$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer File: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer (raw, json) Hash identifier: QDSFLa5j441VGeQA1uDFwb9CcQcx5Ri/TcCPBSOOw0s= Subject key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 300631077C285E44376D8FF970C28FDA3E8A68F6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft caRepository: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 04:35:54 +0000 Certificate not after: Thu 03 Apr 2025 04:40:54 +0000 Subordinate resources: AS: 268281 IP: 45.237.140.0/22 IP: 2804:4ec4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:06:31:07:7c:28:5e:44:37:6d:8f:f9:70:c2:8f:da:3e:8a:68:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 04:35:54 2024 GMT Not After : Apr 3 04:40:54 2025 GMT Subject: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:75:8f:e0:62:97:e4:f1:e3:0b:90:eb:97: dd:77:a8:41:12:dc:58:ff:98:81:07:ad:b1:58:58: 5f:2c:aa:91:e5:fb:e1:5b:a8:f5:18:97:31:46:20: 27:ca:dd:a9:f4:96:ac:1c:7f:20:6e:27:e7:21:7d: d1:48:9e:5a:1a:c4:d7:ca:ac:3d:95:eb:16:58:bd: 08:84:ce:3b:f2:70:1b:7b:fc:6d:ef:cc:b1:9c:bb: 11:4c:d1:26:2d:1c:c6:38:71:b1:fb:0a:0d:33:7c: cf:00:8e:36:b3:ac:77:78:cb:74:e1:31:d8:f6:b0: 55:c9:cf:a5:f5:c7:64:eb:0a:e1:10:71:1f:9b:bf: 05:8b:ac:a2:73:80:8b:24:a7:04:a4:eb:cb:dc:e1: 46:db:82:4e:b0:6c:0e:81:eb:d8:80:93:0e:03:99: 5b:75:c8:34:ac:48:db:ac:ea:c7:84:5e:0e:5f:b1: 05:7c:c5:06:6a:67:f3:83:b6:af:7b:90:76:f9:ce: 86:73:8c:1e:64:be:b4:36:4a:c0:88:a3:69:61:db: a2:c2:e1:b5:27:fc:37:51:79:37:66:04:97:d5:ae: 3c:df:21:1c:89:80:b3:dc:4e:e6:8d:12:6f:e0:e0: a0:72:c1:f6:26:8e:70:18:59:bf:b8:80:55:07:b2: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.140.0/22 IPv6: 2804:4ec4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268281 Signature Algorithm: sha256WithRSAEncryption 5e:bc:0c:c0:80:2b:36:d9:cb:6c:e8:f5:97:ae:d2:8a:74:31: 45:70:91:3d:16:5d:58:37:56:ec:40:e1:96:44:9f:f6:61:6f: d2:47:79:d6:72:bf:03:12:c4:84:fd:8d:f2:79:57:9d:22:cf: 62:6e:7b:0e:db:1b:cb:93:e0:bc:f4:e3:62:3e:64:82:21:92: 0f:17:16:12:3b:0c:c8:61:4b:89:2b:5d:80:3c:20:fc:ad:46: ff:ff:b2:d4:8b:b2:54:79:2b:2b:c1:e7:15:a3:29:58:91:5e: d9:03:ec:d1:64:92:f7:b4:a4:19:b5:bc:81:7e:fc:ef:ea:f2: db:7e:9d:50:eb:2d:a9:4f:81:40:5f:13:47:20:95:03:6a:ee: 42:9b:59:0d:ab:91:ca:f4:0d:27:ca:b7:c4:03:10:ee:79:59: c6:c2:25:e7:14:04:08:49:1e:23:7c:af:6b:18:aa:5c:91:bf: 28:67:3c:d3:91:80:f3:8e:54:09:00:75:57:85:c0:c0:a1:40: c8:e1:03:bf:ae:c1:36:ae:f3:80:1f:c0:b2:93:b1:d3:e9:c9: da:90:a9:45:ec:6b:68:93:c6:76:ff:5f:74:16:4c:52:e2:09: 3c:48:35:0c:bb:0f:af:21:fd:34:30:f9:d0:48:53:b1:94:fd: c3:71:0e:a7 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUMAYxB3woXkQ3bY/5cMKP2j6KaPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNDM1NTRaFw0yNTA0MDMwNDQwNTRaMDMxMTAvBgNV BAMTKEFBNkY4NkEwNUZEOUY3RDlBQkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+i3WP4GKX5PHjC5Drl913qEES 3Fj/mIEHrbFYWF8sqpHl++FbqPUYlzFGICfK3an0lqwcfyBuJ+chfdFInloaxNfK rD2V6xZYvQiEzjvycBt7/G3vzLGcuxFM0SYtHMY4cbH7Cg0zfM8AjjazrHd4y3Th Mdj2sFXJz6X1x2TrCuEQcR+bvwWLrKJzgIskpwSk68vc4Ubbgk6wbA6B69iAkw4D mVt1yDSsSNus6seEXg5fsQV8xQZqZ/ODtq97kHb5zoZzjB5kvrQ2SsCIo2lh26LC 4bUn/DdReTdmBJfVrjzfIRyJgLPcTuaNEm/g4KBywfYmjnAYWb+4gFUHsscjAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqb4agX9n32avp 6OlbJGpM/iyeGjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDg4 VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDg4 VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9BQTZG ODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt7YwwDQQCAAIwBwMFACgETsQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBf5MA0GCSqGSIb3DQEBCwUAA4IBAQBevAzAgCs22cts6PWX rtKKdDFFcJE9Fl1YN1bsQOGWRJ/2YW/SR3nWcr8DEsSE/Y3yeVedIs9ibnsO2xvL k+C89ONiPmSCIZIPFxYSOwzIYUuJK12APCD8rUb//7LUi7JUeSsrwecVoylYkV7Z A+zRZJL3tKQZtbyBfvzv6vLbfp1Q6y2pT4FAXxNHIJUDau5Cm1kNq5HK9A0nyrfE AxDueVnGwiXnFAQISR4jfK9rGKpckb8oZzzTkYDzjlQJAHVXhcDAoUDI4QO/rsE2 rvOAH8Cyk7HT6cnakKlF7Gtok8Z2/190FkxS4gk8SDUMuw+vIf00MPnQSFOxlP3D cQ6n -----END CERTIFICATE-----Generated at Sat Jun 1 22:59:53 2024 by rpki-client on console-fra.rpki-client.org