$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer File: 97544BE1E037DEC68470E5CF05CB2966855E710F.cer (raw, json) Hash identifier: n+86gct/89STnvuKJbcmJVtD/iOVZ8shglA4VHm5sBE= Subject key identifier: 97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 01F126FEEE752207008B830D13A79A91F4B388EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.mft caRepository: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 08 Apr 2024 20:01:37 +0000 Certificate not after: Mon 07 Apr 2025 20:06:37 +0000 Subordinate resources: AS: 28270 IP: 131.196.76.0/22 IP: 131.221.68.0/22 IP: 138.117.124.0/22 IP: 138.121.220.0/22 IP: 138.122.236.0/22 IP: 143.255.112.0/22 IP: 160.238.220.0/22 IP: 168.121.52.0/22 IP: 168.227.44.0/22 IP: 168.228.128.0/22 IP: 168.232.116.0/22 IP: 170.0.204.0/22 IP: 170.245.100.0/22 IP: 170.247.52.0/22 IP: 177.66.64.0/21 IP: 177.67.0.0/21 IP: 177.70.128.0/20 IP: 177.75.192.0/19 IP: 177.87.144.0/21 IP: 177.130.192.0/19 IP: 179.191.128.0/19 IP: 186.219.144.0/20 IP: 186.233.72.0/21 IP: 187.18.128.0/17 IP: 187.108.96.0/20 IP: 187.110.208.0/20 IP: 189.45.64.0/18 IP: 189.50.144.0/20 IP: 191.6.80.0/21 IP: 200.94.240.0/22 IP: 201.149.120.0/22 IP: 2804:880::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f1:26:fe:ee:75:22:07:00:8b:83:0d:13:a7:9a:91:f4:b3:88:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 8 20:01:37 2024 GMT Not After : Apr 7 20:06:37 2025 GMT Subject: CN=97544BE1E037DEC68470E5CF05CB2966855E710F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:9d:3d:59:8e:48:ad:71:16:30:54:14:33: da:5f:c5:ee:61:af:82:d5:69:03:85:20:b1:c4:bd: dc:01:3e:8e:3a:53:b3:5b:09:ec:e5:60:35:1e:3f: fb:72:b3:da:1e:32:6d:b0:7d:91:98:9f:9c:36:24: 50:0d:a1:ee:22:90:1f:03:b7:90:f5:50:6f:3d:2d: 2f:d1:04:78:82:82:57:32:28:e8:db:a9:48:13:31: 70:25:a1:81:db:04:93:e1:d2:3b:ff:1a:41:9e:93: d5:a9:16:2f:7b:53:2a:ac:a4:6c:d8:ea:8d:dd:af: 85:a8:d8:b3:c9:33:76:7f:9e:31:80:45:b5:b6:08: ed:79:45:f4:72:93:54:37:fb:cc:3c:ae:c7:ab:e1: 5c:f5:eb:8a:07:01:8a:1d:84:90:e0:75:c8:f7:e3: 76:bb:0d:03:fd:e5:8a:52:9d:16:41:38:4b:e9:c4: 4d:2c:a8:d5:00:22:41:c8:50:fc:68:14:73:8f:75: 48:10:8b:a8:a3:1b:e2:6b:3b:68:a5:7e:c2:8e:af: 62:95:db:02:f1:ef:6e:a0:29:a7:74:2a:8d:f6:48: ad:7a:0c:71:a4:e4:7c:80:a3:0c:57:03:c2:a0:d3: 99:f0:29:08:13:3e:d4:54:1e:db:83:f0:39:00:b1: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.76.0/22 131.221.68.0/22 138.117.124.0/22 138.121.220.0/22 138.122.236.0/22 143.255.112.0/22 160.238.220.0/22 168.121.52.0/22 168.227.44.0/22 168.228.128.0/22 168.232.116.0/22 170.0.204.0/22 170.245.100.0/22 170.247.52.0/22 177.66.64.0/21 177.67.0.0/21 177.70.128.0/20 177.75.192.0/19 177.87.144.0/21 177.130.192.0/19 179.191.128.0/19 186.219.144.0/20 186.233.72.0/21 187.18.128.0/17 187.108.96.0/20 187.110.208.0/20 189.45.64.0/18 189.50.144.0/20 191.6.80.0/21 200.94.240.0/22 201.149.120.0/22 