$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer File: A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer (raw, json) Hash identifier: 1rjzeIGv/9CmS/aqcQ8faza5i+SwEg3BXKf0CsBlU2o= Subject key identifier: A2:E8:A6:A1:F5:77:10:B7:0C:25:15:F2:15:95:65:5D:AF:C4:BC:E0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4C5A0B23BE40DD90C0F70685C3E71B57F0ABAB46 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.mft caRepository: rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 08 Apr 2024 20:07:43 +0000 Certificate not after: Mon 07 Apr 2025 20:12:43 +0000 Subordinate resources: AS: 264352 IP: 131.108.228.0/22 IP: 2804:1d2c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 02:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:5a:0b:23:be:40:dd:90:c0:f7:06:85:c3:e7:1b:57:f0:ab:ab:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 8 20:07:43 2024 GMT Not After : Apr 7 20:12:43 2025 GMT Subject: CN=A2E8A6A1F57710B70C2515F21595655DAFC4BCE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:79:55:6e:c4:71:3b:c4:5f:c2:58:df:6b: f8:13:77:94:30:96:7a:82:c9:6a:67:9d:d6:e4:8e: e6:57:16:3c:57:7f:78:8a:e7:37:36:f2:9e:8e:d9: 3b:d1:ce:08:7d:de:8f:de:51:2b:d8:c6:dd:ae:38: 72:bf:68:3c:2f:44:7e:1b:2b:18:84:d3:64:8a:24: 2e:f8:23:7f:47:3f:a6:16:07:33:e6:20:3e:2e:21: 5a:49:28:f8:a4:63:3e:5d:da:2a:c3:5b:c1:a9:f5: 42:93:87:b2:6c:07:74:d3:40:c0:36:14:79:1f:cd: 30:dc:45:dc:7a:31:5f:fb:6e:b9:80:d6:1d:da:50: ef:36:ac:1e:83:b3:dd:94:a9:b3:47:f3:92:40:30: 49:50:bf:15:20:53:c2:a9:71:37:3e:41:66:3e:6b: f7:4e:70:d3:ee:c4:9f:37:53:5e:ed:25:2b:82:7b: 18:67:91:0d:62:0f:6c:57:7a:22:f3:0a:fe:2f:0f: 29:6f:28:8a:e7:4a:d0:9f:53:eb:26:e0:04:98:06: c7:b2:6e:0e:64:0f:d1:33:ae:16:aa:74:fa:27:51: 3d:92:07:c6:0b:9c:8d:d2:fd:74:a1:65:e7:b1:c8: 1e:b4:a3:be:bc:bd:0a:2f:33:ab:05:8d:73:9e:2c: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:E8:A6:A1:F5:77:10:B7:0C:25:15:F2:15:95:65:5D:AF:C4:BC:E0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.228.0/22 IPv6: 2804:1d2c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264352 Signature Algorithm: sha256WithRSAEncryption d5:77:6f:dc:4e:e9:46:a4:0b:16:80:d9:6f:f3:c4:5d:84:6a: 13:c9:b3:cf:f3:84:6d:77:93:1f:7b:35:27:40:50:1b:e0:d5: 9a:15:7c:7a:1f:2d:eb:61:0a:40:b8:5f:e2:40:27:bb:f7:28: aa:58:b0:ee:68:1e:8b:24:9f:3c:22:d1:7c:e9:0c:8a:35:8c: 67:d2:2b:09:4a:da:3d:d0:aa:93:2b:73:e6:5e:ed:73:fc:23: 60:07:79:d3:61:e3:2d:11:26:05:4d:c9:02:f7:b6:57:33:0e: 0e:af:c5:e5:7f:7c:74:a0:2d:dd:6d:22:4d:0f:b9:55:95:18: ef:bb:fe:26:fb:da:03:c5:0c:ac:c3:00:14:d7:37:b5:14:b7: e6:db:09:72:cf:4e:b2:0e:03:23:31:55:dc:eb:9f:13:ca:4d: b5:2b:38:5c:17:1d:05:17:a3:62:6d:23:3b:58:28:4d:65:bb: 04:00:e5:6c:74:2d:a6:ef:ac:8d:17:ec:b1:bf:3e:b1:a9:71: 3e:43:11:1d:d0:b3:ec:4f:92:b2:2b:ea:37:0f:32:50:d6:13: be:e7:36:5e:77:00:1c:da:32:93:10:0a:7d:1e:09:40:a1:aa: 1d:e6:b0:5b:d5:88:1e:c0:04:e2:0c:d1:f9:48:73:64:cc:cb: 3f:78:02:c8 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTFoLI75A3ZDA9waFw+cbV/Crq0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDgyMDA3NDNaFw0yNTA0MDcyMDEyNDNaMDMxMTAvBgNV BAMTKEEyRThBNkExRjU3NzEwQjcwQzI1MTVGMjE1OTU2NTVEQUZDNEJDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYuXlVbsRxO8Rfwljfa/gTd5Qw lnqCyWpnndbkjuZXFjxXf3iK5zc28p6O2TvRzgh93o/eUSvYxt2uOHK/aDwvRH4b KxiE02SKJC74I39HP6YWBzPmID4uIVpJKPikYz5d2irDW8Gp9UKTh7JsB3TTQMA2 FHkfzTDcRdx6MV/7brmA1h3aUO82rB6Ds92UqbNH85JAMElQvxUgU8KpcTc+QWY+ a/dOcNPuxJ83U17tJSuCexhnkQ1iD2xXeiLzCv4vDylvKIrnStCfU+sm4ASYBsey bg5kD9EzrhaqdPonUT2SB8YLnI3S/XShZeexyB60o768vQovM6sFjXOeLFjpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSi6Kah9XcQtwwl FfIVlWVdr8S84DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOU1O V3hSOFMxbnFUOWRreGoxN1Q0UzFEZ2oxRkozejMyNFduZjdQaFJ6V2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlN Tld4UjhTMW5xVDlka3hqMTdUNFMxRGdqMUZKM3ozMjRXbmY3UGhSeldkLzAvQTJF OEE2QTFGNTc3MTBCNzBDMjUxNUYyMTU5NTY1NURBRkM0QkNFMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg2zkMA0EAgACMAcDBQAoBB0sMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQIoDANBgkqhkiG9w0BAQsFAAOCAQEA1Xdv3E7pRqQLFoDZ b/PEXYRqE8mzz/OEbXeTH3s1J0BQG+DVmhV8eh8t62EKQLhf4kAnu/coqliw7mge iySfPCLRfOkMijWMZ9IrCUraPdCqkytz5l7tc/wjYAd502HjLREmBU3JAve2VzMO Dq/F5X98dKAt3W0iTQ+5VZUY77v+JvvaA8UMrMMAFNc3tRS35tsJcs9Osg4DIzFV 3OufE8pNtSs4XBcdBRejYm0jO1goTWW7BADlbHQtpu+sjRfssb8+salxPkMRHdCz 7E+SsivqNw8yUNYTvuc2XncAHNoykxAKfR4JQKGqHeawW9WIHsAE4gzR+UhzZMzL P3gCyA== -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:38 2024 by rpki-client on console-fra.rpki-client.org