$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer File: A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer (raw, json) Hash identifier: Ww16mc8lDHiZopx/9on7YT09B0AeCmTxZb/wehwSY/s= Subject key identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 032FC2576AEA908595134EECC86A1B2835E55AB0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft caRepository: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 11:18:13 +0000 Certificate not after: Thu 03 Apr 2025 11:23:13 +0000 Subordinate resources: AS: 266387 IP: 170.81.20.0/22 IP: 191.37.140.0/22 IP: 2804:3710::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2f:c2:57:6a:ea:90:85:95:13:4e:ec:c8:6a:1b:28:35:e5:5a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 11:18:13 2024 GMT Not After : Apr 3 11:23:13 2025 GMT Subject: CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f0:f0:66:21:d7:63:40:b4:8e:20:ce:4d:62: 3e:60:45:76:22:5a:09:07:bb:b9:dc:ac:a3:1e:f8: 4b:36:b3:0f:88:07:3d:e6:c4:ac:23:4c:4a:29:97: bf:7a:4e:a5:a3:ad:af:d7:03:0c:e6:61:ba:ae:ff: 51:04:87:23:a8:58:81:d3:2e:2e:c7:5a:a5:bb:d9: c1:7d:25:24:45:ee:64:a9:4a:5c:66:c1:59:e5:9f: 25:ef:8b:09:8e:cb:9a:fb:72:7c:be:23:9b:18:12: 52:06:6c:b4:25:b9:a0:37:d0:cb:51:c2:6a:27:d6: be:0f:07:b9:e0:bf:f1:7d:d3:31:aa:8e:d9:8a:d0: 58:e2:05:66:61:89:27:91:ac:bd:12:c9:d4:b9:2c: 58:63:8e:3a:27:bc:27:e7:47:d9:8d:ee:0c:ba:2a: 28:a0:5e:c4:2b:e7:fe:03:37:91:f0:39:24:81:8e: 39:f9:5a:a6:ef:46:14:92:d7:7e:5b:4e:7e:e9:0e: 36:ef:db:05:e5:23:2a:22:c4:b9:c9:27:27:3d:1b: 93:9c:a1:a1:ad:b0:1e:af:bf:74:ee:20:a3:c7:d8: 85:35:59:85:3c:ca:94:c3:e7:62:bc:8e:da:7b:f2: 66:04:82:4c:b6:f6:14:7b:2a:7c:07:49:de:5d:1b: 70:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.81.20.0/22 191.37.140.0/22 IPv6: 2804:3710::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266387 Signature Algorithm: sha256WithRSAEncryption 0d:a2:2c:31:96:27:77:8d:13:89:e0:39:5d:aa:82:06:ad:18: de:4d:bb:2e:7a:16:bc:58:d3:89:ad:e5:17:e1:f1:23:28:09: 56:81:d6:83:ae:7a:27:4c:dc:72:2b:f3:fc:1d:3b:db:28:30: ea:8d:35:cc:2f:b2:b9:2a:60:5e:d6:57:32:fd:15:f7:0c:35: 6f:42:07:f9:12:d2:00:73:f3:73:b6:1e:c6:a0:68:d0:98:86: 5e:74:b5:48:0d:93:7e:7c:0e:18:18:f6:5f:2a:7d:10:0e:37: a5:32:73:b9:16:f1:16:23:21:82:7d:4c:d3:48:8d:dd:a9:be: 46:f9:b4:46:bd:2c:e7:bb:b4:3e:64:27:49:d4:5e:5b:7b:ed: 36:3d:bc:19:35:31:41:26:90:46:56:5f:04:af:f4:1e:16:0a: f5:67:6f:b3:f7:30:2b:2f:34:a6:c9:5f:cf:42:f5:a3:9f:49: 23:5a:92:6f:d6:98:64:84:a6:af:45:cd:63:e5:7b:57:dc:68: f1:67:80:8a:76:19:10:53:4f:30:44:5d:0f:c0:4a:94:f6:55: 86:42:0b:98:35:a4:f7:f3:60:bb:31:a8:d3:55:d6:92:97:d2: fc:82:64:73:cb:87:1e:eb:d5:b9:8f:f8:00:b4:10:de:55:d6: 5b:35:8e:71 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUAy/CV2rqkIWVE07syGobKDXlWrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMTE4MTNaFw0yNTA0MDMxMTIzMTNaMDMxMTAvBgNV BAMTKEEyOEYwQzFFRDE4RjQ4QTY2OUM3NkJBMzRDRDcyRjJBMTQ1NkE0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw8PBmIddjQLSOIM5NYj5gRXYi WgkHu7ncrKMe+Es2sw+IBz3mxKwjTEopl796TqWjra/XAwzmYbqu/1EEhyOoWIHT Li7HWqW72cF9JSRF7mSpSlxmwVnlnyXviwmOy5r7cny+I5sYElIGbLQluaA30MtR wmon1r4PB7ngv/F90zGqjtmK0FjiBWZhiSeRrL0SydS5LFhjjjonvCfnR9mN7gy6 KiigXsQr5/4DN5HwOSSBjjn5WqbvRhSS135bTn7pDjbv2wXlIyoixLnJJyc9G5Oc oaGtsB6vv3TuIKPH2IU1WYU8ypTD52K8jtp78mYEgky29hR7KnwHSd5dG3BBAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSijwwe0Y9IpmnH a6NM1y8qFFakGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHZH alJYcm1hN2pOR2FqczZtQUNTYjVrQmZZczZrdUd0NXJUVjNleGp2SDkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R2 R2pSWHJtYTdqTkdhanM2bUFDU2I1a0JmWXM2a3VHdDVyVFYzZXhqdkg5LzEvQTI4 RjBDMUVEMThGNDhBNjY5Qzc2QkEzNENENzJGMkExNDU2QTQxOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlEUAwQCvyWMMA0EAgACMAcDBQAoBDcQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQQkzANBgkqhkiG9w0BAQsFAAOCAQEADaIsMZYn d40TieA5XaqCBq0Y3k27LnoWvFjTia3lF+HxIygJVoHWg656J0zccivz/B072ygw 6o01zC+yuSpgXtZXMv0V9ww1b0IH+RLSAHPzc7YexqBo0JiGXnS1SA2TfnwOGBj2 Xyp9EA43pTJzuRbxFiMhgn1M00iN3am+Rvm0Rr0s57u0PmQnSdReW3vtNj28GTUx QSaQRlZfBK/0HhYK9Wdvs/cwKy80pslfz0L1o59JI1qSb9aYZISmr0XNY+V7V9xo 8WeAinYZEFNPMERdD8BKlPZVhkILmDWk9/NguzGo01XWkpfS/IJkc8uHHuvVuY/4 ALQQ3lXWWzWOcQ== -----END CERTIFICATE-----Generated at Sat Jun 1 22:59:53 2024 by rpki-client on console-fra.rpki-client.org