IPv6: 2804:880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28270 Signature Algorithm: sha256WithRSAEncryption 1b:95:b8:bb:c8:d0:3b:02:61:6d:df:1b:e3:b9:51:1e:d5:9c: ae:cf:10:0f:20:e8:57:dc:c4:59:1d:1c:68:9b:13:d0:69:d9: 64:ff:88:53:69:bf:53:c4:6f:a9:3d:55:91:33:b2:1f:2b:96: bb:df:6d:8f:d6:48:48:39:a7:ce:6a:e4:af:98:a0:96:b1:85: 4d:e4:47:91:cb:31:af:f0:79:f9:78:c7:80:21:d2:f2:66:ba: b9:2f:d7:74:4e:8d:b1:a7:80:44:02:9b:e8:50:e5:f2:57:45: ce:92:4b:2a:8b:ec:0e:46:79:ac:9f:81:eb:6e:f9:fb:b9:96: ca:5b:2f:00:97:45:90:58:0a:e9:dc:77:9b:89:72:06:b8:9c: 39:e5:74:f1:67:1c:ff:62:fc:09:a2:c4:1e:c1:e9:6c:03:39: 11:ab:2f:5f:86:67:cd:5b:19:65:ca:55:96:3d:dc:4f:23:f5: 25:17:f3:4c:6a:e4:7a:ba:e9:40:7e:4b:8d:81:2c:2f:d9:9b: 66:cb:e7:3f:44:85:9c:95:cb:cd:44:d9:ee:db:fa:6c:85:a8: 47:09:b8:4c:50:ef:c5:9f:ba:39:8d:5b:35:a4:9b:77:42:21: 5a:94:1a:61:df:14:5d:a9:89:fb:22:76:86:c5:60:a5:9b:41: 7a:9d:fc:a0 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAfEm/u51IgcAi4MNE6eakfSziOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDgyMDAxMzdaFw0yNTA0MDcyMDA2MzdaMDMxMTAvBgNV BAMTKDk3NTQ0QkUxRTAzN0RFQzY4NDcwRTVDRjA1Q0IyOTY2ODU1RTcxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4J09WY5IrXEWMFQUM9pfxe5h r4LVaQOFILHEvdwBPo46U7NbCezlYDUeP/tys9oeMm2wfZGYn5w2JFANoe4ikB8D t5D1UG89LS/RBHiCglcyKOjbqUgTMXAloYHbBJPh0jv/GkGek9WpFi97UyqspGzY 6o3dr4Wo2LPJM3Z/njGARbW2CO15RfRyk1Q3+8w8rser4Vz164oHAYodhJDgdcj3 43a7DQP95YpSnRZBOEvpxE0sqNUAIkHIUPxoFHOPdUgQi6ijG+JrO2ilfsKOr2KV 2wLx726gKad0Ko32SK16DHGk5HyAowxXA8Kg05nwKQgTPtRUHtuD8DkAsSPRAgMB AAGjggPyMIID7jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXVEvh4DfexoRw 5c8FyylmhV5xDzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1o5 bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3REYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNa OW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAvOTc1 NDRCRTFFMDM3REVDNjg0NzBFNUNGMDVDQjI5NjY4NTVFNzEwRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHmBggrBgEFBQcB BwEB/wSB1jCB0zCBwQQCAAEwgboDBAKDxEwDBAKD3UQDBAKKdXwDBAKKedwDBAKK euwDBAKP/3ADBAKg7twDBAKoeTQDBAKo4ywDBAKo5IADBAKo6HQDBAKqAMwDBAKq 9WQDBAKq9zQDBAOxQkADBAOxQwADBASxRoADBAWxS8ADBAOxV5ADBAWxgsADBAWz v4ADBAS625ADBAO66UgDBAe7EoADBAS7bGADBAS7btADBAa9LUADBAS9MpADBAO/ BlADBALIXvADBALJlXgwDQQCAAIwBwMFACgECIAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICbm4wDQYJKoZIhvcNAQELBQADggEBABuVuLvI0DsCYW3fG+O5UR7VnK7P EA8g6FfcxFkdHGibE9Bp2WT/iFNpv1PEb6k9VZEzsh8rlrvfbY/WSEg5p85q5K+Y oJaxhU3kR5HLMa/wefl4x4Ah0vJmurkv13ROjbGngEQCm+hQ5fJXRc6SSyqL7A5G eayfgetu+fu5lspbLwCXRZBYCuncd5uJcga4nDnldPFnHP9i/AmixB7B6WwDORGr L1+GZ81bGWXKVZY93E8j9SUX80xq5Hq66UB+S42BLC/Zm2bL5z9EhZyVy81E2e7b +myFqEcJuExQ78WfujmNWzWkm3dCIVqUGmHfFF2pifsidobFYKWbQXqd/KA= -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:32 2024 by rpki-client on console-fra.rpki-client.org