$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.cer File: A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.cer (raw, json) Hash identifier: n+VizdgVV2U4iAhOsJnSHeZ7sMlFlfryq3DTk+OZP64= Subject key identifier: A3:75:6B:DF:1D:16:A4:69:6D:DB:D8:78:85:37:C2:F8:FB:47:FA:72 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 574246D850CE8978046E9E44BE4233844F1E234C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.mft caRepository: rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:27:03 +0000 Certificate not after: Thu 03 Apr 2025 02:32:03 +0000 Subordinate resources: AS: 265394 IP: 168.194.192.0/22 IP: 2804:3368::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:42:46:d8:50:ce:89:78:04:6e:9e:44:be:42:33:84:4f:1e:23:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:27:03 2024 GMT Not After : Apr 3 02:32:03 2025 GMT Subject: CN=A3756BDF1D16A4696DDBD8788537C2F8FB47FA72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:fd:a4:0d:a6:54:ec:63:81:21:96:d0:54: 52:73:ec:c9:6b:93:cd:2b:cd:4f:78:3b:82:28:66: d3:b7:a4:f2:13:bf:65:0f:3a:80:21:7e:8c:78:a3: 96:6a:7d:87:1f:db:1a:42:f6:85:97:ee:9c:ce:b0: ad:f4:85:26:19:20:2f:c0:12:d1:4b:51:8b:24:b9: 70:a2:07:3a:4d:fa:eb:c5:02:01:59:4c:01:e1:9e: 0f:db:60:ad:ad:a3:d7:e9:d1:6a:8d:4b:b3:4e:f6: fe:cd:b7:65:13:8b:b5:bb:60:e1:2a:d2:57:83:44: bd:6a:1e:5c:43:90:f8:ae:86:d6:1b:e0:24:d3:83: 72:b1:d0:76:af:1b:ba:10:b2:c9:17:f9:53:43:8f: 8b:48:92:6d:ec:62:a6:55:45:18:af:3b:19:ab:c7: 0e:b7:42:fe:83:e9:c1:d4:14:ab:73:68:6e:90:ad: aa:e7:53:b7:41:ad:d8:54:56:65:c2:48:65:11:00: 95:c1:85:19:65:b3:ea:87:ff:a2:28:97:ae:85:58: cd:8f:18:1a:1d:bd:24:0b:7e:f7:a6:50:e2:31:c9: 02:b6:d6:f8:c0:e7:58:bc:f9:bf:bd:27:a5:74:4f: 36:b4:11:89:f9:3c:66:7b:f3:c6:72:f9:48:98:c5: c2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:75:6B:DF:1D:16:A4:69:6D:DB:D8:78:85:37:C2:F8:FB:47:FA:72 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.194.192.0/22 IPv6: 2804:3368::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265394 Signature Algorithm: sha256WithRSAEncryption 33:18:f9:80:b4:b3:e7:15:1a:b5:a7:77:4f:b7:d4:58:09:07: 6f:d8:56:73:c7:57:10:85:a3:a5:16:c4:4a:5c:d1:50:5f:8b: 19:ff:52:60:1f:88:7e:cf:6f:dc:c2:d6:9f:15:ad:f5:98:df: f3:8f:03:01:55:02:9c:44:12:c7:93:f8:bc:80:27:6d:32:b4: 0c:11:b9:bc:25:a0:7e:34:ce:13:6e:18:2f:5f:f2:27:6a:8b: 1b:ba:25:67:70:81:0f:6a:25:c4:2b:63:fa:9b:87:ca:56:ff: eb:8a:c2:ca:75:01:06:de:20:55:f1:39:de:aa:cb:09:32:48: f8:50:5f:d5:75:45:0c:bb:53:67:e5:36:35:08:d2:00:57:9f: 69:d7:6c:51:18:b5:df:d6:b7:9f:4b:26:a1:94:ae:24:38:76: 5d:ae:25:61:0c:68:89:74:69:ab:26:d3:5c:03:6e:55:a4:e1: d4:36:a4:82:9e:c0:b9:e6:8a:a7:87:a2:7d:8e:5b:9b:73:19: b6:e1:83:4e:cb:c4:86:cf:96:96:c7:7b:e7:61:27:46:f2:45: 86:61:ad:38:c0:83:c0:fd:0e:1a:b6:37:97:32:c0:46:80:da: e1:f8:e9:8a:80:d7:2f:f1:0e:20:a2:92:c9:bd:cf:e6:f7:61: 56:35:85:f2 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUV0JG2FDOiXgEbp5EvkIzhE8eI0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjI3MDNaFw0yNTA0MDMwMjMyMDNaMDMxMTAvBgNV BAMTKEEzNzU2QkRGMUQxNkE0Njk2RERCRDg3ODg1MzdDMkY4RkI0N0ZBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCv2kDaZU7GOBIZbQVFJz7Mlr k80rzU94O4IoZtO3pPITv2UPOoAhfox4o5ZqfYcf2xpC9oWX7pzOsK30hSYZIC/A EtFLUYskuXCiBzpN+uvFAgFZTAHhng/bYK2to9fp0WqNS7NO9v7Nt2UTi7W7YOEq 0leDRL1qHlxDkPiuhtYb4CTTg3Kx0HavG7oQsskX+VNDj4tIkm3sYqZVRRivOxmr xw63Qv6D6cHUFKtzaG6QrarnU7dBrdhUVmXCSGURAJXBhRlls+qH/6Iol66FWM2P GBodvSQLfvemUOIxyQK21vjA51i8+b+9J6V0Tza0EYn5PGZ788Zy+UiYxcILAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSjdWvfHRakaW3b 2HiFN8L4+0f6cjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDhp N2FqMThOdnhzVUhId1ZDeVJ6RHVKckFTRkIyaDV0QmV6YmtKMWJEOTUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDhp N2FqMThOdnhzVUhId1ZDeVJ6RHVKckFTRkIyaDV0QmV6YmtKMWJEOTUvMS9BMzc1 NkJERjFEMTZBNDY5NkREQkQ4Nzg4NTM3QzJGOEZCNDdGQTcyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKowsAwDQQCAAIwBwMFACgEM2gwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAyyMA0GCSqGSIb3DQEBCwUAA4IBAQAzGPmAtLPnFRq1p3dP t9RYCQdv2FZzx1cQhaOlFsRKXNFQX4sZ/1JgH4h+z2/cwtafFa31mN/zjwMBVQKc RBLHk/i8gCdtMrQMEbm8JaB+NM4TbhgvX/InaosbuiVncIEPaiXEK2P6m4fKVv/r isLKdQEG3iBV8TneqssJMkj4UF/VdUUMu1Nn5TY1CNIAV59p12xRGLXf1refSyah lK4kOHZdriVhDGiJdGmrJtNcA25VpOHUNqSCnsC55oqnh6J9jlubcxm24YNOy8SG z5aWx3vnYSdG8kWGYa04wIPA/Q4atjeXMsBGgNrh+OmKgNcv8Q4gopLJvc/m92FW NYXy -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:42 2024 by rpki-client on console-ams.rpki-client.org