$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer File: C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer (raw, json) Hash identifier: we3zSKZ+vq/mO7TI7W/41b5AYyET07G0he96EVDg+1I= Subject key identifier: C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5FF1DAE801D372474E4C1BEF8CBA82EABA89988C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft caRepository: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 11:59:43 +0000 Certificate not after: Thu 03 Apr 2025 12:04:43 +0000 Subordinate resources: AS: 263970 IP: 138.255.64.0/22 IP: 2804:289c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f1:da:e8:01:d3:72:47:4e:4c:1b:ef:8c:ba:82:ea:ba:89:98:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 11:59:43 2024 GMT Not After : Apr 3 12:04:43 2025 GMT Subject: CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:af:80:43:4f:a3:3e:9e:91:3a:db:1d:20: 32:a1:ac:58:fc:ed:5e:28:52:c5:1e:fc:03:7b:26: 73:b6:19:68:31:a3:5f:7a:34:6d:42:86:d8:94:88: 25:06:97:95:59:80:b8:e7:6e:39:e5:e8:ef:14:ea: 23:de:65:a4:03:1b:30:83:81:14:16:98:77:d8:95: fa:a8:5c:aa:58:8f:9a:3e:11:fa:9a:c7:a9:d5:ae: d3:f0:e7:84:51:a7:49:29:bd:73:aa:92:bd:27:8d: a8:d6:82:18:bf:88:fe:a8:ca:49:b5:91:74:5c:52: 08:8c:52:54:98:2c:0c:af:f3:ff:96:75:47:37:d1: c9:4b:6a:96:ee:bd:bd:cd:09:d9:99:c2:07:87:6a: 4e:00:c0:47:fc:49:cf:7e:99:31:49:86:95:47:9c: cb:6c:8e:35:2a:0d:56:4c:20:a4:d4:bb:17:02:3f: 41:b8:9e:a2:d8:69:b8:e4:70:1a:ee:7e:2f:c2:00: 52:f9:04:fd:68:2b:47:3a:80:80:f0:0f:60:a9:58: b1:ca:d7:8f:04:50:5e:4f:3a:29:70:f0:29:f3:b4: 42:85:fd:e7:e3:32:ee:b4:5d:8f:7b:6b:42:99:ef: 48:78:09:14:53:de:0b:61:e6:c4:8d:ed:45:6e:12: 30:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.64.0/22 IPv6: 2804:289c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263970 Signature Algorithm: sha256WithRSAEncryption 80:49:f9:21:57:ed:f7:1a:f6:35:29:7a:11:03:fe:d4:0e:86: 5b:8a:a4:5a:2c:cf:07:61:d9:16:93:19:53:22:01:d8:72:6a: e0:82:b7:aa:8f:11:1d:2e:cb:2c:73:08:53:1e:85:6d:a8:a6: 45:6f:2a:b5:dc:cf:fa:5b:2c:2f:4d:29:eb:26:2f:af:ea:0c: 84:fb:5a:fe:a3:9d:c8:44:28:d7:00:a1:0f:ec:b7:03:a9:5c: 82:35:2c:0b:cf:52:b0:b4:02:a3:e3:d9:b0:6c:70:04:35:44: cc:68:02:e1:9c:71:96:ec:af:48:59:7e:73:2c:b3:3d:36:15: a4:b3:67:3c:ff:2d:1f:cb:12:64:80:c4:04:8b:47:51:d0:6a: c2:1a:0c:06:ad:da:bb:d1:35:83:5e:8c:23:e3:f0:85:4f:90: d2:8d:c9:3c:a7:f7:20:49:f4:44:18:88:83:7a:ff:70:18:f2: 82:34:c2:fc:ef:48:83:c3:29:85:37:f5:ce:f8:e7:e2:d8:63: 39:62:b7:ad:85:f1:9d:8b:3a:07:ee:3a:67:f4:82:fb:a4:28: 49:ce:f0:7a:ee:dd:1e:dc:af:84:9e:d3:d1:bf:33:cc:4d:75: fa:6e:87:91:5a:fe:04:07:41:1f:6b:52:6c:81:a3:34:d2:14: 51:ae:13:8d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUX/Ha6AHTckdOTBvvjLqC6rqJmIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMTU5NDNaFw0yNTA0MDMxMjA0NDNaMDMxMTAvBgNV BAMTKEM4RUU3RTUxMjYxRERGNDcwOTE0Nzg0RUU3MENFRkYzQjNCRTcxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Q6+AQ0+jPp6ROtsdIDKhrFj8 7V4oUsUe/AN7JnO2GWgxo196NG1ChtiUiCUGl5VZgLjnbjnl6O8U6iPeZaQDGzCD gRQWmHfYlfqoXKpYj5o+Efqax6nVrtPw54RRp0kpvXOqkr0njajWghi/iP6oykm1 kXRcUgiMUlSYLAyv8/+WdUc30clLapbuvb3NCdmZwgeHak4AwEf8Sc9+mTFJhpVH nMtsjjUqDVZMIKTUuxcCP0G4nqLYabjkcBrufi/CAFL5BP1oK0c6gIDwD2CpWLHK 148EUF5POilw8CnztEKF/efjMu60XY97a0KZ70h4CRRT3gth5sSN7UVuEjCbAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTI7n5RJh3fRwkU eE7nDO/zs75xvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWZM cVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNnbWUvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlm THFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzIvQzhF RTdFNTEyNjFEREY0NzA5MTQ3ODRFRTcwQ0VGRjNCM0JFNzFCRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCiv9AMA0EAgACMAcDBQAoBCicMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHIjANBgkqhkiG9w0BAQsFAAOCAQEAgEn5IVft9xr2NSl6 EQP+1A6GW4qkWizPB2HZFpMZUyIB2HJq4IK3qo8RHS7LLHMIUx6FbaimRW8qtdzP +lssL00p6yYvr+oMhPta/qOdyEQo1wChD+y3A6lcgjUsC89SsLQCo+PZsGxwBDVE zGgC4ZxxluyvSFl+cyyzPTYVpLNnPP8tH8sSZIDEBItHUdBqwhoMBq3au9E1g16M I+PwhU+Q0o3JPKf3IEn0RBiIg3r/cBjygjTC/O9Ig8MphTf1zvjn4thjOWK3rYXx nYs6B+46Z/SC+6QoSc7weu7dHtyvhJ7T0b8zzE11+m6HkVr+BAdBH2tSbIGjNNIU Ua4TjQ== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:35 2024 by rpki-client on console-fra.rpki-client.org