$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer File: B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer (raw, json) Hash identifier: 45fpB7sVSIgkGpWFaAs3lt9PJKUWwBgZ5aO7aUASaeo= Subject key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 28F3940087820E0DCC367B9E54B3ACB85E60596B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft caRepository: rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:16 +0000 Certificate not after: Wed 02 Apr 2025 18:31:16 +0000 Subordinate resources: AS: 28338 IP: 177.87.24.0/22 IP: 189.45.0.0/20 IP: 189.84.224.0/20 IP: 2804:74::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Jul 2024 20:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f3:94:00:87:82:0e:0d:cc:36:7b:9e:54:b3:ac:b8:5e:60:59:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:16 2024 GMT Not After : Apr 2 18:31:16 2025 GMT Subject: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:f3:e2:18:25:76:3e:d1:47:41:3b:2c:76: a5:86:32:00:65:66:5b:28:ba:97:eb:ca:9e:28:01: 04:66:46:01:c8:9d:51:b7:ae:b2:1e:45:46:76:8a: 96:7e:d4:f7:82:60:1a:f5:26:37:4b:1c:69:c1:e7: 93:33:21:59:2d:2f:28:4f:b2:60:09:a1:8d:df:14: 69:84:f6:41:ea:cd:42:11:01:05:d7:73:db:03:d5: 49:8e:b0:43:71:d3:39:82:1f:d1:ae:41:1c:3d:36: f4:0b:dd:fd:dd:80:2f:20:3d:25:f7:73:21:17:fe: 4a:4e:96:70:a2:fe:02:79:7e:9d:78:d1:15:b6:d0: d5:31:a3:fb:50:9a:0c:d0:3b:c4:78:9e:bb:d4:ce: e8:63:f1:22:88:f8:aa:a6:55:68:10:88:a0:2d:bb: 06:a9:b5:84:eb:c7:44:b0:56:43:4d:df:cf:22:27: fd:7c:8b:f7:3f:54:0a:e0:75:a5:d0:fc:c3:ae:04: dc:31:cf:a3:dd:c7:8c:97:20:27:da:3a:6a:b1:22: 80:a3:d6:b1:cf:f0:9a:b3:10:e5:a0:b2:68:19:f1: 59:f1:09:ed:1d:f6:f3:1c:3f:79:11:bd:45:de:9b: 83:f8:2c:b8:5d:e8:cf:f9:f5:bb:c9:3c:f4:77:81: fb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.87.24.0/22 189.45.0.0/20 189.84.224.0/20 IPv6: 2804:74::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28338 Signature Algorithm: sha256WithRSAEncryption 76:b2:81:6c:8b:1d:ef:38:0e:25:30:0d:01:2b:04:c9:23:c0: 5e:48:51:de:f6:db:d9:bf:5d:97:02:f3:6f:ad:40:c9:9f:f4: 8f:8e:18:f4:98:c7:79:a7:c5:ec:7e:9d:62:53:8c:93:88:1d: 9a:d7:b5:d8:ce:64:bc:51:7f:da:16:51:17:4c:33:de:07:be: 4a:e5:cc:a1:b5:d1:ee:2d:2f:7a:1e:ab:a4:d2:6b:b3:a4:1c: 34:9d:0c:ed:d5:66:f6:07:60:a6:35:3c:28:b6:17:2c:74:2d: 12:a2:9b:41:86:1a:5f:54:eb:e8:9c:47:8a:2b:6a:93:eb:f4: 2c:e8:7f:17:42:3a:a6:8c:90:18:84:d2:51:78:54:80:68:2c: 24:65:6d:7d:cc:ca:9e:de:1d:3b:58:ac:d9:c7:6a:9e:fa:df: b7:35:77:a8:c4:ca:e2:55:12:ce:13:ca:f2:57:74:a1:2e:cf: a1:35:06:4c:63:a0:ed:2e:4a:0e:36:eb:7d:55:ee:42:73:25: d4:00:35:f0:1e:65:4e:9b:24:bc:a6:33:75:6c:42:7e:1d:2a: 07:a4:5f:9f:97:f8:61:fe:f9:e7:b4:2d:08:78:b2:ae:fd:93: ba:75:36:df:25:7d:a0:57:b7:f4:6c:ad:e5:60:52:13:82:45: b2:cd:7b:82 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUKPOUAIeCDg3MNnueVLOsuF5gWWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2MTZaFw0yNTA0MDIxODMxMTZaMDMxMTAvBgNV BAMTKEI3RjYyRDU1REM3NTg4NzVCNDlBRENBMEZDRDExNTgwN0IyRjFERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+t/PiGCV2PtFHQTssdqWGMgBl Zlsoupfryp4oAQRmRgHInVG3rrIeRUZ2ipZ+1PeCYBr1JjdLHGnB55MzIVktLyhP smAJoY3fFGmE9kHqzUIRAQXXc9sD1UmOsENx0zmCH9GuQRw9NvQL3f3dgC8gPSX3 cyEX/kpOlnCi/gJ5fp140RW20NUxo/tQmgzQO8R4nrvUzuhj8SKI+KqmVWgQiKAt uwaptYTrx0SwVkNN388iJ/18i/c/VArgdaXQ/MOuBNwxz6Pdx4yXICfaOmqxIoCj 1rHP8JqzEOWgsmgZ8VnxCe0d9vMcP3kRvUXem4P4LLhd6M/59bvJPPR3gfvFAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS39i1V3HWIdbSa 3KD80RWAey8d0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEJ4 ODhGWGU4bjVSNzQ5cFdncmtBUzNkZXlyNW1keXlmeEJOaVd6NXl2dk0vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRC eDg4RlhlOG41Ujc0OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdG NjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCsVcYAwQEvS0AAwQEvVTgMA0EAgACMAcDBQAoBAB0 MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm6yMA0GCSqGSIb3DQEBCwUAA4IBAQB2 soFsix3vOA4lMA0BKwTJI8BeSFHe9tvZv12XAvNvrUDJn/SPjhj0mMd5p8Xsfp1i U4yTiB2a17XYzmS8UX/aFlEXTDPeB75K5cyhtdHuLS96Hquk0muzpBw0nQzt1Wb2 B2CmNTwothcsdC0SoptBhhpfVOvonEeKK2qT6/Qs6H8XQjqmjJAYhNJReFSAaCwk ZW19zMqe3h07WKzZx2qe+t+3NXeoxMriVRLOE8ryV3ShLs+hNQZMY6DtLkoONut9 Ve5CcyXUADXwHmVOmyS8pjN1bEJ+HSoHpF+fl/hh/vnntC0IeLKu/ZO6dTbfJX2g V7f0bK3lYFITgkWyzXuC -----END CERTIFICATE-----Generated at Sun Jun 30 19:52:49 2024 by rpki-client on console-ams.rpki-client.org