$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer File: C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer (raw, json) Hash identifier: LydEoKFHdNATS4a6/BDOEVKVx/lYnQjxPD23dT5mkbQ= Subject key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 58D511E782C9C57B50D2452C40554E4CA14AF66E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft caRepository: rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 18:05:10 +0000 Certificate not after: Thu 03 Apr 2025 18:10:10 +0000 Subordinate resources: AS: 28346 IP: 189.126.136.0/23 IP: 2001:12a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 14:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d5:11:e7:82:c9:c5:7b:50:d2:45:2c:40:55:4e:4c:a1:4a:f6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 18:05:10 2024 GMT Not After : Apr 3 18:10:10 2025 GMT Subject: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:fc:e0:59:6c:63:cc:18:2b:41:8c:8c:21: eb:84:c2:cd:6e:f3:23:3e:41:25:6e:bb:ec:75:49: 72:4c:da:ce:6c:99:e0:cf:11:17:f2:97:36:59:50: 38:40:9f:70:16:0f:fe:f6:ce:03:71:e2:b0:e1:73: 99:45:fa:3e:38:86:a7:f9:e2:9e:2c:be:30:de:6d: 33:4a:41:58:2c:85:dc:a1:81:50:a2:98:de:58:1c: 3e:22:b1:5a:56:73:c6:04:25:05:fe:46:69:97:eb: 0d:3b:89:f9:14:91:f2:f4:78:90:e7:86:91:5a:c7: 79:b4:17:16:db:f1:ec:58:a5:e5:cb:8d:5e:69:07: b5:90:dc:b6:a7:df:66:8a:13:c7:b3:f4:28:5a:cf: 37:02:ec:1a:d1:4a:89:fd:3d:41:2c:b2:a4:e7:b2: a5:e9:00:00:65:8e:23:b1:50:5d:6b:af:08:40:ac: 45:7b:9b:8f:c6:34:a2:f8:77:ac:27:fc:bf:58:5f: 45:e7:69:63:c5:66:f9:76:55:90:88:b9:9e:4a:dd: 25:bb:98:97:41:16:22:aa:81:6c:f4:31:53:a3:fb: 29:0f:5a:c5:16:28:9c:14:8a:f7:15:47:1a:49:5e: d2:00:7d:43:c9:e5:e1:c2:16:b3:e2:a5:f6:87:31: 4e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.126.136.0/23 IPv6: 2001:12a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28346 Signature Algorithm: sha256WithRSAEncryption 91:49:17:ab:80:c7:15:92:e3:c4:c3:7b:42:75:e7:fc:0c:e0: 23:67:a0:62:63:df:e4:f9:28:01:d5:2b:e7:e0:73:67:b4:94: 8a:ca:66:6c:93:65:4f:6e:8b:c9:0b:90:87:87:62:d5:bf:20: 53:9d:51:86:d9:14:a5:d5:c6:42:02:24:47:1e:0b:ca:05:96: 3d:71:bd:7d:4d:ba:19:02:68:df:45:ff:b8:0a:da:f4:ed:f9: d3:dd:8b:1e:26:46:da:2e:d4:0b:c3:c3:40:af:c8:e8:c1:1b: b3:e5:e2:0e:b7:11:0c:14:54:20:af:a4:72:49:78:7c:c9:29: 8f:88:51:52:0e:b3:9d:5d:55:46:46:8d:0a:ab:fb:ee:f9:f8: 1f:a7:c3:12:45:1d:df:0e:5e:52:74:49:5b:1d:6e:1a:e6:66: 16:e9:1b:29:2c:3c:e4:f4:9b:a4:d6:45:fa:4c:d1:df:ad:50: 32:ae:4c:23:51:86:4c:0e:16:a5:7a:77:c4:ba:d1:b1:f4:d3: 11:f9:a1:f0:e2:7b:68:24:45:b3:b0:a3:16:03:b1:3a:be:87: 87:b5:2f:eb:ed:46:54:be:19:c4:a4:88:59:2a:68:cf:22:e7: 20:db:2d:62:ce:05:cd:a3:5e:1b:06:51:33:17:13:fb:05:eb: 4f:0e:3e:db -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUWNUR54LJxXtQ0kUsQFVOTKFK9m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxODA1MTBaFw0yNTA0MDMxODEwMTBaMDMxMTAvBgNV BAMTKEM5QzhGRTRDNEI5NUFBODBEM0I3M0RDRDEzNkRBMUUxQjgzNjU2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YvzgWWxjzBgrQYyMIeuEws1u 8yM+QSVuu+x1SXJM2s5smeDPERfylzZZUDhAn3AWD/72zgNx4rDhc5lF+j44hqf5 4p4svjDebTNKQVgshdyhgVCimN5YHD4isVpWc8YEJQX+RmmX6w07ifkUkfL0eJDn hpFax3m0Fxbb8exYpeXLjV5pB7WQ3Lan32aKE8ez9ChazzcC7BrRSon9PUEssqTn sqXpAABljiOxUF1rrwhArEV7m4/GNKL4d6wn/L9YX0XnaWPFZvl2VZCIuZ5K3SW7 mJdBFiKqgWz0MVOj+ykPWsUWKJwUivcVRxpJXtIAfUPJ5eHCFrPipfaHMU7rAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJyP5MS5WqgNO3 Pc0TbaHhuDZW2TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHBi SzEzVHpxZFdLZlhwck1ESEh4OUtaQ0o2d3Z2WUcyR2ROdGZwZkRiWFAvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rw YksxM1R6cWRXS2ZYcHJNREhIeDlLWkNKNnd2dllHMkdkTnRmcGZEYlhQLzEvQzlD OEZFNEM0Qjk1QUE4MEQzQjczRENEMTM2REExRTFCODM2NTZEOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBvX6IMA0EAgACMAcDBQAgARKkMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm66MA0GCSqGSIb3DQEBCwUAA4IBAQCRSRergMcVkuPEw3tC def8DOAjZ6BiY9/k+SgB1Svn4HNntJSKymZsk2VPbovJC5CHh2LVvyBTnVGG2RSl 1cZCAiRHHgvKBZY9cb19TboZAmjfRf+4Ctr07fnT3YseJkbaLtQLw8NAr8jowRuz 5eIOtxEMFFQgr6RySXh8ySmPiFFSDrOdXVVGRo0Kq/vu+fgfp8MSRR3fDl5SdElb HW4a5mYW6RspLDzk9Juk1kX6TNHfrVAyrkwjUYZMDhalenfEutGx9NMR+aHw4nto JEWzsKMWA7E6voeHtS/r7UZUvhnEpIhZKmjPIucg2y1izgXNo14bBlEzFxP7BetP Dj7b -----END CERTIFICATE-----Generated at Mon Jul 1 13:48:22 2024 by rpki-client on console-ams.rpki-client.org