$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B726A967EC3E14BF4F129A42C460D887468E3D1F.cer File: B726A967EC3E14BF4F129A42C460D887468E3D1F.cer (raw, json) Hash identifier: grHFiqJ3cJ1UHxlKaOElyqRyClweGFa2VK9ODFw4BNI= Subject key identifier: B7:26:A9:67:EC:3E:14:BF:4F:12:9A:42:C4:60:D8:87:46:8E:3D:1F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1ECC2008815C97D2EBFF04B3D34EF19EA45CF1BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/1/B726A967EC3E14BF4F129A42C460D887468E3D1F.mft caRepository: rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 14:20:39 +0000 Certificate not after: Thu 03 Apr 2025 14:25:39 +0000 Subordinate resources: AS: 271468 IP: 181.224.12.0/22 IP: 2804:7bfc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:cc:20:08:81:5c:97:d2:eb:ff:04:b3:d3:4e:f1:9e:a4:5c:f1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 14:20:39 2024 GMT Not After : Apr 3 14:25:39 2025 GMT Subject: CN=B726A967EC3E14BF4F129A42C460D887468E3D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:52:5e:ce:8c:75:82:13:81:ca:98:b4:c2: 1c:ef:e6:f1:b9:7d:e8:55:9a:f1:cb:9f:f7:e8:6d: a9:f8:36:f0:55:98:60:22:8b:9b:66:74:ae:df:de: d4:de:9c:c7:02:fe:ff:41:a0:88:e2:a3:45:19:a2: 93:2d:65:1a:91:ca:d1:f2:16:59:1f:c8:7c:da:0c: 63:49:a8:5f:95:fa:84:a0:57:72:e9:82:14:bb:3c: 07:28:64:c0:0b:13:da:b2:2e:cd:ed:6d:b2:9c:11: df:5e:0d:b3:8c:c3:d8:2b:96:a7:75:c4:f1:ae:5a: f5:b6:88:2c:cd:7b:89:b9:f2:4a:2f:af:6c:f9:ec: dc:cb:c2:39:a3:a7:89:c8:b3:d8:36:b8:20:05:29: 6b:24:c2:83:da:ce:c9:71:67:8e:60:0f:57:ae:aa: 0c:66:c6:74:8a:16:55:48:f3:2d:2b:94:52:af:1f: 54:7d:82:29:b7:fd:5f:30:e3:56:f0:e1:34:b1:e3: 64:0e:0c:5e:1f:8c:0e:12:5d:89:e8:52:07:9d:f5: 64:21:14:00:e9:33:6b:a6:96:d4:ca:77:69:81:0a: 48:39:7a:02:70:df:c7:09:a0:59:82:5f:5a:07:e9: 9d:ed:60:93:da:e1:7a:b7:46:04:d5:73:9a:bc:86: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:26:A9:67:EC:3E:14:BF:4F:12:9A:42:C4:60:D8:87:46:8E:3D:1F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/1/B726A967EC3E14BF4F129A42C460D887468E3D1F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.224.12.0/22 IPv6: 2804:7bfc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271468 Signature Algorithm: sha256WithRSAEncryption 73:17:27:cf:e9:30:dc:13:73:c2:ee:a2:6e:ce:6d:2f:ed:54: ea:8d:93:f2:80:dc:b7:13:11:5b:b2:5e:a3:72:7a:a3:5e:01: 4d:61:22:ec:47:a9:d8:a3:71:6a:09:2e:74:ba:2e:76:cc:55: ac:0e:29:44:31:a4:2b:81:8e:ac:4d:7a:0b:0a:f0:be:de:33: 2b:85:67:35:a0:8d:41:d9:48:60:a4:81:07:33:5d:da:e7:29: 03:e9:22:0e:06:ac:41:36:a6:5f:a1:ee:1d:56:5b:22:1f:37: aa:73:e9:a6:37:42:ac:0e:f0:88:a0:27:82:d2:d9:b2:bb:98: f0:43:48:d0:2b:85:e6:4d:93:50:f9:c8:36:95:26:7e:f1:17: 4b:db:eb:70:2b:c7:f5:dd:fc:5d:89:12:73:f3:e1:33:bb:03: 31:19:c1:0e:5f:18:b5:61:65:93:ef:48:f4:14:a5:e1:61:c9: 95:0e:13:c5:d2:f4:f1:42:a9:dc:19:5c:87:8a:4b:43:93:b9: 2d:72:be:d7:de:3f:92:17:68:50:7f:72:22:a1:42:46:05:8b: cc:af:2c:f3:d4:ff:af:f5:c0:d8:81:8a:fe:bc:2e:0c:5f:df: ee:88:ad:c6:3b:1f:12:5b:b2:ec:ed:a2:9a:89:5d:a4:3a:69: 66:3b:3f:e0 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUHswgCIFcl9Lr/wSz007xnqRc8b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNDIwMzlaFw0yNTA0MDMxNDI1MzlaMDMxMTAvBgNV BAMTKEI3MjZBOTY3RUMzRTE0QkY0RjEyOUE0MkM0NjBEODg3NDY4RTNEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJtFJezox1ghOBypi0whzv5vG5 fehVmvHLn/foban4NvBVmGAii5tmdK7f3tTenMcC/v9BoIjio0UZopMtZRqRytHy FlkfyHzaDGNJqF+V+oSgV3LpghS7PAcoZMALE9qyLs3tbbKcEd9eDbOMw9grlqd1 xPGuWvW2iCzNe4m58kovr2z57NzLwjmjp4nIs9g2uCAFKWskwoPazslxZ45gD1eu qgxmxnSKFlVI8y0rlFKvH1R9gim3/V8w41bw4TSx42QODF4fjA4SXYnoUged9WQh FADpM2umltTKd2mBCkg5egJw38cJoFmCX1oH6Z3tYJPa4Xq3RgTVc5q8hpylAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3Jqln7D4Uv08S mkLEYNiHRo49HzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0Iz NHVQa3lLbVlRR21jWEpZNGpEUVluZloxcmE3WVc0RVR3NUJzNlp1UmYvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0Iz NHVQa3lLbVlRR21jWEpZNGpEUVluZloxcmE3WVc0RVR3NUJzNlp1UmYvMS9CNzI2 QTk2N0VDM0UxNEJGNEYxMjlBNDJDNDYwRDg4NzQ2OEUzRDFGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK14AwwDQQCAAIwBwMFACgEe/wwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCRsMA0GCSqGSIb3DQEBCwUAA4IBAQBzFyfP6TDcE3PC7qJu zm0v7VTqjZPygNy3ExFbsl6jcnqjXgFNYSLsR6nYo3FqCS50ui52zFWsDilEMaQr gY6sTXoLCvC+3jMrhWc1oI1B2UhgpIEHM13a5ykD6SIOBqxBNqZfoe4dVlsiHzeq c+mmN0KsDvCIoCeC0tmyu5jwQ0jQK4XmTZNQ+cg2lSZ+8RdL2+twK8f13fxdiRJz 8+EzuwMxGcEOXxi1YWWT70j0FKXhYcmVDhPF0vTxQqncGVyHiktDk7ktcr7X3j+S F2hQf3IioUJGBYvMryzz1P+v9cDYgYr+vC4MX9/uiK3GOx8SW7Ls7aKaiV2kOmlm Oz/g -----END CERTIFICATE-----Generated at Sat Nov 23 00:06:29 2024 by rpki-client on console-ams.rpki-client.org