$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer File: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer (raw, json) Hash identifier: YdxfBZMqzY4v+mtPJO2Jf4N2o/YULckSoPYcB2TtsQE= Subject key identifier: 95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3B19D8E803B5188BE36508F305E7A871FB0F7A1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft caRepository: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 09:05:50 +0000 Certificate not after: Thu 03 Apr 2025 09:10:50 +0000 Subordinate resources: AS: 272471 IP: 2804:81b4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 03:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:19:d8:e8:03:b5:18:8b:e3:65:08:f3:05:e7:a8:71:fb:0f:7a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 09:05:50 2024 GMT Not After : Apr 3 09:10:50 2025 GMT Subject: CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:40:8a:61:c8:38:03:bf:06:af:5a:bb:55:3d: fb:bc:ca:ff:79:60:74:1b:52:04:50:64:21:f8:57: 72:df:28:25:1d:22:7a:67:0b:7a:43:67:c7:72:ca: d0:04:1a:a3:18:40:96:f9:03:cb:95:06:6e:ac:d3: 45:cc:10:f6:41:be:04:8c:7e:0e:5c:22:6e:75:c0: c2:21:9d:41:ce:f5:f2:80:66:04:45:97:48:d4:36: 6a:0b:c0:cd:3f:35:e8:6a:70:6d:f3:6d:58:1b:67: 26:68:18:a7:f1:46:f4:8a:bc:0d:20:3c:23:61:54: a2:19:bd:d6:e1:b5:fa:06:84:7c:fe:8e:76:36:31: 0e:03:dd:5e:8b:74:a9:d3:ac:9b:cc:21:db:e6:f4: db:27:1d:f6:ce:01:15:e9:fa:db:94:cf:49:d0:6e: 9a:cb:11:fa:b8:21:c1:92:ef:c5:66:87:f2:9c:b6: ac:11:d4:1a:33:a5:0d:fe:6c:9e:f3:a0:e7:79:62: f0:63:bd:48:52:c0:c0:a7:f8:2c:1d:7d:85:96:fb: 33:4d:16:1a:1b:0b:51:f5:e8:ee:ec:92:39:83:66: 7d:50:cc:86:56:27:45:d8:35:f0:a8:f4:0d:b4:1a: 74:ab:6c:61:73:3a:cb:c1:3f:70:f3:40:33:4c:3b: 0b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:81b4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272471 Signature Algorithm: sha256WithRSAEncryption 20:5e:b2:1d:64:b6:19:14:2c:e9:08:9e:99:d0:2e:4d:38:1c: be:13:89:86:59:76:49:cc:28:14:bd:6a:b0:e5:48:1b:6b:1c: f2:8e:da:ca:d8:4d:91:31:26:f7:8b:4d:3f:29:31:80:0f:b5: 74:86:e0:c0:df:7f:3d:5b:c3:f3:ee:17:00:49:9d:75:aa:a9: cb:ac:2f:56:1c:1b:ee:bc:86:f4:87:c4:d4:f8:2e:2f:59:2a: 48:b9:8c:b7:6b:c2:13:14:2c:ba:b3:11:72:72:6c:5f:9f:04: 53:29:15:6c:04:30:7d:b4:14:a0:62:de:e9:15:f1:c8:1d:a5: 82:d1:48:d2:6f:e7:de:11:af:be:1c:99:46:fe:31:4c:48:3b: ab:fb:42:07:06:be:46:20:ea:ce:ec:ed:a9:8a:e0:bc:66:05: d1:04:2b:e1:c5:37:08:51:9d:a0:52:a9:0e:7f:53:4c:82:72: 4f:00:f5:c9:b7:3b:18:f3:b9:d9:ef:ee:7b:b4:27:62:a0:ca: 47:f2:ff:9c:a1:02:d2:4a:90:8d:ad:c2:22:11:33:93:f9:2d: af:2b:5c:35:b1:ee:84:c4:b1:bf:4a:fd:d7:9c:95:28:a2:e9: ef:c2:b9:7d:9f:a4:9a:46:2e:bd:47:16:08:21:76:52:05:c0: 5a:8a:ee:a4 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUOxnY6AO1GIvjZQjzBeeocfsPehowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwOTA1NTBaFw0yNTA0MDMwOTEwNTBaMDMxMTAvBgNV BAMTKDk1RkI0Rjc5NTRBNzlDM0VBRUI5MTU1Q0I1RjRGMjQ3RDJCMDZENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQIphyDgDvwavWrtVPfu8yv95 YHQbUgRQZCH4V3LfKCUdInpnC3pDZ8dyytAEGqMYQJb5A8uVBm6s00XMEPZBvgSM fg5cIm51wMIhnUHO9fKAZgRFl0jUNmoLwM0/NehqcG3zbVgbZyZoGKfxRvSKvA0g PCNhVKIZvdbhtfoGhHz+jnY2MQ4D3V6LdKnTrJvMIdvm9NsnHfbOARXp+tuUz0nQ bprLEfq4IcGS78Vmh/KctqwR1BozpQ3+bJ7zoOd5YvBjvUhSwMCn+CwdfYWW+zNN FhobC1H16O7skjmDZn1QzIZWJ0XYNfCo9A20GnSrbGFzOsvBP3DzQDNMOwsTAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSV+095VKecPq65 FVy19PJH0rBtYjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzNV cWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFCS2EvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzMz VXFkRFhkNVFMaFlia01LU056Y054NG14Uks0eWZSYzFvb1VQRmFRQkthLzEvOTVG QjRGNzk1NEE3OUMzRUFFQjkxNTVDQjVGNEYyNDdEMkIwNkQ2Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASBtDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KFcwDQYJKoZIhvcNAQELBQADggEBACBesh1kthkULOkInpnQLk04HL4TiYZZdknM KBS9arDlSBtrHPKO2srYTZExJveLTT8pMYAPtXSG4MDffz1bw/PuFwBJnXWqqcus L1YcG+68hvSHxNT4Li9ZKki5jLdrwhMULLqzEXJybF+fBFMpFWwEMH20FKBi3ukV 8cgdpYLRSNJv594Rr74cmUb+MUxIO6v7QgcGvkYg6s7s7amK4LxmBdEEK+HFNwhR naBSqQ5/U0yCck8A9cm3Oxjzudnv7nu0J2Kgykfy/5yhAtJKkI2twiIRM5P5La8r XDWx7oTEsb9K/declSii6e/CuX2fpJpGLr1HFgghdlIFwFqK7qQ= -----END CERTIFICATE-----Generated at Sun Jun 2 03:35:20 2024 by rpki-client on console-fra.rpki-client.org