$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer File: B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer (raw, json) Hash identifier: hBwVW/2Nd9cF60+0WwPA8DTS0m7qGCsxp/TtXu5hTKM= Subject key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4C7E9375F0F568E9359F1A805ED2863B924D90D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft caRepository: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 03:02:32 +0000 Certificate not after: Fri 04 Apr 2025 03:07:32 +0000 Subordinate resources: AS: 52758 IP: 177.38.184.0/21 IP: 201.131.240.0/21 IP: 2804:b38::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 02:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7e:93:75:f0:f5:68:e9:35:9f:1a:80:5e:d2:86:3b:92:4d:90:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 5 03:02:32 2024 GMT Not After : Apr 4 03:07:32 2025 GMT Subject: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:69:65:8b:fa:d1:cc:45:ca:9f:72:91:12: c9:45:d8:26:fa:17:59:3c:76:0e:2b:18:78:ce:09: 39:bb:23:34:2f:4b:63:bd:32:7d:f9:87:6f:8c:90: 46:99:56:c2:38:50:e9:ce:28:d8:d0:17:79:f9:04: bb:6b:b1:61:ed:b7:a0:7f:e0:a8:f1:ae:33:a8:c5: e8:15:2f:a4:bc:39:3c:1e:e0:d0:7e:04:d9:42:86: 1a:f8:ee:3b:6e:93:1c:59:71:e7:64:f3:02:43:03: 44:11:f1:b5:39:89:23:70:51:cb:04:f7:7b:ef:fc: d4:6c:99:23:dc:d4:3d:a7:d0:6f:67:34:62:ef:f4: 36:d4:c3:c3:f3:61:0b:a7:0c:18:98:0f:3f:3c:04: 7e:43:9a:c5:b2:96:c3:97:2e:36:0e:dd:36:65:6b: 04:7d:67:a0:db:47:2b:71:40:8f:5d:ad:f6:38:77: c2:c4:36:02:a1:8f:66:20:f4:de:5b:ff:67:81:28: bf:02:89:12:42:d7:21:74:d1:9b:b3:74:72:a6:21: 6c:de:1c:85:c7:57:7a:fc:95:85:7b:02:6f:f1:f3: 3d:82:b0:b3:d3:85:80:d2:35:08:f4:d9:a5:99:1d: ac:b9:d1:fd:10:ba:7b:73:15:00:29:e6:b6:7d:1e: 66:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.38.184.0/21 201.131.240.0/21 IPv6: 2804:b38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52758 Signature Algorithm: sha256WithRSAEncryption c8:a8:96:8b:8c:b5:cf:5e:92:fe:64:1b:eb:7d:e1:2f:8c:49: 20:ea:96:46:3b:f8:9a:c2:48:e3:9a:f2:44:b7:3b:3c:05:cf: a3:9c:9e:c8:1e:dd:9f:ca:e9:00:23:2d:a6:d1:74:a0:fb:5a: 7f:dd:ed:6b:b2:d3:e1:a0:bb:0a:59:47:47:2c:7a:89:f1:62: cd:ef:81:62:43:31:8a:b9:98:e6:6e:93:01:a6:37:28:7d:98: 58:3e:e2:c0:eb:f6:08:98:ae:99:58:69:31:78:61:78:0b:14: 09:fc:f8:55:d2:b6:3e:2b:a8:79:ae:de:70:36:14:76:8a:2e: 0c:1f:a8:56:6f:97:7f:20:22:d7:0b:2a:9b:c0:02:c7:3a:98: dc:4f:cc:0b:65:95:1d:bf:73:fb:d9:8c:ec:ff:66:9d:29:1f: 30:0a:97:20:96:44:eb:cd:96:67:ec:a9:5b:34:0b:99:46:96: f7:e5:9b:19:47:1c:47:86:fc:e5:18:90:64:54:92:98:df:0f: b5:6b:a3:85:85:aa:01:e1:73:c4:94:b6:70:07:1e:40:3c:c1: f9:f7:8a:2d:00:9b:ee:88:7f:47:2a:1e:64:6c:bd:0b:2f:e8: 71:45:ce:ff:95:55:2d:77:83:5a:47:03:e5:15:13:99:f3:73: 01:93:2a:ee -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUTH6TdfD1aOk1nxqAXtKGO5JNkNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDUwMzAyMzJaFw0yNTA0MDQwMzA3MzJaMDMxMTAvBgNV BAMTKEIzRTQ1RkYzRkQyMUZCNzc1Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88Wlli/rRzEXKn3KREslF2Cb6 F1k8dg4rGHjOCTm7IzQvS2O9Mn35h2+MkEaZVsI4UOnOKNjQF3n5BLtrsWHtt6B/ 4KjxrjOoxegVL6S8OTwe4NB+BNlChhr47jtukxxZcedk8wJDA0QR8bU5iSNwUcsE 93vv/NRsmSPc1D2n0G9nNGLv9DbUw8PzYQunDBiYDz88BH5DmsWylsOXLjYO3TZl awR9Z6DbRytxQI9drfY4d8LENgKhj2Yg9N5b/2eBKL8CiRJC1yF00ZuzdHKmIWze HIXHV3r8lYV7Am/x8z2CsLPThYDSNQj02aWZHay50f0QuntzFQAp5rZ9HmYPAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSz5F/z/SH7d191 Awt7JMAk43DG2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR25y REU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1c2gvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0du ckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEvQjNF NDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRFMzcwQzZEQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsSa4AwQDyYPwMA0EAgACMAcDBQAoBAs4MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOFjANBgkqhkiG9w0BAQsFAAOCAQEAyKiWi4y1 z16S/mQb633hL4xJIOqWRjv4msJI45ryRLc7PAXPo5yeyB7dn8rpACMtptF0oPta f93ta7LT4aC7CllHRyx6ifFize+BYkMxirmY5m6TAaY3KH2YWD7iwOv2CJiumVhp MXhheAsUCfz4VdK2Piuoea7ecDYUdoouDB+oVm+XfyAi1wsqm8ACxzqY3E/MC2WV Hb9z+9mM7P9mnSkfMAqXIJZE682WZ+ypWzQLmUaW9+WbGUccR4b85RiQZFSSmN8P tWujhYWqAeFzxJS2cAceQDzB+feKLQCb7oh/RyoeZGy9Cy/ocUXO/5VVLXeDWkcD 5RUTmfNzAZMq7g== -----END CERTIFICATE-----Generated at Mon Jul 1 02:27:49 2024 by rpki-client on console-ams.rpki-client.org