$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer File: 8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer (raw, json) Hash identifier: r9GbelagVH9Ql+QZO0kKMXldyKFjX1Fr74sN3DgYmng= Subject key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2A83CA8742E4FF23FEAAE028E0FAC58764A8A66D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft caRepository: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 22:44:23 +0000 Certificate not after: Wed 02 Apr 2025 22:49:23 +0000 Subordinate resources: AS: 28639 IP: 177.129.68.0/22 IP: 191.6.232.0/21 IP: 2804:dd0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:83:ca:87:42:e4:ff:23:fe:aa:e0:28:e0:fa:c5:87:64:a8:a6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 22:44:23 2024 GMT Not After : Apr 2 22:49:23 2025 GMT Subject: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:fd:24:e4:ff:84:4d:53:86:8a:ac:3f:2c: 57:67:45:3e:01:de:ab:5a:6e:63:b6:2f:e2:16:66: cd:bb:ef:36:fa:76:f5:eb:9b:90:49:cd:bd:4b:e5: 7d:a6:fe:56:f3:87:c2:04:b8:c1:12:a5:5c:a4:29: f7:6c:8f:43:5b:a7:d7:d8:24:04:c0:53:4d:7c:b1: 82:41:c9:cf:bc:70:6d:d1:54:30:ae:c7:b4:16:22: de:65:94:3c:72:95:b5:47:98:c3:3c:c7:e4:53:81: f6:56:6f:43:09:74:fe:19:f6:3b:d1:a5:32:36:e9: 72:32:48:3d:90:e5:f2:a3:4a:2f:f3:af:7c:17:f6: 4d:ff:48:13:45:28:1a:63:75:77:d1:d4:82:df:22: dd:33:9b:08:40:0a:02:9c:56:18:f5:c9:6d:2f:54: f2:20:b7:1e:e0:34:3c:87:e8:cd:3c:ae:24:fb:b8: 8e:e5:f2:da:eb:48:3d:a1:04:8c:e0:0f:61:38:58: 20:b1:c3:90:ea:f7:0a:e4:b1:95:cb:c6:eb:82:27: d3:02:ee:57:56:3a:aa:e8:00:9b:f8:3b:c0:cc:44: 66:b1:b0:fb:bf:8c:21:3f:23:ba:d2:9c:ff:ae:91: 3c:09:6c:3f:f3:8f:8a:68:b4:79:19:1c:f3:95:ec: 61:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.129.68.0/22 191.6.232.0/21 IPv6: 2804:dd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28639 Signature Algorithm: sha256WithRSAEncryption 8a:42:b7:bc:29:a7:bc:9d:83:5f:38:17:88:0b:96:75:25:70: ac:4d:5c:75:4a:56:98:2e:31:cc:cd:14:e5:39:79:ac:8a:b3: 7f:d6:97:18:28:4f:f5:a4:ca:07:a7:92:6c:d7:b0:b5:43:1e: af:45:66:cf:1a:04:6f:59:6d:a7:66:fb:43:25:b0:74:5b:d7: 51:20:04:41:4b:af:f1:ae:60:07:5f:7d:9a:ac:45:e0:70:99: ae:47:ae:17:64:63:4c:8b:98:9c:ad:89:09:45:ee:d0:f4:b0: 0c:a7:c0:b5:e0:ef:b8:08:46:ee:90:ba:3a:24:8e:b4:6c:d1: 31:b8:5a:06:58:44:8b:4f:0f:2b:87:37:ee:ef:0b:48:12:f2: 43:04:bc:88:46:da:45:4b:50:c4:6d:80:16:97:ba:12:cd:53: 05:a9:33:bb:15:b5:f8:1a:e7:79:1d:3c:d0:22:a1:c7:3b:aa: bb:6a:61:ae:9b:fd:c3:ee:ce:d4:a1:b8:8c:6f:2a:14:19:ed: 6c:1c:e7:11:f8:ff:8c:a4:6c:9b:f4:fd:af:93:04:cc:32:2e: c2:78:8e:46:c1:61:11:ff:2f:c9:6e:3a:49:fe:65:ab:b4:09: 5a:eb:fc:e1:12:35:93:4a:ec:6c:b0:ea:7a:dc:d1:8c:f7:98: 27:ca:cc:40 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUKoPKh0Lk/yP+quAo4PrFh2Sopm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMjQ0MjNaFw0yNTA0MDIyMjQ5MjNaMDMxMTAvBgNV BAMTKDhFNzMxNkNBOTA3RjNENDY5MjlBRkY2RERGNTY1NURCQjUzQUJEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3S/0k5P+ETVOGiqw/LFdnRT4B 3qtabmO2L+IWZs277zb6dvXrm5BJzb1L5X2m/lbzh8IEuMESpVykKfdsj0Nbp9fY JATAU018sYJByc+8cG3RVDCux7QWIt5llDxylbVHmMM8x+RTgfZWb0MJdP4Z9jvR pTI26XIySD2Q5fKjSi/zr3wX9k3/SBNFKBpjdXfR1ILfIt0zmwhACgKcVhj1yW0v VPIgtx7gNDyH6M08riT7uI7l8trrSD2hBIzgD2E4WCCxw5Dq9wrksZXLxuuCJ9MC 7ldWOqroAJv4O8DMRGaxsPu/jCE/I7rSnP+ukTwJbD/zj4potHkZHPOV7GEjAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOcxbKkH89RpKa /23fVlXbtTq9xDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXlE MWVEeDZxS3hFY1VqOHJ1YThRTUs4QmZ2dkFqU25zV1JRcDN1clBOWGovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV5 RDFlRHg2cUt4RWNVajhydWE4UU1LOEJmdnZBalNuc1dSUXAzdXJQTlhqLzEvOEU3 MzE2Q0E5MDdGM0Q0NjkyOUFGRjZEREY1NjU1REJCNTNBQkRDNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsYFEAwQDvwboMA0EAgACMAcDBQAoBA3QMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm/fMA0GCSqGSIb3DQEBCwUAA4IBAQCKQre8Kae8 nYNfOBeIC5Z1JXCsTVx1SlaYLjHMzRTlOXmsirN/1pcYKE/1pMoHp5Js17C1Qx6v RWbPGgRvWW2nZvtDJbB0W9dRIARBS6/xrmAHX32arEXgcJmuR64XZGNMi5icrYkJ Re7Q9LAMp8C14O+4CEbukLo6JI60bNExuFoGWESLTw8rhzfu7wtIEvJDBLyIRtpF S1DEbYAWl7oSzVMFqTO7FbX4Gud5HTzQIqHHO6q7amGum/3D7s7UobiMbyoUGe1s HOcR+P+MpGyb9P2vkwTMMi7CeI5GwWER/y/JbjpJ/mWrtAla6/zhEjWTSuxssOp6 3NGM95gnysxA -----END CERTIFICATE-----Generated at Sat Jun 29 03:29:01 2024 by rpki-client on console-ams.rpki-client.org