$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer File: A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer (raw, json) Hash identifier: tsXznSfeUM7B4ZdYoIdTq/YbW/RFWtEB/YmooRk0e3Q= Subject key identifier: A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 570435CB436DB76EFE5C69E4E798A119E583A790 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft caRepository: rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:56:16 +0000 Certificate not after: Thu 03 Apr 2025 03:01:16 +0000 Subordinate resources: AS: 266341 IP: 170.239.60.0/22 IP: 2804:3650::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 18:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:04:35:cb:43:6d:b7:6e:fe:5c:69:e4:e7:98:a1:19:e5:83:a7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:56:16 2024 GMT Not After : Apr 3 03:01:16 2025 GMT Subject: CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:2e:82:c8:3a:1d:e0:ee:fc:3b:8b:b1:02: 94:bc:3f:5d:56:ea:46:d8:53:c5:19:0d:f6:38:17: 33:ca:68:d6:63:cb:e8:19:73:ca:02:a0:42:f6:0a: 57:d8:36:8b:2f:ec:7e:13:8b:de:46:f5:62:ce:01: e8:c0:09:bc:a2:95:db:f5:c0:92:10:44:25:f2:07: ad:2a:20:61:bc:66:b5:eb:8b:28:ca:5b:f8:7b:f9: b8:60:02:e2:7e:22:e8:7b:e4:8d:7e:04:f5:c5:39: 98:a5:2f:6f:89:a2:87:4b:52:b9:43:4d:46:b9:7b: 39:0b:7f:4b:d4:96:09:79:bc:38:b2:67:f6:60:c0: 3e:34:ba:bb:4d:05:f4:61:11:cd:a0:2a:ad:88:a7: 7e:70:e0:4e:37:79:1e:44:96:90:2c:bd:99:44:31: d6:0d:46:7c:71:00:b7:d0:a5:f2:9c:cc:21:de:c3: 01:b2:86:6c:07:03:27:52:22:78:86:d4:d8:be:34: 52:4e:77:6c:23:90:05:ee:a8:b2:88:43:12:7c:5a: 3c:58:30:55:6f:bd:c3:44:79:de:49:63:b0:cb:83: 59:d1:d2:bf:ce:3c:75:5b:97:82:84:42:26:44:9a: b7:63:2b:70:f9:7b:b4:7f:25:d1:76:93:a1:62:10: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.239.60.0/22 IPv6: 2804:3650::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266341 Signature Algorithm: sha256WithRSAEncryption 07:4c:76:6f:06:ea:b7:13:4c:b5:f3:2f:89:b6:9d:5b:8d:d3: c8:0d:a5:c6:0f:1c:6a:a4:11:57:74:f5:79:3b:11:59:e9:36: e8:ae:c9:34:6e:c3:d1:b1:9a:0c:5f:e8:c8:f3:a9:bb:a6:af: 84:a1:ef:28:6f:be:41:84:b5:fb:06:ff:ce:23:51:95:ac:2e: 80:14:e8:b7:50:ba:da:84:a8:c8:a5:15:d6:48:88:8d:4d:6c: 3d:99:c7:63:04:a0:aa:4c:11:38:61:3e:09:1a:87:83:75:f7: c0:45:0c:9e:11:7d:f0:c5:d7:6a:1e:75:80:e4:80:0f:0a:c1: 29:4b:22:3c:76:69:66:21:8d:bb:81:16:ea:51:c1:e3:df:ea: 35:61:00:a5:16:35:2b:9c:b9:f1:93:c6:41:41:d6:38:0a:20: df:36:db:b7:f6:64:e1:71:43:b9:59:06:cf:5c:8e:3e:20:2b: 3a:ae:33:50:53:c1:57:69:fa:57:76:9f:3f:f0:60:98:44:71: 81:1f:fc:e7:d7:c4:23:17:9d:e2:6b:97:e6:32:79:d9:d1:90: 54:ed:31:7a:52:c8:b4:92:d1:3c:6c:cc:38:6d:db:9d:3b:47: e9:84:a3:64:35:17:26:ff:5d:53:2b:65:76:02:76:8a:47:d7: ef:f8:df:8b -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUVwQ1y0Ntt27+XGnk55ihGeWDp5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjU2MTZaFw0yNTA0MDMwMzAxMTZaMDMxMTAvBgNV BAMTKEE1RTZDNDA5ODUzQzREQkM1MDhENEUxMjRGMDNCMUVBMjcxMEEwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEji6CyDod4O78O4uxApS8P11W 6kbYU8UZDfY4FzPKaNZjy+gZc8oCoEL2ClfYNosv7H4Ti95G9WLOAejACbyildv1 wJIQRCXyB60qIGG8ZrXriyjKW/h7+bhgAuJ+Iuh75I1+BPXFOZilL2+JoodLUrlD TUa5ezkLf0vUlgl5vDiyZ/ZgwD40urtNBfRhEc2gKq2Ip35w4E43eR5ElpAsvZlE MdYNRnxxALfQpfKczCHewwGyhmwHAydSIniG1Ni+NFJOd2wjkAXuqLKIQxJ8WjxY MFVvvcNEed5JY7DLg1nR0r/OPHVbl4KEQiZEmrdjK3D5e7R/JdF2k6FiEK9hAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSl5sQJhTxNvFCN ThJPA7HqJxCgpjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWpD amJKemR4eGlUNjMySG84ZzdlVlozWnh0UVJQRDRpcWZYb2txTXJvb2gvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWpD amJKemR4eGlUNjMySG84ZzdlVlozWnh0UVJQRDRpcWZYb2txTXJvb2gvMS9BNUU2 QzQwOTg1M0M0REJDNTA4RDRFMTI0RjAzQjFFQTI3MTBBMEE2Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKq7zwwDQQCAAIwBwMFACgENlAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBBlMA0GCSqGSIb3DQEBCwUAA4IBAQAHTHZvBuq3E0y18y+J tp1bjdPIDaXGDxxqpBFXdPV5OxFZ6Tborsk0bsPRsZoMX+jI86m7pq+Eoe8ob75B hLX7Bv/OI1GVrC6AFOi3ULrahKjIpRXWSIiNTWw9mcdjBKCqTBE4YT4JGoeDdffA RQyeEX3wxddqHnWA5IAPCsEpSyI8dmlmIY27gRbqUcHj3+o1YQClFjUrnLnxk8ZB QdY4CiDfNtu39mThcUO5WQbPXI4+ICs6rjNQU8FXafpXdp8/8GCYRHGBH/zn18Qj F53ia5fmMnnZ0ZBU7TF6Usi0ktE8bMw4bdudO0fphKNkNRcm/11TK2V2AnaKR9fv +N+L -----END CERTIFICATE-----Generated at Tue Jun 18 17:34:20 2024 by rpki-client on console-ams.rpki-client.org