$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer File: 9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer (raw, json) Hash identifier: ikg3EWuOzh60lXDXky6i3DPKBOH+lysrNRvyvJ5iPOQ= Subject key identifier: 9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 167914B80E9CF8B66534678BEEC584160AA37C09 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft caRepository: rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 06:42:04 +0000 Certificate not after: Thu 03 Apr 2025 06:47:04 +0000 Subordinate resources: AS: 267058 IP: 45.228.96.0/22 IP: 2804:4780::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 05:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:79:14:b8:0e:9c:f8:b6:65:34:67:8b:ee:c5:84:16:0a:a3:7c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 06:42:04 2024 GMT Not After : Apr 3 06:47:04 2025 GMT Subject: CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a1:83:7c:ff:d9:c1:85:c9:68:e0:24:9e:a5: 51:f8:93:bc:01:09:47:94:bd:67:5d:12:72:fd:ed: 49:ba:f5:a9:aa:f1:38:bd:5f:34:d2:2a:63:a5:86: b6:99:42:0c:fb:97:46:31:2e:9c:ea:95:d7:74:3a: 0a:39:ca:67:64:8b:41:ba:a9:b3:c9:c9:c6:a8:f1: f7:b2:70:23:96:71:9c:2b:22:29:10:bc:37:22:45: 81:ef:21:0a:88:62:46:ef:e9:38:0d:0a:e3:47:be: 25:52:9f:24:37:b2:fb:b9:56:1a:f3:b9:e9:54:05: ab:8e:b3:f4:5d:89:86:51:a9:90:39:d2:48:9d:0b: 58:b1:ad:4e:08:b3:fb:e2:0e:c9:42:f7:52:eb:16: f5:a5:93:d6:2f:a8:67:81:91:0c:2a:99:83:e1:ce: 4b:db:23:6a:ac:84:0b:7e:2d:ef:86:f5:ab:16:b2: 0f:b0:98:b1:2f:38:70:82:fa:8b:86:14:0d:dc:58: 1c:3e:5c:83:ef:e4:86:c9:68:41:be:ba:9c:61:78: 4a:2a:8a:95:eb:81:c3:f9:b7:a9:8f:b4:16:67:75: c9:8b:bd:fa:c2:a3:b5:e8:2b:31:b4:e1:27:c2:0a: 73:fc:4c:a9:63:ad:62:ac:51:8b:27:45:8b:bb:83: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.96.0/22 IPv6: 2804:4780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267058 Signature Algorithm: sha256WithRSAEncryption 5e:cb:a8:ca:c5:77:42:8a:0d:8b:9a:f2:1d:8e:53:4a:cd:71: d1:69:99:af:1c:2c:ec:60:be:df:89:47:49:ed:69:61:29:d0: a8:0e:40:da:51:70:b0:07:96:f4:33:e4:ea:f6:80:e5:ff:13: 5f:70:1b:48:83:8f:c2:92:94:92:7e:57:4b:54:93:86:71:fa: 17:46:3d:4c:73:7b:0f:fa:ba:13:20:14:83:49:6e:16:bf:ca: 76:d7:7b:b7:d2:76:56:1c:75:19:69:e4:23:ce:01:77:77:b7: 32:05:da:8c:99:fe:77:06:26:43:88:15:76:4b:fb:b6:2a:a8: cb:61:1f:b3:58:77:32:93:ac:67:ac:7e:80:f3:61:a5:ea:c9: 13:58:01:c5:6a:c5:ff:70:bd:b1:21:4d:b7:b7:ed:81:da:04: 9c:1d:44:b4:df:f1:96:2e:b3:72:b7:da:2c:0e:74:77:5a:49: 0e:e5:f1:df:d9:b5:dd:64:22:ff:15:4b:1b:e6:17:67:bb:72: be:e7:d6:a3:b8:88:58:3f:24:0f:c4:d7:1f:e7:94:dc:b9:ab: 5b:77:b8:4e:c8:76:95:59:c3:ac:29:d0:76:c4:b2:fe:b4:8c: 41:67:a4:a6:21:38:f0:1c:f7:f4:7a:6d:d3:52:4b:ca:ba:90: c8:1a:d4:80 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUFnkUuA6c+LZlNGeL7sWEFgqjfAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNjQyMDRaFw0yNTA0MDMwNjQ3MDRaMDMxMTAvBgNV BAMTKDlERTAwRkU4RERFNDlFOUUyRjU2RTI2MUFBMUMzRTkzMTNFRUIzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXoYN8/9nBhclo4CSepVH4k7wB CUeUvWddEnL97Um69amq8Ti9XzTSKmOlhraZQgz7l0YxLpzqldd0Ogo5ymdki0G6 qbPJycao8feycCOWcZwrIikQvDciRYHvIQqIYkbv6TgNCuNHviVSnyQ3svu5Vhrz uelUBauOs/RdiYZRqZA50kidC1ixrU4Is/viDslC91LrFvWlk9YvqGeBkQwqmYPh zkvbI2qshAt+Le+G9asWsg+wmLEvOHCC+ouGFA3cWBw+XIPv5IbJaEG+upxheEoq ipXrgcP5t6mPtBZndcmLvfrCo7XoKzG04SfCCnP8TKljrWKsUYsnRYu7gwKVAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSd4A/o3eSeni9W 4mGqHD6TE+6z/jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHdG bjdxNTZiOGc4d0hQWlA2ZUdwS29RTXUxbmJXaFZ2ZHlON0NraWN4dzMvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHdG bjdxNTZiOGc4d0hQWlA2ZUdwS29RTXUxbmJXaFZ2ZHlON0NraWN4dzMvMS85REUw MEZFOERERTQ5RTlFMkY1NkUyNjFBQTFDM0U5MzEzRUVCM0ZFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt5GAwDQQCAAIwBwMFACgER4AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBMyMA0GCSqGSIb3DQEBCwUAA4IBAQBey6jKxXdCig2LmvId jlNKzXHRaZmvHCzsYL7fiUdJ7WlhKdCoDkDaUXCwB5b0M+Tq9oDl/xNfcBtIg4/C kpSSfldLVJOGcfoXRj1Mc3sP+roTIBSDSW4Wv8p213u30nZWHHUZaeQjzgF3d7cy BdqMmf53BiZDiBV2S/u2KqjLYR+zWHcyk6xnrH6A82Gl6skTWAHFasX/cL2xIU23 t+2B2gScHUS03/GWLrNyt9osDnR3WkkO5fHf2bXdZCL/FUsb5hdnu3K+59ajuIhY PyQPxNcf55Tcuatbd7hOyHaVWcOsKdB2xLL+tIxBZ6SmITjwHPf0em3TUkvKupDI GtSA -----END CERTIFICATE-----Generated at Mon Jul 1 03:57:02 2024 by rpki-client on console-ams.rpki-client.org