$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE.cer File: 9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE.cer (raw, json) Hash identifier: UtDKMna6tvcmpNS9CEMJHyx8cItwx9w5W+xHewPlrJs= Subject key identifier: 96:04:EE:46:3B:8B:37:33:EC:18:A5:EC:DC:F5:D7:CB:F3:03:7F:FE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 037BF03625E1A92D70456C2098F5293C737E0CBD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE.mft caRepository: rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 19:11:46 +0000 Certificate not after: Wed 02 Apr 2025 19:16:46 +0000 Subordinate resources: AS: 262368 IP: 177.128.96.0/21 IP: 2804:85c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 05:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7b:f0:36:25:e1:a9:2d:70:45:6c:20:98:f5:29:3c:73:7e:0c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 19:11:46 2024 GMT Not After : Apr 2 19:16:46 2025 GMT Subject: CN=9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:06:02:9f:bf:13:1e:d8:b1:fa:ea:3d:06: ef:50:4d:1f:7e:bb:00:09:5d:14:6e:6b:2a:4a:3c: c1:26:c0:99:00:53:5c:8c:ec:cf:9f:e1:f8:f2:23: bc:77:2d:de:b7:95:84:17:9d:5b:11:69:97:17:21: d0:f9:c3:3e:2e:b4:ec:13:b4:6b:74:1e:5f:26:62: 34:eb:71:db:22:4c:d1:da:3d:51:26:1f:b2:41:94: c8:b6:65:d5:4b:b4:a4:e6:6d:3e:5e:75:e5:02:97: 67:40:a7:61:f4:10:3a:0b:a7:fe:22:00:17:67:7f: 27:75:0b:af:51:39:b0:17:82:47:08:9a:df:e5:83: 99:36:c4:c5:6e:e5:db:60:f7:27:1c:17:f6:6a:94: 76:6f:a9:e4:0b:9a:1c:81:e8:4a:58:20:35:76:cf: be:34:ce:19:63:f5:3b:d2:03:0b:bb:cd:f9:03:69: 0f:9f:a9:da:54:48:67:7f:f0:a7:6a:ad:51:7a:3a: a5:02:94:20:70:24:93:d0:59:d7:95:03:91:5a:22: 16:5e:ae:09:0c:34:61:ff:d3:d9:aa:c0:23:f6:30: e8:ac:44:f2:85:57:9b:4e:3c:b4:af:78:20:47:0c: 46:eb:6a:36:17:0d:6e:43:be:ce:d7:6e:64:3b:80: 36:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:04:EE:46:3B:8B:37:33:EC:18:A5:EC:DC:F5:D7:CB:F3:03:7F:FE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/1/9604EE463B8B3733EC18A5ECDCF5D7CBF3037FFE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.128.96.0/21 IPv6: 2804:85c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262368 Signature Algorithm: sha256WithRSAEncryption 4d:74:dc:db:8f:76:6d:98:a3:1e:b2:7b:9c:3f:8e:7e:6c:6d: f8:34:e2:7f:ea:f2:35:c6:71:3b:83:6d:1a:f1:1e:26:49:3e: 7c:71:d1:f8:de:37:a4:b2:e1:d9:89:0c:fb:f6:17:da:70:78: 7a:fe:49:b8:b8:be:e8:df:c0:c7:c9:d4:19:64:79:20:37:2b: d7:48:9c:74:58:93:26:c4:bc:19:bc:ac:67:8b:ab:d6:05:f7: ad:6d:f3:2b:df:24:77:ff:6f:13:e9:cb:80:b9:8c:bc:f0:2a: 5e:db:23:fb:d1:ae:a5:24:85:1c:7f:1d:a5:ba:a9:fe:a7:a5: f1:5b:02:2c:9e:2f:c2:0b:a5:ee:54:fc:90:ec:c5:a0:ad:39: 26:3b:b3:2b:de:c6:a6:db:61:61:5c:a8:e0:0b:c8:d5:e2:d5: 1b:10:c4:df:74:6f:fc:c9:6b:b1:7f:ca:06:d8:a1:f9:1a:8f: 3a:f3:5c:e3:39:ca:4e:5c:4d:ce:90:25:be:f0:63:ae:61:fb: 87:f4:8c:32:12:ef:0f:d1:e9:bd:61:40:6f:c3:7b:8c:17:3d: 55:da:24:ce:15:dd:6e:62:4d:97:fe:05:91:f8:4a:2f:a2:5a: 74:8a:79:aa:19:73:dd:03:27:32:80:9b:e7:31:fe:29:c3:92: e6:48:38:f4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUA3vwNiXhqS1wRWwgmPUpPHN+DL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxOTExNDZaFw0yNTA0MDIxOTE2NDZaMDMxMTAvBgNV BAMTKDk2MDRFRTQ2M0I4QjM3MzNFQzE4QTVFQ0RDRjVEN0NCRjMwMzdGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoQYCn78THtix+uo9Bu9QTR9+ uwAJXRRuaypKPMEmwJkAU1yM7M+f4fjyI7x3Ld63lYQXnVsRaZcXIdD5wz4utOwT tGt0Hl8mYjTrcdsiTNHaPVEmH7JBlMi2ZdVLtKTmbT5edeUCl2dAp2H0EDoLp/4i ABdnfyd1C69RObAXgkcImt/lg5k2xMVu5dtg9yccF/ZqlHZvqeQLmhyB6EpYIDV2 z740zhlj9TvSAwu7zfkDaQ+fqdpUSGd/8KdqrVF6OqUClCBwJJPQWdeVA5FaIhZe rgkMNGH/09mqwCP2MOisRPKFV5tOPLSveCBHDEbrajYXDW5Dvs7XbmQ7gDYfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWBO5GO4s3M+wY pezc9dfL8wN//jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEVG SFVCeXlFaW9mYmk4Znhadk1HU28yUDRTSDZ1RVoybmdTVXhzVjV4MXEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hF RkhVQnl5RWlvZmJpOGZ4WnZNR1NvMlA0U0g2dUVaMm5nU1V4c1Y1eDFxLzEvOTYw NEVFNDYzQjhCMzczM0VDMThBNUVDRENGNUQ3Q0JGMzAzN0ZGRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDsYBgMA0EAgACMAcDBQAoBAhcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQA4DANBgkqhkiG9w0BAQsFAAOCAQEATXTc2492bZijHrJ7 nD+Ofmxt+DTif+ryNcZxO4NtGvEeJkk+fHHR+N43pLLh2YkM+/YX2nB4ev5JuLi+ 6N/Ax8nUGWR5IDcr10icdFiTJsS8GbysZ4ur1gX3rW3zK98kd/9vE+nLgLmMvPAq Xtsj+9GupSSFHH8dpbqp/qel8VsCLJ4vwgul7lT8kOzFoK05JjuzK97GptthYVyo 4AvI1eLVGxDE33Rv/MlrsX/KBtih+RqPOvNc4znKTlxNzpAlvvBjrmH7h/SMMhLv D9HpvWFAb8N7jBc9VdokzhXdbmJNl/4FkfhKL6JadIp5qhlz3QMnMoCb5zH+KcOS 5kg49A== -----END CERTIFICATE-----Generated at Tue Jun 18 07:41:04 2024 by rpki-client on console-ams.rpki-client.org