$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer File: A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer (raw, json) Hash identifier: Gp8aKD2yhqDvoEMpg6TlFJA+UVpLRr14NNyzeIvzYw0= Subject key identifier: A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4D9B377C286F3A73F30A79FAD7065C2A77C39809 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft caRepository: rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 17:46:24 +0000 Certificate not after: Thu 03 Apr 2025 17:51:24 +0000 Subordinate resources: AS: 265890 IP: 131.196.4.0/22 IP: 2804:3f64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 01:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9b:37:7c:28:6f:3a:73:f3:0a:79:fa:d7:06:5c:2a:77:c3:98:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 17:46:24 2024 GMT Not After : Apr 3 17:51:24 2025 GMT Subject: CN=A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:5b:ee:cb:d5:8f:de:d4:fd:40:d8:0e:69: 8a:5b:15:6b:30:58:0e:18:52:2a:6f:bd:f4:c3:b7: 38:ec:9e:8e:ab:80:f5:42:f5:90:52:08:af:90:9b: 9b:56:76:38:ca:1d:f6:cd:09:96:bf:02:c5:3f:71: c9:37:44:4c:04:20:42:ae:a1:8f:08:32:b1:21:5b: 8c:06:a5:db:ec:ee:bc:b8:62:db:29:40:86:55:b7: 23:3f:f0:e9:7d:6d:9c:8f:89:d3:76:68:05:af:95: ff:b0:dd:ad:a6:c4:62:71:eb:a9:0f:8f:4d:4c:9d: 57:a9:0f:14:10:71:08:6a:59:bb:95:2a:d6:a1:ac: d3:e4:af:d6:b0:05:ef:5d:9c:6e:a0:69:cd:8f:0a: 69:6b:7f:f4:6e:69:ce:6b:06:52:0b:83:06:2e:7b: 29:aa:8f:e0:46:99:80:88:83:ba:5b:70:d6:3a:69: 33:0e:4a:ee:f3:4d:fe:a2:56:98:75:4b:ac:c6:c8: e3:8f:41:47:f0:55:a8:37:37:17:67:83:5b:b0:f9: 2f:1d:f2:f4:a5:9a:f1:93:c9:cd:85:2b:b7:9d:eb: 37:5a:35:86:9b:a4:a1:a7:3c:78:1d:9c:bb:cf:9e: f9:69:03:1c:88:3d:d4:42:90:b2:b1:ad:54:5a:78: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.4.0/22 IPv6: 2804:3f64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265890 Signature Algorithm: sha256WithRSAEncryption 48:ab:0a:66:9e:e5:8a:60:2d:5c:1e:ef:b6:a3:6b:22:6c:a9: 81:e3:e3:95:fc:18:bd:f9:b2:03:70:f9:bd:26:1e:3d:9c:8c: 21:0e:69:ca:6c:8a:22:a3:11:79:a0:28:a3:89:cc:53:d6:e4: 6b:b6:32:11:ec:80:8d:c0:33:89:e2:5e:4e:07:e8:52:28:87: c7:52:bc:fd:1e:f3:e7:6f:99:28:e0:7f:f2:e4:78:83:1e:52: f2:69:1a:ad:2c:7a:82:88:fa:69:78:4e:cf:95:53:f2:11:42: 03:ec:a5:a2:66:b2:f5:81:bd:36:35:af:57:40:d1:8a:14:82: 7e:f5:fa:f1:fc:86:1f:7a:40:c2:8c:73:a6:5f:20:3c:d2:f2: 0d:d4:cc:12:e9:17:70:84:b2:12:3e:f3:c2:1c:63:d7:2a:f4: ce:e9:d7:c9:01:75:fe:99:0e:9b:7b:68:8a:1c:97:f1:e0:16: 4e:63:5e:c6:ed:eb:92:ba:8c:6a:65:55:43:af:70:2b:9a:98: b8:5d:a5:48:dc:8d:d0:71:f4:58:40:23:3e:5a:b0:9b:7e:2a: 88:1a:b4:ae:67:f0:fe:e6:a6:36:2b:fa:91:8c:16:83:33:e0: 9d:0e:8a:90:9f:07:57:4b:84:f9:89:28:e4:f8:74:d1:a5:e8: 4a:25:bc:0e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTZs3fChvOnPzCnn61wZcKnfDmAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNzQ2MjRaFw0yNTA0MDMxNzUxMjRaMDMxMTAvBgNV BAMTKEE4ODM5RDYzQzNFMTEyRDBCODNDQkIwMTBBRERFNUI0QzMzQjBDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPVvuy9WP3tT9QNgOaYpbFWsw WA4YUipvvfTDtzjsno6rgPVC9ZBSCK+Qm5tWdjjKHfbNCZa/AsU/cck3REwEIEKu oY8IMrEhW4wGpdvs7ry4YtspQIZVtyM/8Ol9bZyPidN2aAWvlf+w3a2mxGJx66kP j01MnVepDxQQcQhqWbuVKtahrNPkr9awBe9dnG6gac2PCmlrf/Ruac5rBlILgwYu eymqj+BGmYCIg7pbcNY6aTMOSu7zTf6iVph1S6zGyOOPQUfwVag3Nxdng1uw+S8d 8vSlmvGTyc2FK7ed6zdaNYabpKGnPHgdnLvPnvlpAxyIPdRCkLKxrVRaeJEdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSog51jw+ES0Lg8 uwEK3eW0wzsMTDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGpZ eUZDOURCcEhRRE5aY2ttZ0dqVDN5UVRMS3ZGYlNzQ3phM004V1E4cUEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hq WXlGQzlEQnBIUUROWmNrbWdHalQzeVFUTEt2RmJTc0N6YTNNOFdROHFBLzEvQTg4 MzlENjNDM0UxMTJEMEI4M0NCQjAxMEFEREU1QjRDMzNCMEM0Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg8QEMA0EAgACMAcDBQAoBD9kMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQOojANBgkqhkiG9w0BAQsFAAOCAQEASKsKZp7limAtXB7v tqNrImypgePjlfwYvfmyA3D5vSYePZyMIQ5pymyKIqMReaAoo4nMU9bka7YyEeyA jcAzieJeTgfoUiiHx1K8/R7z52+ZKOB/8uR4gx5S8mkarSx6goj6aXhOz5VT8hFC A+ylomay9YG9NjWvV0DRihSCfvX68fyGH3pAwoxzpl8gPNLyDdTMEukXcISyEj7z whxj1yr0zunXyQF1/pkOm3toihyX8eAWTmNexu3rkrqMamVVQ69wK5qYuF2lSNyN 0HH0WEAjPlqwm34qiBq0rmfw/uamNiv6kYwWgzPgnQ6KkJ8HV0uE+Yko5Ph00aXo SiW8Dg== -----END CERTIFICATE-----Generated at Tue Jun 18 00:27:01 2024 by rpki-client on console-ams.rpki-client.org