$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer File: CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer (raw, json) Hash identifier: dzS6IfeL2/LpDTgookivqqzya8Xy4Oq5I1jxdIsPikU= Subject key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 081017C74D6644A0CFDE42B48313BEBF55BC0FDE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.mft caRepository: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 20:15:47 +0000 Certificate not after: Wed 02 Apr 2025 20:20:47 +0000 Subordinate resources: AS: 28125 IP: 187.19.16.0/20 IP: 191.36.160.0/21 IP: 2804:1488::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 05:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:10:17:c7:4d:66:44:a0:cf:de:42:b4:83:13:be:bf:55:bc:0f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 20:15:47 2024 GMT Not After : Apr 2 20:20:47 2025 GMT Subject: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8b:a3:83:54:38:65:4a:8f:d5:f5:f4:e6:47: 8f:63:5c:0f:30:66:82:e8:a8:6e:15:ef:a7:74:b3: 47:78:4b:98:71:c8:90:16:6d:72:c3:c5:a9:3d:b9: 1b:97:ba:31:d1:f9:98:26:fa:17:c5:4f:88:59:a3: d3:7d:6a:31:fe:ac:10:01:f2:5a:6e:0f:77:d8:12: 59:42:fa:c5:2c:c6:f1:a1:a1:a7:99:88:d9:1c:6a: 95:8d:c6:66:83:88:f5:d5:b2:e0:db:02:89:00:fb: a4:8a:23:dc:ee:b4:62:8c:9a:be:a1:86:54:cf:37: b0:ad:3e:d8:e2:1b:67:e5:9b:9b:9e:9f:c2:d5:fb: ea:c8:6c:79:4e:c6:68:94:6c:3f:9d:f3:d0:75:ac: 8b:8e:85:57:f6:c6:e8:a7:7c:ea:ca:43:74:e6:93: 42:a9:a6:e9:46:2c:12:04:7b:3a:7b:ed:93:f4:d7: a8:d2:e3:5c:17:a8:f4:80:4b:cc:cf:16:80:a2:66: 47:d9:38:89:b9:67:85:1a:67:f6:58:14:e9:86:1a: e9:db:17:1d:6d:82:1a:fe:4d:58:61:0f:84:1b:8c: 85:dc:bd:6c:63:ae:14:3d:78:6e:92:e0:bd:6d:51: 34:10:18:9d:71:72:90:0e:ee:c0:af:05:47:1c:03: 80:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.19.16.0/20 191.36.160.0/21 IPv6: 2804:1488::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28125 Signature Algorithm: sha256WithRSAEncryption 30:f2:27:d4:14:95:09:2b:d1:66:cd:5f:88:2d:95:43:9e:59: 16:38:ba:cc:a2:42:8e:b2:3f:f0:5f:c4:ca:cb:c5:dc:cb:93: b2:7a:90:d2:2e:05:3d:d6:c6:b2:3f:8d:ba:8c:15:0d:7a:ee: 38:26:30:c2:4c:65:58:7e:a0:a5:5a:62:46:a7:99:ef:6e:d5: 7f:99:f1:1c:53:f8:21:d1:f4:ac:0d:fb:96:88:c1:e8:2c:76: 6b:91:2f:a1:36:8e:59:cb:51:31:cf:1f:67:64:26:56:e6:e1: 1e:ea:1e:5c:d7:33:83:d9:df:a2:40:32:c5:58:67:66:20:99: 30:cf:e4:8a:2d:73:6e:c5:01:8c:3f:bf:d4:23:67:7f:46:72: cf:90:6b:1a:d9:06:1b:45:36:27:9d:3e:49:02:97:5e:68:37: 43:3b:30:1f:74:70:8b:7a:2d:b4:38:25:70:5e:26:2c:7c:48: 7b:a6:68:c6:a6:81:94:57:f0:60:36:2b:66:84:06:17:85:1b: 6b:33:2c:db:c0:74:bb:52:af:f0:f3:8b:ea:d7:79:d2:9a:8c: 81:05:11:9b:b8:25:a5:32:14:39:a5:ba:c9:d8:5f:79:26:1c: d7:c6:42:c2:64:f4:1b:01:5f:a5:7b:1a:bf:dc:3d:ae:c6:b8: cd:ca:f1:82 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUCBAXx01mRKDP3kK0gxO+v1W8D94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMDE1NDdaFw0yNTA0MDIyMDIwNDdaMDMxMTAvBgNV BAMTKENCRTRDNjdBM0FCQkE5MkYzMDk1Rjk0RTEyMjhGMDYzNjVFNkFFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfi6ODVDhlSo/V9fTmR49jXA8w ZoLoqG4V76d0s0d4S5hxyJAWbXLDxak9uRuXujHR+Zgm+hfFT4hZo9N9ajH+rBAB 8lpuD3fYEllC+sUsxvGhoaeZiNkcapWNxmaDiPXVsuDbAokA+6SKI9zutGKMmr6h hlTPN7CtPtjiG2flm5uen8LV++rIbHlOxmiUbD+d89B1rIuOhVf2xuinfOrKQ3Tm k0KppulGLBIEezp77ZP016jS41wXqPSAS8zPFoCiZkfZOIm5Z4UaZ/ZYFOmGGunb Fx1tghr+TVhhD4QbjIXcvWxjrhQ9eG6S4L1tUTQQGJ1xcpAO7sCvBUccA4BhAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTL5MZ6OrupLzCV +U4SKPBjZeau6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkJY eDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRlaE4vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkJY eDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRlaE4vMS9DQkU0 QzY3QTNBQkJBOTJGMzA5NUY5NEUxMjI4RjA2MzY1RTZBRUVBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAS7ExADBAO/JKAwDQQCAAIwBwMFACgEFIgwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICbd0wDQYJKoZIhvcNAQELBQADggEBADDyJ9QUlQkr 0WbNX4gtlUOeWRY4usyiQo6yP/BfxMrLxdzLk7J6kNIuBT3WxrI/jbqMFQ167jgm MMJMZVh+oKVaYkanme9u1X+Z8RxT+CHR9KwN+5aIwegsdmuRL6E2jlnLUTHPH2dk Jlbm4R7qHlzXM4PZ36JAMsVYZ2YgmTDP5Iotc27FAYw/v9QjZ39Gcs+QaxrZBhtF NiedPkkCl15oN0M7MB90cIt6LbQ4JXBeJix8SHumaMamgZRX8GA2K2aEBheFG2sz LNvAdLtSr/Dzi+rXedKajIEFEZu4JaUyFDmlusnYX3kmHNfGQsJk9BsBX6V7Gr/c Pa7GuM3K8YI= -----END CERTIFICATE-----Generated at Mon Jul 1 02:59:39 2024 by rpki-client on console-fra.rpki-client.org