$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer File: A5455EE25C6FEB15A12789F15E975474289CE800.cer (raw, json) Hash identifier: NrZJnJOzcApCI6pC0Jvi6QppZT738FCUJ1ciLODJJlc= Subject key identifier: A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5AA184958C1BC1F1D047AEF3DC9DE43CBEBE46B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft caRepository: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 07:57:43 +0000 Certificate not after: Thu 03 Apr 2025 08:02:43 +0000 Subordinate resources: AS: 262343 IP: 143.255.124.0/22 IP: 177.126.128.0/20 IP: 2804:80c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a1:84:95:8c:1b:c1:f1:d0:47:ae:f3:dc:9d:e4:3c:be:be:46:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 07:57:43 2024 GMT Not After : Apr 3 08:02:43 2025 GMT Subject: CN=A5455EE25C6FEB15A12789F15E975474289CE800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:bc:5b:8d:54:83:63:85:88:2a:c3:37:cb: a6:61:32:dd:51:a5:b1:99:30:5b:81:0e:fd:9a:8b: 71:31:d4:7f:8f:c4:2b:16:da:45:05:36:87:8d:bb: 1f:a9:8f:c1:2a:20:95:84:d9:66:2a:8a:84:cf:ca: d9:5c:75:b3:3d:d0:04:61:93:4d:83:02:43:f1:83: 9b:7c:9d:cf:a3:d8:66:e8:dc:b7:35:7e:84:ea:05: f0:ff:7c:21:3b:57:f3:48:a2:f7:fd:dd:7b:c2:f3: 06:c9:00:af:79:8a:ca:14:fb:3a:b4:c4:ba:dc:ab: 19:a3:0c:99:5d:f7:bf:41:5d:94:da:7f:aa:65:24: d6:6f:d0:76:4c:fd:52:cd:80:3c:92:11:67:c9:f7: 68:07:df:a5:b0:34:98:85:87:a3:4e:cc:6c:d0:3a: 48:be:b8:b2:30:86:cf:9e:54:18:ca:41:8a:ba:c0: 1e:d3:1d:78:b0:13:62:e0:8b:56:46:35:d8:dc:24: b5:70:54:30:11:37:f0:7e:78:57:13:8a:39:ec:36: ca:33:f9:15:ec:cf:1c:6e:3d:5b:f7:10:4e:7a:10: 94:7b:2a:e0:e0:ad:cc:7e:a7:23:70:0d:23:b9:6d: f5:09:9d:1f:63:79:02:09:7b:37:a4:8d:23:42:32: 87:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.124.0/22 177.126.128.0/20 IPv6: 2804:80c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262343 Signature Algorithm: sha256WithRSAEncryption 8b:51:0f:7b:79:d7:08:54:96:a7:13:92:16:42:e4:1f:59:79: f1:92:9d:3a:a9:25:af:84:9e:3b:86:a2:bb:20:11:2a:eb:ef: ba:ab:98:3e:b7:9d:46:5a:82:a6:49:18:4e:96:bc:ee:f9:b2: 38:ff:b6:41:5c:a5:57:62:64:27:4a:41:13:24:18:b4:bc:02: bd:93:1a:63:ae:46:88:07:69:e1:af:3d:1e:e0:73:13:88:fc: 72:58:4f:99:a3:3c:2b:29:26:67:8a:b4:6f:03:15:1b:ef:52: 9d:06:6e:e2:50:c6:a8:8c:b0:5a:57:7e:ec:a9:53:3d:79:58: ae:e4:e6:86:5f:15:64:04:2b:15:00:06:eb:d1:ab:76:29:f2: 3d:d6:9d:a7:6c:6d:b4:6b:67:ce:85:9d:ac:18:b8:22:a6:9f: a6:84:ee:52:67:0c:7d:2f:65:44:46:c5:26:52:8f:53:d3:b7: bb:bf:1a:38:26:54:98:ce:12:14:bb:92:3b:bb:55:a2:b3:64: 88:82:80:32:7b:30:8d:28:ca:cd:9f:3a:a1:2d:fc:94:83:e3: 33:dc:24:64:19:fe:bc:a3:d2:da:4e:72:26:88:2c:c8:5e:6b: c2:00:66:ac:05:8f:4e:f8:37:e8:a4:88:f8:d9:73:19:45:90: 5b:01:71:44 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUWqGElYwbwfHQR67z3J3kPL6+RrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNzU3NDNaFw0yNTA0MDMwODAyNDNaMDMxMTAvBgNV BAMTKEE1NDU1RUUyNUM2RkVCMTVBMTI3ODlGMTVFOTc1NDc0Mjg5Q0U4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIrxbjVSDY4WIKsM3y6ZhMt1R pbGZMFuBDv2ai3Ex1H+PxCsW2kUFNoeNux+pj8EqIJWE2WYqioTPytlcdbM90ARh k02DAkPxg5t8nc+j2Gbo3Lc1foTqBfD/fCE7V/NIovf93XvC8wbJAK95isoU+zq0 xLrcqxmjDJld979BXZTaf6plJNZv0HZM/VLNgDySEWfJ92gH36WwNJiFh6NOzGzQ Oki+uLIwhs+eVBjKQYq6wB7THXiwE2Lgi1ZGNdjcJLVwVDARN/B+eFcTijnsNsoz +RXszxxuPVv3EE56EJR7KuDgrcx+pyNwDSO5bfUJnR9jeQIJezekjSNCModpAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSlRV7iXG/rFaEn ifFel1R0KJzoADAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGsz NHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BXb2ovMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGsz NHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BXb2ovMi9BNTQ1 NUVFMjVDNkZFQjE1QTEyNzg5RjE1RTk3NTQ3NDI4OUNFODAwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKP/3wDBASxfoAwDQQCAAIwBwMFACgECAwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBADHMA0GCSqGSIb3DQEBCwUAA4IBAQCLUQ97edcI VJanE5IWQuQfWXnxkp06qSWvhJ47hqK7IBEq6++6q5g+t51GWoKmSRhOlrzu+bI4 /7ZBXKVXYmQnSkETJBi0vAK9kxpjrkaIB2nhrz0e4HMTiPxyWE+ZozwrKSZnirRv AxUb71KdBm7iUMaojLBaV37sqVM9eViu5OaGXxVkBCsVAAbr0at2KfI91p2nbG20 a2fOhZ2sGLgipp+mhO5SZwx9L2VERsUmUo9T07e7vxo4JlSYzhIUu5I7u1Wis2SI goAyezCNKMrNnzqhLfyUg+Mz3CRkGf68o9LaTnImiCzIXmvCAGasBY9O+DfopIj4 2XMZRZBbAXFE -----END CERTIFICATE-----Generated at Sat Jun 29 03:15:23 2024 by rpki-client on console-fra.rpki-client.org