$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer File: A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer (raw, json) Hash identifier: Q4ZcwE2Rb2zDMX+rKPR0oVr3q5NuKOt1xRlt+RC5CH0= Subject key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6DE088E9941CF9E9F70265704B955AF70A25F3B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.mft caRepository: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 07:55:23 +0000 Certificate not after: Thu 03 Apr 2025 08:00:23 +0000 Subordinate resources: AS: 263558 IP: 143.255.196.0/22 IP: 186.237.216.0/21 IP: 2804:ef0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 13:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e0:88:e9:94:1c:f9:e9:f7:02:65:70:4b:95:5a:f7:0a:25:f3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 07:55:23 2024 GMT Not After : Apr 3 08:00:23 2025 GMT Subject: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:56:83:e2:33:8f:0f:f3:e3:25:6c:24:26:16: 73:6d:01:f5:3e:97:32:36:d9:98:6f:db:d5:37:0d: e0:fd:8f:20:b4:4e:f6:7e:03:f5:e9:a5:ef:9b:02: ea:d4:01:cf:97:d1:96:fc:97:6b:4b:7c:a8:da:c8: 0a:3f:87:3b:61:87:35:f1:1b:1f:f3:f6:b4:f9:38: fa:ba:31:48:80:c9:49:20:30:80:69:73:a3:fa:3b: ae:36:93:a8:68:df:b8:3a:18:3c:f7:f6:5c:ca:fb: 48:a7:28:03:13:94:4e:5e:42:ef:53:b5:83:e8:e7: a5:47:e0:d8:a1:07:a6:99:e8:da:66:ec:2a:fa:37: d3:ec:26:12:e3:4c:1e:30:f4:b2:e1:c6:ed:ba:3d: eb:82:8b:a4:f4:c6:af:06:a3:dc:40:a7:68:b0:6e: fc:97:e7:81:d5:f5:f0:01:f7:32:4e:96:13:fe:f3: 04:c3:44:be:88:35:66:9d:de:e2:67:17:83:31:64: c6:25:f0:18:f4:f7:75:aa:35:95:dc:48:dc:84:4d: f4:11:b8:3c:71:97:b9:fc:8a:b4:54:00:04:90:a9: b8:06:c4:8a:4e:1a:4b:b2:d0:6d:95:3c:93:0c:0f: c6:1a:9f:ae:24:0e:5d:3b:09:2e:1d:b5:d5:57:54: d5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.196.0/22 186.237.216.0/21 IPv6: 2804:ef0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263558 Signature Algorithm: sha256WithRSAEncryption c2:f1:ac:b9:c8:1d:71:4e:ef:20:c7:59:fe:e1:9e:b0:eb:c6: 25:ec:54:25:fd:2e:dd:d1:be:dc:ed:b8:1f:fa:bd:33:90:b9: 17:8e:01:22:7c:f7:15:e3:09:f9:87:ab:f8:79:d5:6b:6b:a8: b9:f1:07:33:92:94:72:25:7f:27:79:a7:85:9c:66:a0:2b:0a: 32:61:57:51:0b:df:ee:85:42:39:f3:e9:dc:e3:df:78:5c:4b: b2:e5:f5:72:b8:a3:1f:d5:a3:92:d7:55:8a:96:cf:73:21:1a: a4:9b:10:0e:c3:6e:f9:00:35:ec:7f:7a:d0:8b:b7:c7:d1:73: 0d:78:ce:41:dc:23:b4:22:5b:0e:50:cc:9c:34:91:25:c6:af: 15:64:f6:90:d7:0a:fd:d5:08:ec:84:ec:e4:ed:95:82:06:4e: 8a:fc:6f:5e:f5:d3:d1:d5:27:1a:7e:2e:5b:a5:2d:90:d8:ed: bd:1c:83:85:a7:5c:6b:87:0a:db:85:a1:da:b7:12:03:24:c9: 21:a1:83:bc:2b:ac:1d:e4:93:d3:52:4e:b9:b6:99:e8:a3:c0: 49:cd:dd:5b:bf:88:51:65:0b:76:8c:f6:34:2c:df:a8:e6:c1: ea:31:6b:9e:99:60:db:a9:ca:e8:e4:08:b4:ff:98:6a:1a:b2: ef:0b:e3:36 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUbeCI6ZQc+en3AmVwS5Va9wol87kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNzU1MjNaFw0yNTA0MDMwODAwMjNaMDMxMTAvBgNV BAMTKEE5MDZFRTNBMTk3MUJEQ0E4ODU2OTdBQTBGMTQwMTlBMThENTREQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqVoPiM48P8+MlbCQmFnNtAfU+ lzI22Zhv29U3DeD9jyC0TvZ+A/Xppe+bAurUAc+X0Zb8l2tLfKjayAo/hzthhzXx Gx/z9rT5OPq6MUiAyUkgMIBpc6P6O642k6ho37g6GDz39lzK+0inKAMTlE5eQu9T tYPo56VH4NihB6aZ6Npm7Cr6N9PsJhLjTB4w9LLhxu26PeuCi6T0xq8Go9xAp2iw bvyX54HV9fAB9zJOlhP+8wTDRL6INWad3uJnF4MxZMYl8Bj093WqNZXcSNyETfQR uDxxl7n8irRUAASQqbgGxIpOGkuy0G2VPJMMD8Yan64kDl07CS4dtdVXVNXPAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpBu46GXG9yohW l6oPFAGaGNVNrzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREFE WHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVtYWcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RB RFhxUW1weEVzaENmUzU2aFlDWDVUdUdmRlpoYzdSelc4QzZZOXp1bWFnLzEvQTkw NkVFM0ExOTcxQkRDQTg4NTY5N0FBMEYxNDAxOUExOEQ1NERBRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj//EAwQDuu3YMA0EAgACMAcDBQAoBA7wMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFhjANBgkqhkiG9w0BAQsFAAOCAQEAwvGsucgd cU7vIMdZ/uGesOvGJexUJf0u3dG+3O24H/q9M5C5F44BInz3FeMJ+Yer+HnVa2uo ufEHM5KUciV/J3mnhZxmoCsKMmFXUQvf7oVCOfPp3OPfeFxLsuX1crijH9WjktdV ipbPcyEapJsQDsNu+QA17H960Iu3x9FzDXjOQdwjtCJbDlDMnDSRJcavFWT2kNcK /dUI7ITs5O2VggZOivxvXvXT0dUnGn4uW6UtkNjtvRyDhadca4cK24Wh2rcSAyTJ IaGDvCusHeST01JOubaZ6KPASc3dW7+IUWULdoz2NCzfqObB6jFrnplg26nK6OQI tP+Yahqy7wvjNg== -----END CERTIFICATE-----Generated at Sat Jun 29 12:43:46 2024 by rpki-client on console-fra.rpki-client.org