$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer File: 9D9F73448694649C4F988D98A0F12757A6913C2D.cer (raw, json) Hash identifier: Ld1dZ+LOZa0v2U3Fnyh20rVo1lUrovYo6U2fNK2QZUk= Subject key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 476CC95FB0DDDEE98AB1AAF67FED7D03B16C5C88 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft caRepository: rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 20:46:08 +0000 Certificate not after: Wed 02 Apr 2025 20:51:08 +0000 Subordinate resources: AS: 28140 IP: 187.49.32.0/20 IP: 187.103.208.0/20 IP: 2804:1a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 05:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6c:c9:5f:b0:dd:de:e9:8a:b1:aa:f6:7f:ed:7d:03:b1:6c:5c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 20:46:08 2024 GMT Not After : Apr 2 20:51:08 2025 GMT Subject: CN=9D9F73448694649C4F988D98A0F12757A6913C2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:c5:cb:2d:8d:86:dd:1e:b6:81:30:c4:aa: 60:3a:bd:2b:58:5c:59:98:dd:71:89:2d:30:f4:85: 14:b3:f1:b7:59:ea:9a:05:40:98:bf:56:f2:e4:2b: fa:48:42:d3:ae:01:8c:51:ec:0c:2e:71:b7:c0:56: b6:88:fc:83:8e:13:e1:13:66:fa:05:a4:5c:da:66: 46:91:d4:70:c7:38:ec:db:39:fc:94:eb:a7:b1:8c: e2:d6:ae:4c:f3:97:92:1d:01:94:39:9e:a9:a6:16: 9f:78:1b:9a:23:12:91:f2:2b:71:7b:4c:d8:a0:93: 32:a7:31:61:94:94:04:22:6f:48:6c:33:8a:4e:33: 42:40:ce:67:b6:af:5a:8e:dd:62:89:5b:73:f0:46: 59:bb:9f:53:68:ff:e0:3a:6e:50:dc:c7:1b:78:d9: fc:f2:58:04:0f:91:57:ba:5b:9b:8a:b5:e4:8b:4b: 73:85:17:5d:f0:24:43:2e:0f:35:4d:3e:f5:f2:13: f4:cd:8b:56:22:0e:e8:39:fe:62:dd:96:1c:30:c6: 5a:d6:c6:76:88:79:e3:5e:4f:f0:15:5c:cc:a8:24: 1c:e8:75:98:8c:3a:7f:11:dc:4f:99:9b:88:f1:4c: 12:d8:99:41:67:3a:d8:f1:41:76:d1:c3:43:a7:32: 13:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.49.32.0/20 187.103.208.0/20 IPv6: 2804:1a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28140 Signature Algorithm: sha256WithRSAEncryption 7a:c0:08:88:b6:c1:c8:71:4f:31:03:b2:5b:39:f7:7a:2c:e2: 88:12:3a:f5:73:26:d8:f2:e0:da:e8:ee:79:90:cd:fd:d7:7d: cb:3a:33:51:99:1d:88:79:cb:e4:a6:27:88:f2:f6:c8:92:31: 33:61:11:49:f4:4c:8f:04:13:64:85:00:ac:34:09:39:58:c6: 7a:8a:b4:4d:e8:8d:db:22:12:c7:e1:12:8f:64:25:4b:26:ba: 10:7d:17:94:23:57:24:fd:ca:44:1f:20:59:90:1f:c3:7c:b9: eb:a3:30:ab:0f:b3:8b:89:54:d0:23:8d:93:ba:5b:a2:c1:eb: a8:e3:20:92:c4:f2:a3:0f:c9:18:b4:d4:a3:13:89:c9:d1:c7: 3c:8b:1f:88:2a:32:0e:d2:c9:9f:03:1d:93:49:46:53:7b:e6: 2d:4d:5d:44:be:fe:0e:b8:ae:e7:07:3c:20:27:36:90:21:1e: 9d:96:b6:85:ef:1c:52:2a:a4:2c:0e:f0:42:85:82:36:5b:67: 84:f1:e1:49:f4:71:2a:af:25:0b:ae:09:ce:ef:3b:d4:b6:19: 00:39:5e:3f:af:18:ce:34:c6:87:c3:78:be:f8:b3:69:b8:e8: 11:b8:ef:97:cc:b1:4f:34:06:e5:00:da:f5:8c:9f:57:7c:e4: 91:85:20:e6 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUR2zJX7Dd3umKsar2f+19A7FsXIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMDQ2MDhaFw0yNTA0MDIyMDUxMDhaMDMxMTAvBgNV BAMTKDlEOUY3MzQ0ODY5NDY0OUM0Rjk4OEQ5OEEwRjEyNzU3QTY5MTNDMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88cXLLY2G3R62gTDEqmA6vStY XFmY3XGJLTD0hRSz8bdZ6poFQJi/VvLkK/pIQtOuAYxR7AwucbfAVraI/IOOE+ET ZvoFpFzaZkaR1HDHOOzbOfyU66exjOLWrkzzl5IdAZQ5nqmmFp94G5ojEpHyK3F7 TNigkzKnMWGUlAQib0hsM4pOM0JAzme2r1qO3WKJW3PwRlm7n1No/+A6blDcxxt4 2fzyWAQPkVe6W5uKteSLS3OFF13wJEMuDzVNPvXyE/TNi1YiDug5/mLdlhwwxlrW xnaIeeNeT/AVXMyoJBzodZiMOn8R3E+Zm4jxTBLYmUFnOtjxQXbRw0OnMhM5AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdn3NEhpRknE+Y jZig8SdXppE8LTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjhV d3F3YWdIQjhZdHJzamFXaWJVTFFNeEZKNmZpWjlQTTJVQjlQczF3aUovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0o4 VXdxd2FnSEI4WXRyc2phV2liVUxRTXhGSjZmaVo5UE0yVUI5UHMxd2lKLzEvOUQ5 RjczNDQ4Njk0NjQ5QzRGOTg4RDk4QTBGMTI3NTdBNjkxM0MyRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEuzEgAwQEu2fQMA0EAgACMAcDBQAoBAGkMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm3sMA0GCSqGSIb3DQEBCwUAA4IBAQB6wAiItsHI cU8xA7JbOfd6LOKIEjr1cybY8uDa6O55kM39133LOjNRmR2IecvkpieI8vbIkjEz YRFJ9EyPBBNkhQCsNAk5WMZ6irRN6I3bIhLH4RKPZCVLJroQfReUI1ck/cpEHyBZ kB/DfLnrozCrD7OLiVTQI42Tuluiweuo4yCSxPKjD8kYtNSjE4nJ0cc8ix+IKjIO 0smfAx2TSUZTe+YtTV1Evv4OuK7nBzwgJzaQIR6dlraF7xxSKqQsDvBChYI2W2eE 8eFJ9HEqryULrgnO7zvUthkAOV4/rxjONMaHw3i++LNpuOgRuO+XzLFPNAblANr1 jJ9XfOSRhSDm -----END CERTIFICATE-----Generated at Tue Jun 18 06:20:15 2024 by rpki-client on console-fra.rpki-client.org