$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B59DF12CF0956AA547E3E84787034B037ED4F0EB.cer File: B59DF12CF0956AA547E3E84787034B037ED4F0EB.cer (raw, json) Hash identifier: MQX4r4LvGm77I+1irm4lAlEigtftI1VlJA/6CmqOuRA= Subject key identifier: B5:9D:F1:2C:F0:95:6A:A5:47:E3:E8:47:87:03:4B:03:7E:D4:F0:EB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2165118774571E455FFC7CC0E02EC7FFE77C6568 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B59DF12CF0956AA547E3E84787034B037ED4F0EB.mft caRepository: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 25 Apr 2024 19:07:43 +0000 Certificate not after: Thu 24 Apr 2025 19:12:43 +0000 Subordinate resources: AS: 263634 IP: 170.81.48.0/22 IP: 179.125.112.0/21 IP: 2804:1068::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 05:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:65:11:87:74:57:1e:45:5f:fc:7c:c0:e0:2e:c7:ff:e7:7c:65:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 25 19:07:43 2024 GMT Not After : Apr 24 19:12:43 2025 GMT Subject: CN=B59DF12CF0956AA547E3E84787034B037ED4F0EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:83:4e:13:30:26:94:a2:fb:88:20:5c:d1: 5a:98:5e:28:d3:ab:6b:9f:8c:17:f6:01:60:34:e9: 8d:57:77:66:d8:6a:ec:70:58:1a:7d:2e:26:e0:4f: bd:85:3e:bc:ec:d1:b6:47:bf:ac:71:db:e9:62:22: 14:ac:7c:d7:df:ab:ea:7c:ab:bd:33:72:45:d2:54: 63:e8:93:06:99:4e:de:c3:75:d3:e9:85:b5:c7:0a: 65:c4:99:c1:55:59:d4:ac:79:9c:21:3f:86:a0:94: c5:1a:69:b2:0a:d1:d1:80:b0:ff:25:c6:db:e6:8a: a0:cf:a0:e6:d2:bc:f6:db:45:0c:7d:8a:44:52:82: 03:1b:b5:3c:e6:60:a6:1c:41:12:22:f1:de:cf:b7: 19:2e:9c:da:e0:27:a1:d1:48:a1:8d:34:72:17:50: cc:ce:51:ec:7d:ea:ca:3e:dd:51:b9:28:aa:30:b7: ce:b6:20:72:7a:18:ba:cc:21:d1:ea:a0:a6:53:b4: f3:d5:e3:9e:30:8d:83:b6:65:d5:06:13:11:ea:f1: 15:a6:49:4a:92:ae:b4:95:ca:bd:53:f1:19:1d:fb: 34:b9:0a:f9:d0:77:46:e8:a3:db:d5:d3:44:31:b6: d4:87:e5:ba:b7:d8:c4:c5:e1:c0:b9:c8:07:1e:32: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:9D:F1:2C:F0:95:6A:A5:47:E3:E8:47:87:03:4B:03:7E:D4:F0:EB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B59DF12CF0956AA547E3E84787034B037ED4F0EB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.81.48.0/22 179.125.112.0/21 IPv6: 2804:1068::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263634 Signature Algorithm: sha256WithRSAEncryption 9f:f6:3e:4e:10:c7:00:b3:5e:e6:7e:6a:bf:47:79:63:bb:4e: 19:5e:2e:e0:c5:e4:f4:b8:fc:f4:10:63:66:66:a3:34:b8:7b: cb:d0:72:95:61:82:d5:cb:7c:f6:2c:f2:fa:87:41:bb:dc:bc: 12:08:4f:22:c5:53:fc:b3:39:76:b1:e9:b2:cd:53:76:4e:53: e1:62:f8:0b:33:bb:49:92:0a:b5:e9:3b:0f:99:13:2b:73:2a: bb:d3:c9:0f:85:a4:70:da:1d:ca:d0:03:e6:b2:27:47:aa:20: 65:39:f3:a3:80:4b:37:0e:45:06:4f:e4:96:81:53:f3:73:42: 8b:78:50:56:21:28:1a:d2:f4:e1:50:17:14:57:24:bd:e8:c3: e5:0b:2d:47:f3:55:37:5c:78:06:40:5b:7e:32:62:17:d2:ac: 3f:bc:ac:e2:db:f0:52:c2:ba:da:ae:59:13:5f:94:e9:5e:1c: 14:68:3f:ca:46:d8:36:af:8c:50:b2:e4:82:b6:37:8d:ce:ba: 9b:bc:eb:6d:1b:d7:13:88:67:71:3b:79:26:59:81:cf:36:62: a8:03:5e:04:b5:1d:7a:d4:40:4b:6a:d1:56:8b:98:4d:8a:33: c5:cd:c5:7f:9e:65:de:d2:12:61:18:a8:c0:54:9d:2f:5d:65: 97:08:35:72 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIWURh3RXHkVf/HzA4C7H/+d8ZWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjUxOTA3NDNaFw0yNTA0MjQxOTEyNDNaMDMxMTAvBgNV BAMTKEI1OURGMTJDRjA5NTZBQTU0N0UzRTg0Nzg3MDM0QjAzN0VENEYwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFoNOEzAmlKL7iCBc0VqYXijT q2ufjBf2AWA06Y1Xd2bYauxwWBp9LibgT72FPrzs0bZHv6xx2+liIhSsfNffq+p8 q70zckXSVGPokwaZTt7DddPphbXHCmXEmcFVWdSseZwhP4aglMUaabIK0dGAsP8l xtvmiqDPoObSvPbbRQx9ikRSggMbtTzmYKYcQRIi8d7PtxkunNrgJ6HRSKGNNHIX UMzOUex96so+3VG5KKowt862IHJ6GLrMIdHqoKZTtPPV454wjYO2ZdUGExHq8RWm SUqSrrSVyr1T8Rkd+zS5CvnQd0boo9vV00QxttSH5bq32MTF4cC5yAceMjU9AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1nfEs8JVqpUfj 6EeHA0sDftTw6zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzNt Rjd4TmM0cjI3akdoS2RMZFFzbTJ3WGhWNnJuOWRuY3g1MWpSWWFlaWovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Mz bUY3eE5jNHIyN2pHaEtkTGRRc20yd1hoVjZybjlkbmN4NTFqUllhZWlqLzAvQjU5 REYxMkNGMDk1NkFBNTQ3RTNFODQ3ODcwMzRCMDM3RUQ0RjBFQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlEwAwQDs31wMA0EAgACMAcDBQAoBBBoMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQF0jANBgkqhkiG9w0BAQsFAAOCAQEAn/Y+ThDH ALNe5n5qv0d5Y7tOGV4u4MXk9Lj89BBjZmajNLh7y9BylWGC1ct89izy+odBu9y8 EghPIsVT/LM5drHpss1Tdk5T4WL4CzO7SZIKtek7D5kTK3Mqu9PJD4WkcNodytAD 5rInR6ogZTnzo4BLNw5FBk/kloFT83NCi3hQViEoGtL04VAXFFckvejD5QstR/NV N1x4BkBbfjJiF9KsP7ys4tvwUsK62q5ZE1+U6V4cFGg/ykbYNq+MULLkgrY3jc66 m7zrbRvXE4hncTt5JlmBzzZiqANeBLUdetRAS2rRVouYTYozxc3Ff55l3tISYRio wFSdL11llwg1cg== -----END CERTIFICATE-----Generated at Tue Jun 18 06:20:17 2024 by rpki-client on console-fra.rpki-client.org