$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C8D99426C9AE0363B44316412C6249C10F76C0B8.cer File: C8D99426C9AE0363B44316412C6249C10F76C0B8.cer (raw, json) Hash identifier: HgdGeNzlyTSaNK9io5SmH9sasDWBPAQZoEe/uTndgkY= Subject key identifier: C8:D9:94:26:C9:AE:03:63:B4:43:16:41:2C:62:49:C1:0F:76:C0:B8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 21F12E67C712BAB623B1F53EC6B9B743538B8132 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/1/C8D99426C9AE0363B44316412C6249C10F76C0B8.mft caRepository: rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:29 +0000 Certificate not after: Wed 02 Apr 2025 18:31:29 +0000 Subordinate resources: AS: 272733 IP: 2804:87d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f1:2e:67:c7:12:ba:b6:23:b1:f5:3e:c6:b9:b7:43:53:8b:81:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:29 2024 GMT Not After : Apr 2 18:31:29 2025 GMT Subject: CN=C8D99426C9AE0363B44316412C6249C10F76C0B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:de:aa:3d:0c:6b:aa:d2:69:68:8d:10:5d:bb: f3:d1:ba:41:53:11:44:eb:a6:86:a3:32:ec:67:05: 52:43:12:44:4d:18:9e:e0:25:3f:74:27:f2:69:77: 4e:5a:c8:40:59:c2:d0:66:ca:3b:f3:07:12:fd:d6: 40:4a:cb:9b:af:3a:51:46:eb:90:58:df:e2:4a:1d: 29:88:95:08:45:db:06:4c:9b:f3:17:2f:9b:b4:0c: e0:c9:a1:3f:0c:85:a1:4d:ca:09:f0:26:ce:a7:51: d8:d5:04:03:da:e1:f9:c1:c0:7a:5d:df:44:0d:e4: 62:48:31:5d:15:a3:4b:a2:d0:2a:f6:f0:0b:24:06: e5:37:71:97:ec:ed:2d:e5:5b:41:96:db:98:13:f0: af:22:1a:43:22:ec:32:b6:6e:d1:5a:df:3c:19:6a: b9:cd:60:67:0b:3b:82:0f:c6:20:58:3a:00:29:ad: 9a:93:79:2c:db:3f:33:03:3c:e3:ec:d2:04:32:17: e3:73:53:06:83:16:87:00:20:6e:0c:80:1e:b7:c7: 17:80:3a:f1:e1:1b:19:b3:4c:63:79:bf:c8:38:d7: 7e:be:82:3e:da:ca:69:b7:53:23:90:49:de:81:a3: 30:9c:7d:11:58:a8:34:1b:2e:6a:4f:15:49:b2:3d: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:D9:94:26:C9:AE:03:63:B4:43:16:41:2C:62:49:C1:0F:76:C0:B8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/1/C8D99426C9AE0363B44316412C6249C10F76C0B8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:87d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272733 Signature Algorithm: sha256WithRSAEncryption 15:05:12:2f:84:d7:6e:09:b7:71:d2:4b:ca:b2:e8:c5:c4:b8: 3d:c8:5a:cf:27:a0:f9:1e:e0:48:95:5f:7d:36:b7:e0:e7:e7: 5e:75:99:64:71:44:52:a1:28:c0:3e:7e:f9:bc:de:04:24:e3: 73:7a:6f:b7:b4:56:23:d2:cf:0a:8f:12:98:8d:72:4a:44:94: 5d:e8:ce:9a:83:92:63:36:79:e4:a1:09:97:f2:39:a6:25:d5: 38:f4:0f:4d:ff:db:05:48:ab:2b:54:e9:4d:51:c3:07:8f:90: 70:a7:47:7b:a9:5f:c0:dc:c6:71:b8:5d:21:36:cb:92:0d:d1: 6d:e9:e1:da:b4:02:c0:a9:a6:be:6f:62:ac:68:3e:c3:72:60: 07:79:68:db:6a:a1:aa:45:9a:d9:88:ee:52:f8:91:af:e9:0e: 47:63:03:64:18:d2:33:c7:64:44:19:af:de:d5:01:57:d0:95: 75:89:26:21:19:a4:1a:8c:87:89:37:48:72:0e:70:0f:5a:42: 4e:ff:75:64:84:e8:28:a3:54:ef:27:f0:92:85:28:d9:cc:76: 41:6d:1f:a5:1b:84:ca:e7:6b:28:6a:4d:f4:f3:e3:42:38:4f: 3a:dd:4b:d6:22:01:c5:0f:9a:ea:d5:41:5e:30:40:54:59:39: b1:d2:84:a5 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUIfEuZ8cSurYjsfU+xrm3Q1OLgTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2MjlaFw0yNTA0MDIxODMxMjlaMDMxMTAvBgNV BAMTKEM4RDk5NDI2QzlBRTAzNjNCNDQzMTY0MTJDNjI0OUMxMEY3NkMwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3qo9DGuq0mlojRBdu/PRukFT EUTrpoajMuxnBVJDEkRNGJ7gJT90J/Jpd05ayEBZwtBmyjvzBxL91kBKy5uvOlFG 65BY3+JKHSmIlQhF2wZMm/MXL5u0DODJoT8MhaFNygnwJs6nUdjVBAPa4fnBwHpd 30QN5GJIMV0Vo0ui0Cr28AskBuU3cZfs7S3lW0GW25gT8K8iGkMi7DK2btFa3zwZ arnNYGcLO4IPxiBYOgAprZqTeSzbPzMDPOPs0gQyF+NzUwaDFocAIG4MgB63xxeA OvHhGxmzTGN5v8g4136+gj7aymm3UyOQSd6BozCcfRFYqDQbLmpPFUmyPSfNAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTI2ZQmya4DY7RD FkEsYknBD3bAuDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1N4 RjNXdHRrZ3lwbzl2N1lXb0JjeEtZV1llSGpQU3RaWEt5RGszM1RXWEcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNT eEYzV3R0a2d5cG85djdZV29CY3hLWVdZZUhqUFN0WlhLeURrMzNUV1hHLzEvQzhE OTk0MjZDOUFFMDM2M0I0NDMxNjQxMkM2MjQ5QzEwRjc2QzBCOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASH0DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KV0wDQYJKoZIhvcNAQELBQADggEBABUFEi+E124Jt3HSS8qy6MXEuD3IWs8noPke 4EiVX302t+Dn5151mWRxRFKhKMA+fvm83gQk43N6b7e0ViPSzwqPEpiNckpElF3o zpqDkmM2eeShCZfyOaYl1Tj0D03/2wVIqytU6U1RwwePkHCnR3upX8DcxnG4XSE2 y5IN0W3p4dq0AsCppr5vYqxoPsNyYAd5aNtqoapFmtmI7lL4ka/pDkdjA2QY0jPH ZEQZr97VAVfQlXWJJiEZpBqMh4k3SHIOcA9aQk7/dWSE6CijVO8n8JKFKNnMdkFt H6UbhMrnayhqTfTz40I4TzrdS9YiAcUPmurVQV4wQFRZObHShKU= -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:49 2024 by rpki-client on console-ams.rpki-client.org