$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer File: 9A8CDCA9443D140D02860AA0070928656A172CE1.cer (raw, json) Hash identifier: RQXeXRwetgntgxNIR+BpI3lREgKw8n32mnE3CBtI45I= Subject key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4D224DE0B138F6F02D5B8AA71CDD3403DEBAF227 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft caRepository: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:55:40 +0000 Certificate not after: Thu 03 Apr 2025 03:00:40 +0000 Subordinate resources: AS: 266520 IP: 45.177.140.0/22 IP: 170.245.92.0/22 IP: 2804:390c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:22:4d:e0:b1:38:f6:f0:2d:5b:8a:a7:1c:dd:34:03:de:ba:f2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:55:40 2024 GMT Not After : Apr 3 03:00:40 2025 GMT Subject: CN=9A8CDCA9443D140D02860AA0070928656A172CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:7e:05:94:1a:e2:15:3a:a2:37:d2:7b:a1: f5:e1:3b:2c:3d:f2:69:e0:82:e2:34:6d:d8:88:82: e7:7e:dc:e8:3f:c7:bc:4c:e4:9b:72:16:b5:d4:53: 42:2d:70:75:8e:0f:88:cb:56:ee:ec:d2:78:03:cd: a2:b9:ff:82:e8:07:bc:b3:f8:06:f2:f5:94:88:ad: 59:2b:b1:31:e0:0d:80:cd:99:0f:b5:77:16:43:6f: 5d:a2:ed:e0:10:eb:6f:cd:e7:4b:92:37:2a:a1:19: e5:33:51:e9:43:94:b9:d6:ad:ee:f0:1c:dc:2c:22: 90:b2:77:0e:c6:69:a1:22:e2:01:47:6a:30:bb:12: e9:6a:0a:dc:d1:38:3c:23:66:07:ec:07:9e:ba:9d: 97:56:ee:77:be:3b:bb:30:c4:71:f6:36:0b:cc:bc: 23:76:7b:ee:22:07:85:2b:29:3b:56:ce:f6:7a:4a: c5:5a:fe:d7:83:f1:e4:8e:8e:85:e9:9f:3b:d8:1b: b1:fb:26:89:a9:67:5d:e9:d0:56:e3:bb:3b:47:64: fa:22:c3:3f:58:3e:3a:34:c4:97:80:7e:b4:81:1b: 0b:7b:2c:f8:ea:21:13:eb:bd:4e:ff:a1:70:18:a9: a6:4f:47:e9:c9:36:81:29:8b:8b:b6:8a:04:f6:ba: f7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.177.140.0/22 170.245.92.0/22 IPv6: 2804:390c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266520 Signature Algorithm: sha256WithRSAEncryption d2:a8:8f:87:52:32:2c:4a:a1:83:a0:4e:e2:c7:52:7e:5d:80: d6:d6:7f:83:b1:55:57:b8:5b:cd:32:bd:10:b7:36:70:d0:12: de:d9:f1:cf:7e:96:ff:bf:17:c9:4a:1c:4f:2e:25:6d:27:2f: 51:26:c3:6f:0c:01:37:47:0e:d9:2e:35:7f:f3:31:4f:80:f8: a8:14:ef:8d:72:c9:ac:b3:c0:55:e0:96:1d:fe:d7:47:ab:95: e6:cc:8c:39:09:46:20:5d:0c:c0:54:39:25:36:90:98:d3:0d: ba:a0:4b:ad:0b:ff:c8:98:60:2a:19:ab:af:2f:4d:7d:51:06: f2:1d:28:d6:20:e1:ae:85:33:e1:ce:1c:0a:28:89:b3:06:31: 51:e8:7f:ae:c2:38:3d:c6:66:36:e5:80:d2:f0:81:eb:6f:49: a5:44:79:b4:35:44:8e:e0:8b:dc:59:f0:14:19:e5:e9:21:c7: 7c:ea:6c:1c:8a:20:e3:86:d0:78:15:7f:dd:ed:13:c4:c2:47: f5:5f:ab:8a:26:eb:0b:5a:7b:13:96:a1:dd:23:92:c9:2d:02: a3:52:8f:02:c8:47:c6:42:eb:86:76:e0:57:1b:18:40:65:1d: bb:4a:ee:c1:5e:bc:9c:aa:64:16:66:51:73:63:49:92:49:c1: 88:4f:e4:a1 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUTSJN4LE49vAtW4qnHN00A9668icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjU1NDBaFw0yNTA0MDMwMzAwNDBaMDMxMTAvBgNV BAMTKDlBOENEQ0E5NDQzRDE0MEQwMjg2MEFBMDA3MDkyODY1NkExNzJDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6X4FlBriFTqiN9J7ofXhOyw9 8mngguI0bdiIgud+3Og/x7xM5JtyFrXUU0ItcHWOD4jLVu7s0ngDzaK5/4LoB7yz +Aby9ZSIrVkrsTHgDYDNmQ+1dxZDb12i7eAQ62/N50uSNyqhGeUzUelDlLnWre7w HNwsIpCydw7GaaEi4gFHajC7EulqCtzRODwjZgfsB566nZdW7ne+O7swxHH2NgvM vCN2e+4iB4UrKTtWzvZ6SsVa/teD8eSOjoXpnzvYG7H7JompZ13p0FbjuztHZPoi wz9YPjo0xJeAfrSBGwt7LPjqIRPrvU7/oXAYqaZPR+nJNoEpi4u2igT2uve7AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSajNypRD0UDQKG CqAHCShlahcs4TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmd5 TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmd5 TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMS85QThD RENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAItsYwDBAKq9VwwDQQCAAIwBwMFACgEOQwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBBEYMA0GCSqGSIb3DQEBCwUAA4IBAQDSqI+HUjIs SqGDoE7ix1J+XYDW1n+DsVVXuFvNMr0QtzZw0BLe2fHPfpb/vxfJShxPLiVtJy9R JsNvDAE3Rw7ZLjV/8zFPgPioFO+Ncsmss8BV4JYd/tdHq5XmzIw5CUYgXQzAVDkl NpCY0w26oEutC//ImGAqGauvL019UQbyHSjWIOGuhTPhzhwKKImzBjFR6H+uwjg9 xmY25YDS8IHrb0mlRHm0NUSO4IvcWfAUGeXpIcd86mwciiDjhtB4FX/d7RPEwkf1 X6uKJusLWnsTlqHdI5LJLQKjUo8CyEfGQuuGduBXGxhAZR27Su7BXrycqmQWZlFz Y0mSScGIT+Sh -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:33 2024 by rpki-client on console-fra.rpki-client.org