mhiaMxYAaCvykUGrq1iiodvTwLXkAa+QwM8SBR8wvFva9lht+12NSRHlpAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSN7g+OTN/+EP0e AJvLoLc3X+y/bDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGlw azRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3BtRlgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRp cGs0ZVFkOXpVdWN5RXhMa3NDWXh5SzRTcUVkdkdRc0pMTGs5TXNwbUZYLzAvOERF RTBGOEU0Q0RGRkUxMEZEMUUwMDlCQ0JBMEI3Mzc1RkVDQkY2Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCuuNMAwQBvwcAMA0EAgACMAcDBQAoBI6EMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQsFzANBgkqhkiG9w0BAQsFAAOCAQEAtWqh4aR3 T2WCNMBqmDnm7CEOJON2tI/mzVERhihbmEFuForBhXMyJFV/aorb3Edfatep10kf Sr8aLdWhufFU+BtfBA1RY10LW/JHD4/AVvVaMikgoy4P3xvRmH+CJDDFTAJ4/6M4 0/5S7gjDergJtW5QD3RxPHPAyo2Lux8rCTi+32eWFwIMAO6ZB7hc5aBd6yMerNQD coGHWDovpCS9ZQqaoLYoWLnLrV0luBRaA/75F7/uum3K8v2RxvTJzCrXCWAr9Eqy JQnfCzz3La1WkEo8jVw02hC2rO9DrgfCC3Oss9URso6OeeFfuTeVqdkqZuIXyGQG qLk2Kid9RfX9MQ== -----END CERTIFICATE-----Generated at Wed Jun 26 12:55:12 2024 by rpki-client on console-fra.rpki-client.org