$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E.cer File: AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E.cer (raw, json) Hash identifier: K88zlYz+sC8fMUIIRpVEFin94fPbmI+8D/z6T2AmQME= Subject key identifier: AF:D2:83:B2:F9:92:23:7C:0C:FF:C2:A3:3A:97:A3:AE:ED:F5:6F:7E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 73510AE41526BF771171818DAE5185B70D982B3E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E.mft caRepository: rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 20 Apr 2024 02:33:22 +0000 Certificate not after: Sat 19 Apr 2025 02:38:22 +0000 Subordinate resources: AS: 265961 IP: 164.163.116.0/22 IP: 2804:4078::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:51:0a:e4:15:26:bf:77:11:71:81:8d:ae:51:85:b7:0d:98:2b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 20 02:33:22 2024 GMT Not After : Apr 19 02:38:22 2025 GMT Subject: CN=AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:7f:66:d1:8a:75:f4:be:33:e4:5f:95:98: c2:33:01:f4:4d:a3:d4:93:8c:1c:06:20:74:d1:f5: da:fa:70:6a:e9:bc:9c:3f:d9:83:14:22:67:70:3b: 47:2d:7e:ec:9b:63:a9:22:82:c5:17:39:99:ca:b3: da:42:e0:1b:48:3b:cc:eb:6e:59:6e:42:6f:ea:ef: 19:08:43:69:06:04:0d:75:f4:46:80:bd:a4:18:ad: 9c:97:39:cb:0f:52:45:02:58:43:23:c3:1d:95:b5: 40:ff:bf:8e:32:f3:1f:51:59:0b:4c:c2:89:f1:5f: 1f:a5:f0:2c:4f:a3:95:e8:2b:89:8e:80:0f:28:0a: 12:28:b3:68:d3:86:93:f3:11:9b:e2:c4:87:d3:8c: 3c:1e:69:06:7c:9f:4c:63:3c:8e:35:9c:c9:77:f9: cc:08:f8:54:f3:92:a3:3d:c0:f1:89:1b:a2:b7:40: 87:3d:d9:17:c1:ee:43:54:9c:35:9c:6d:ad:00:9d: 5f:3a:5e:8d:da:5e:1b:f1:28:01:82:b7:42:fd:90: 1f:29:d8:af:b6:84:6a:27:e4:60:73:ea:e1:c0:e6: e4:3f:56:3f:ef:9c:be:aa:02:82:50:85:aa:fd:e8: de:45:67:89:9f:7a:4c:6c:d2:65:9e:fa:b5:61:cc: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:D2:83:B2:F9:92:23:7C:0C:FF:C2:A3:3A:97:A3:AE:ED:F5:6F:7E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/AFD283B2F992237C0CFFC2A33A97A3AEEDF56F7E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.116.0/22 IPv6: 2804:4078::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265961 Signature Algorithm: sha256WithRSAEncryption 76:7b:6d:78:5d:b2:05:97:dd:1e:42:e4:2c:43:1e:87:26:87: a1:be:7d:71:50:03:92:d9:c3:d4:98:61:43:cf:8e:1d:d9:57: 64:72:c0:ea:0e:87:70:45:66:04:eb:4d:19:90:80:40:f7:28: 0a:5d:a0:1d:06:58:ef:db:e5:44:b9:31:73:ed:3b:17:5e:b5: 8c:90:60:d1:47:f6:ed:5a:d6:ee:63:1f:4d:b0:e0:ed:3a:c6: b1:d6:32:35:dd:a8:c5:c5:25:dc:62:76:25:19:e9:69:98:f4: e2:bc:d5:8b:57:2b:60:fc:96:7e:22:4e:13:ed:0a:99:da:25: cd:c0:12:f4:56:6e:d1:4a:c8:df:d4:7c:f2:4d:45:80:47:20: cd:d3:43:fc:54:7d:cf:a2:65:5a:e4:eb:0d:2d:a6:de:ac:cf: 8b:5e:e0:20:f5:4d:12:03:45:b1:6e:52:34:d4:3f:91:e3:a7: f9:1a:52:ec:03:4b:29:b4:e3:14:38:60:34:b9:77:f6:5d:a7: 66:db:d6:e7:c8:12:05:d4:b1:a2:95:3c:cf:95:d0:a9:9e:74: e7:91:4f:0b:d7:0d:5a:6d:7e:58:f6:20:c6:77:43:54:a7:80: 36:b6:39:ec:fd:86:e2:70:bc:05:e2:d5:1f:4c:6a:7f:3f:d7: e0:cd:13:f7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUc1EK5BUmv3cRcYGNrlGFtw2YKz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjAwMjMzMjJaFw0yNTA0MTkwMjM4MjJaMDMxMTAvBgNV BAMTKEFGRDI4M0IyRjk5MjIzN0MwQ0ZGQzJBMzNBOTdBM0FFRURGNTZGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpX9m0Yp19L4z5F+VmMIzAfRN o9STjBwGIHTR9dr6cGrpvJw/2YMUImdwO0ctfuybY6kigsUXOZnKs9pC4BtIO8zr blluQm/q7xkIQ2kGBA119EaAvaQYrZyXOcsPUkUCWEMjwx2VtUD/v44y8x9RWQtM wonxXx+l8CxPo5XoK4mOgA8oChIos2jThpPzEZvixIfTjDweaQZ8n0xjPI41nMl3 +cwI+FTzkqM9wPGJG6K3QIc92RfB7kNUnDWcba0AnV86Xo3aXhvxKAGCt0L9kB8p 2K+2hGon5GBz6uHA5uQ/Vj/vnL6qAoJQhar96N5FZ4mfekxs0mWe+rVhzPhdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSv0oOy+ZIjfAz/ wqM6l6Ou7fVvfjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN050 TnQ0Mm43ek5GYkhUTkFkc3Flem9rUlVZTm5qZHFSUGhFQVdvRkpmRHMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdO dE50NDJuN3pORmJIVE5BZHNxZXpva1JVWU5uamRxUlBoRUFXb0ZKZkRzLzAvQUZE MjgzQjJGOTkyMjM3QzBDRkZDMkEzM0E5N0EzQUVFREY1NkY3RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCpKN0MA0EAgACMAcDBQAoBEB4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQO6TANBgkqhkiG9w0BAQsFAAOCAQEAdntteF2yBZfdHkLk LEMehyaHob59cVADktnD1JhhQ8+OHdlXZHLA6g6HcEVmBOtNGZCAQPcoCl2gHQZY 79vlRLkxc+07F161jJBg0Uf27VrW7mMfTbDg7TrGsdYyNd2oxcUl3GJ2JRnpaZj0 4rzVi1crYPyWfiJOE+0KmdolzcAS9FZu0UrI39R88k1FgEcgzdND/FR9z6JlWuTr DS2m3qzPi17gIPVNEgNFsW5SNNQ/keOn+RpS7ANLKbTjFDhgNLl39l2nZtvW58gS BdSxopU8z5XQqZ5055FPC9cNWm1+WPYgxndDVKeANrY57P2G4nC8BeLVH0xqfz/X 4M0T9w== -----END CERTIFICATE-----Generated at Sat Jun 1 23:01:11 2024 by rpki-client on console-ams.rpki-client.org