$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C1242EF4879B322A13C9D9D398E3937FA62B255E.cer File: C1242EF4879B322A13C9D9D398E3937FA62B255E.cer (raw, json) Hash identifier: xmclZidi+j4YbHRii6inpyS24C4Nq1W29Rsx8BTyCis= Subject key identifier: C1:24:2E:F4:87:9B:32:2A:13:C9:D9:D3:98:E3:93:7F:A6:2B:25:5E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 66BE8B94E2EA17B932632B91CB8BAF83C022DB07 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/C1242EF4879B322A13C9D9D398E3937FA62B255E.mft caRepository: rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 07:13:48 +0000 Certificate not after: Thu 03 Apr 2025 07:18:48 +0000 Subordinate resources: AS: 269096 IP: 45.175.248.0/22 IP: 45.185.120.0/22 IP: 177.39.8.0/22 IP: 186.232.88.0/21 IP: 2804:5f64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 02:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:be:8b:94:e2:ea:17:b9:32:63:2b:91:cb:8b:af:83:c0:22:db:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 07:13:48 2024 GMT Not After : Apr 3 07:18:48 2025 GMT Subject: CN=C1242EF4879B322A13C9D9D398E3937FA62B255E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4d:93:e3:38:7b:9d:36:bf:e2:63:94:65:2a: b7:87:af:2f:a0:5f:f2:ac:d8:6e:cc:66:67:8a:42: 91:7e:b1:37:7a:a5:ec:79:2e:0a:07:82:ba:fe:24: e9:c5:04:5c:44:b1:ea:e3:7e:53:83:e5:ab:d4:75: bd:dc:a3:c1:34:f7:fc:ff:d9:09:40:44:05:bd:52: 58:7d:f2:e7:3f:81:de:29:61:d2:5d:c9:c1:c5:86: 83:09:28:1d:3f:47:50:df:c9:1f:7f:36:24:89:f4: a0:fa:67:f9:fc:e0:f1:bb:8c:76:e8:54:58:04:13: f3:4c:81:66:a7:68:31:f3:cf:46:43:64:f2:5e:74: 31:23:6a:0e:35:b0:2c:e6:ba:f3:c7:51:45:ae:b2: d5:07:e7:cc:43:12:bd:a3:eb:fa:fa:1c:da:3d:33: 09:a0:c8:0e:f9:9d:e5:2b:80:d0:19:32:29:88:5e: 00:87:ca:82:54:6f:f1:52:a9:0e:cc:99:6b:ab:7d: 44:a2:b3:ff:33:b0:1a:59:07:55:2a:91:f6:82:da: cc:3b:08:d2:0b:33:18:81:95:0d:64:b4:10:e2:6b: 3f:6e:f3:06:81:23:d9:03:6b:54:a9:0f:bb:c9:b5: d9:c6:42:73:fa:46:fa:9c:c4:dd:fc:20:0a:14:28: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:24:2E:F4:87:9B:32:2A:13:C9:D9:D3:98:E3:93:7F:A6:2B:25:5E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/C1242EF4879B322A13C9D9D398E3937FA62B255E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.248.0/22 45.185.120.0/22 177.39.8.0/22 186.232.88.0/21 IPv6: 2804:5f64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269096 Signature Algorithm: sha256WithRSAEncryption d6:61:9b:38:9f:f5:1c:68:4b:47:a9:5f:22:05:f0:9f:b0:00: 41:33:19:46:04:05:f8:fd:8e:c1:85:f1:9f:9e:9b:ae:e0:5c: 47:86:0f:c7:10:18:10:e1:8f:0a:ec:93:e5:d8:6a:a3:78:0f: b6:1d:bd:dd:8e:57:6a:2e:5e:ec:de:e2:e1:68:a4:c7:df:ca: 34:3a:17:a3:fd:db:c8:81:f5:57:e6:39:8c:e4:8a:24:e6:ad: 59:e8:2f:4d:04:8d:9b:fa:a7:9b:6d:1f:fb:d3:83:95:29:af: 54:59:7f:31:ef:f3:15:18:09:72:de:37:f9:23:e0:c0:91:8b: 4a:16:6f:ac:83:6f:26:a1:73:a9:c4:31:98:e8:ed:c2:be:d0: b8:23:f4:ae:c1:2b:86:3f:46:f3:1f:db:fb:5d:2a:d1:46:09: b1:c5:17:6a:e7:a8:b4:f2:de:e5:e4:91:17:83:52:e2:48:1e: 64:ae:97:90:4a:54:bf:7a:9f:24:81:2d:95:0f:42:30:12:e8: 5e:2e:3d:ae:07:be:2c:cc:41:ff:2b:03:be:33:5c:66:62:6a: 68:ef:f3:32:7a:6e:c6:88:a9:4b:fe:2b:36:a9:ad:35:51:a3: c4:5d:53:c1:41:73:3c:79:62:e8:df:40:3f:93:e4:61:f8:69: 15:c7:fb:f7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUZr6LlOLqF7kyYyuRy4uvg8Ai2wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNzEzNDhaFw0yNTA0MDMwNzE4NDhaMDMxMTAvBgNV BAMTKEMxMjQyRUY0ODc5QjMyMkExM0M5RDlEMzk4RTM5MzdGQTYyQjI1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvTZPjOHudNr/iY5RlKreHry+g X/Ks2G7MZmeKQpF+sTd6pex5LgoHgrr+JOnFBFxEserjflOD5avUdb3co8E09/z/ 2QlARAW9Ulh98uc/gd4pYdJdycHFhoMJKB0/R1DfyR9/NiSJ9KD6Z/n84PG7jHbo VFgEE/NMgWanaDHzz0ZDZPJedDEjag41sCzmuvPHUUWustUH58xDEr2j6/r6HNo9 MwmgyA75neUrgNAZMimIXgCHyoJUb/FSqQ7MmWurfUSis/8zsBpZB1UqkfaC2sw7 CNILMxiBlQ1ktBDiaz9u8waBI9kDa1SpD7vJtdnGQnP6RvqcxN38IAoUKOE/AgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTBJC70h5syKhPJ 2dOY45N/pislXjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDlR VEx3OTkzYjVkV0xOcUFXNkI3MWJYUlk1MmczU2VNMXdDZnhDaEZjUFIvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g5 UVRMdzk5M2I1ZFdMTnFBVzZCNzFiWFJZNTJnM1NlTTF3Q2Z4Q2hGY1BSLzIvQzEy NDJFRjQ4NzlCMzIyQTEzQzlEOUQzOThFMzkzN0ZBNjJCMjU1RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCLa/4AwQCLbl4AwQCsScIAwQDuuhYMA0EAgACMAcD BQAoBF9kMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQbKDANBgkqhkiG9w0BAQsF AAOCAQEA1mGbOJ/1HGhLR6lfIgXwn7AAQTMZRgQF+P2OwYXxn56bruBcR4YPxxAY EOGPCuyT5dhqo3gPth293Y5Xai5e7N7i4Wikx9/KNDoXo/3byIH1V+Y5jOSKJOat WegvTQSNm/qnm20f+9ODlSmvVFl/Me/zFRgJct43+SPgwJGLShZvrINvJqFzqcQx mOjtwr7QuCP0rsErhj9G8x/b+10q0UYJscUXaueotPLe5eSRF4NS4kgeZK6XkEpU v3qfJIEtlQ9CMBLoXi49rge+LMxB/ysDvjNcZmJqaO/zMnpuxoipS/4rNqmtNVGj xF1TwUFzPHli6N9AP5PkYfhpFcf79w== -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:40 2024 by rpki-client on console-fra.rpki-client.org