$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.cer File: C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.cer (raw, json) Hash identifier: 2NiFl+O+WJ2lBj2OVTUTJadCp5InrmtlHZXADYOKs2U= Subject key identifier: C7:57:68:4E:22:CC:EF:F7:9D:D9:DF:FD:B7:BA:53:ED:8C:BE:88:1C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2221A95B88F34EF72A9520FBF94B5CE8DB71AF49 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.mft caRepository: rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 00:20:03 +0000 Certificate not after: Fri 04 Apr 2025 00:25:03 +0000 Subordinate resources: AS: 271365 IP: 200.53.80.0/22 IP: 2804:7a54::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 20:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:21:a9:5b:88:f3:4e:f7:2a:95:20:fb:f9:4b:5c:e8:db:71:af:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 5 00:20:03 2024 GMT Not After : Apr 4 00:25:03 2025 GMT Subject: CN=C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:66:62:ac:33:af:fb:ae:54:ac:ed:79:df: 81:1b:b8:58:03:dd:18:9d:60:7b:95:39:71:17:c7: bf:e7:a8:b7:6b:77:e9:58:a2:b2:9a:25:0a:f9:2a: e6:a6:89:02:4b:be:51:38:17:63:20:6c:24:23:9c: 2b:23:c9:cd:50:37:e7:ec:13:23:dc:ea:53:ee:c0: d8:a5:6a:f4:eb:01:56:3c:de:fc:55:58:2f:a7:e5: 2a:46:c0:ed:92:74:03:44:1f:e1:28:e1:6c:fb:96: b2:20:18:9e:49:2a:53:4f:a2:ea:ea:b6:c9:8b:df: 79:0d:e0:34:73:22:d1:9b:18:67:86:10:86:3d:8a: d0:34:0a:1f:fe:f5:4c:7a:b1:28:3e:63:ca:1d:13: d2:37:7e:1c:e1:60:ce:63:65:07:f3:14:bf:da:6e: c5:d3:fb:25:ec:7f:f6:a1:fa:e1:fe:e9:07:1b:8a: f5:3f:54:c2:f7:a2:8d:f0:65:6b:6d:31:c4:fd:a6: cf:a2:3f:e7:12:1c:20:2b:8d:f7:94:28:d2:b4:dc: 13:0d:52:ef:b6:16:10:c7:5d:dc:a1:dc:6a:84:5c: 4a:91:55:72:f7:80:f4:e6:b4:24:51:95:0a:cd:46: e9:a0:67:eb:ce:f8:82:96:a6:12:22:de:1b:7d:00: 6b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:57:68:4E:22:CC:EF:F7:9D:D9:DF:FD:B7:BA:53:ED:8C:BE:88:1C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.53.80.0/22 IPv6: 2804:7a54::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271365 Signature Algorithm: sha256WithRSAEncryption d0:11:f9:d0:21:af:a7:61:62:f8:11:73:8b:16:24:80:b7:e1: ed:58:47:22:8d:7e:9a:47:bb:43:b2:05:c2:12:65:66:cf:eb: 5b:7f:55:1e:19:5f:6d:8f:68:77:22:02:08:46:3d:e8:65:08: 59:32:bb:47:1a:f6:24:28:00:5d:b1:b8:8c:9b:98:09:65:e6: a6:55:4b:8c:94:0a:0d:38:19:de:72:29:9a:fa:ab:d8:c0:60: 4e:2c:28:f8:8f:dc:fb:50:3e:72:0a:e9:7a:62:d3:c4:f9:5f: e0:0e:6f:77:6a:27:4b:fe:aa:7d:c1:4a:d0:b0:35:af:7e:89: 60:33:88:99:c8:19:d1:38:8f:3e:59:7a:f7:3b:b4:1a:bf:06: 58:ef:1a:e5:7d:23:81:a1:c1:a4:6c:69:c7:56:47:e4:a9:32: dd:3c:de:4c:f8:61:77:43:79:4e:e8:39:a5:47:7c:5f:a9:7a: a4:80:eb:44:4b:c9:c3:95:46:f8:38:86:23:9a:cf:1b:74:d3: ca:1b:1c:81:5e:30:64:04:32:41:08:a7:f6:19:47:73:9c:9b: 48:98:26:f9:e4:33:c5:a7:db:ea:61:a1:e8:05:e7:1d:cd:4d: 5e:39:5b:c6:b9:bb:1f:77:e4:b9:0b:b6:e0:86:41:1d:2b:93: 93:8b:4a:6b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIiGpW4jzTvcqlSD7+Utc6Ntxr0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDUwMDIwMDNaFw0yNTA0MDQwMDI1MDNaMDMxMTAvBgNV BAMTKEM3NTc2ODRFMjJDQ0VGRjc5REQ5REZGREI3QkE1M0VEOENCRTg4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJmZirDOv+65UrO1534EbuFgD 3RidYHuVOXEXx7/nqLdrd+lYorKaJQr5KuamiQJLvlE4F2MgbCQjnCsjyc1QN+fs EyPc6lPuwNilavTrAVY83vxVWC+n5SpGwO2SdANEH+Eo4Wz7lrIgGJ5JKlNPourq tsmL33kN4DRzItGbGGeGEIY9itA0Ch/+9Ux6sSg+Y8odE9I3fhzhYM5jZQfzFL/a bsXT+yXsf/ah+uH+6QcbivU/VML3oo3wZWttMcT9ps+iP+cSHCArjfeUKNK03BMN Uu+2FhDHXdyh3GqEXEqRVXL3gPTmtCRRlQrNRumgZ+vO+IKWphIi3ht9AGs5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTHV2hOIszv953Z 3/23ulPtjL6IHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTJr Vkx1Z3JSdVU3NGpYbVY3OVlSYUFEV0NodXFjd3Jmd1Q3Tk1QMW9NankvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ey a1ZMdWdyUnVVNzRqWG1WNzlZUmFBRFdDaHVxY3dyZndUN05NUDFvTWp5LzEvQzc1 NzY4NEUyMkNDRUZGNzlERDlERkZEQjdCQTUzRUQ4Q0JFODgxQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyDVQMA0EAgACMAcDBQAoBHpUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkBTANBgkqhkiG9w0BAQsFAAOCAQEA0BH50CGvp2Fi+BFz ixYkgLfh7VhHIo1+mke7Q7IFwhJlZs/rW39VHhlfbY9odyICCEY96GUIWTK7Rxr2 JCgAXbG4jJuYCWXmplVLjJQKDTgZ3nIpmvqr2MBgTiwo+I/c+1A+cgrpemLTxPlf 4A5vd2onS/6qfcFK0LA1r36JYDOImcgZ0TiPPll69zu0Gr8GWO8a5X0jgaHBpGxp x1ZH5Kky3TzeTPhhd0N5Tug5pUd8X6l6pIDrREvJw5VG+DiGI5rPG3TTyhscgV4w ZAQyQQin9hlHc5ybSJgm+eQzxafb6mGh6AXnHc1NXjlbxrm7H3fkuQu24IZBHSuT k4tKaw== -----END CERTIFICATE-----Generated at Tue Nov 26 21:51:47 2024 by rpki-client on console-ams.rpki-client.org