$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer File: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer (raw, json) Hash identifier: XoK8UbaRu+OsT16o7emZcL7TnvXlnV3wgSVt7u0O2sE= Subject key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3CBF6CE2AC71BD7F7FEC0D51AD6AEDC893CF3ABE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft caRepository: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 06:30:47 +0000 Certificate not after: Thu 03 Apr 2025 06:35:47 +0000 Subordinate resources: AS: 263945 IP: 45.188.24.0/22 IP: 138.219.180.0/22 IP: 170.84.72.0/22 IP: 2804:282c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bf:6c:e2:ac:71:bd:7f:7f:ec:0d:51:ad:6a:ed:c8:93:cf:3a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 06:30:47 2024 GMT Not After : Apr 3 06:35:47 2025 GMT Subject: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d9:54:70:08:32:53:4e:83:4a:88:c6:15:15: 52:b0:db:c3:e4:41:42:a9:11:a6:11:e9:8c:90:2c: 93:4b:e7:f5:9a:bb:b2:72:aa:23:fd:86:a9:de:22: c2:de:a5:f4:49:f0:20:8f:28:7b:5f:b9:76:b3:50: b7:b3:7f:a2:7c:45:5a:2a:e7:01:fe:67:98:7a:e7: 88:05:83:ff:ba:33:9b:34:1f:e2:b1:bc:1d:77:e5: fe:e1:6f:07:28:66:d1:d6:92:8a:ce:62:cc:bf:75: eb:de:66:dd:93:27:90:b9:ba:fc:7a:1c:67:f0:60: 2e:2e:60:3a:54:b3:0e:39:b7:e5:a0:e7:20:2d:bc: e9:b3:cb:53:5b:de:c8:29:4d:b6:d9:59:ec:53:e5: 15:a7:9e:d6:77:e9:ed:bb:de:aa:4e:46:53:be:99: 10:3d:52:06:c7:f2:55:15:07:ea:15:cf:d0:b3:4a: e8:32:96:09:3c:71:bc:7a:42:94:6f:4a:d0:75:a3: a9:77:04:81:5a:36:bb:11:89:b0:f3:4d:f5:ce:fa: 26:e2:ca:41:86:28:0c:49:85:e9:e1:6d:97:13:9a: 00:31:45:2f:22:75:47:5c:27:91:40:ea:13:31:a7: 2d:7e:15:7e:f6:c1:97:2e:d8:7a:ac:e0:ef:60:82: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.188.24.0/22 138.219.180.0/22 170.84.72.0/22 IPv6: 2804:282c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263945 Signature Algorithm: sha256WithRSAEncryption 65:77:de:b6:27:cd:36:3c:4e:ed:3c:a6:1e:b6:06:64:7f:d1: 68:55:41:af:a6:c4:2d:a4:ec:ca:07:88:18:45:67:8a:1c:25: d9:5a:be:1b:08:1d:c3:c0:68:50:2f:cf:40:ff:1d:dd:ec:8e: 08:55:92:ad:bd:fb:aa:1d:c8:cf:4f:62:3b:e9:91:28:ef:f5: 15:ec:5c:31:79:3d:80:2e:63:c4:34:00:6d:17:de:b3:b6:aa: d2:7d:09:db:c0:be:8e:2e:33:ed:75:2c:af:0a:be:73:6b:9f: 2b:f6:03:eb:ae:f4:ae:28:df:34:b7:28:5f:a2:c3:99:80:9a: 1f:60:9f:6f:a1:22:d0:0a:1c:3a:e4:1e:28:d8:07:da:7d:fe: f4:66:2e:fd:1f:0b:79:9d:74:35:57:d0:e9:62:66:0a:9d:77: 4d:7b:93:e7:1d:6b:84:60:21:b6:c4:28:f5:88:23:e2:f3:89: be:25:92:b7:46:2e:86:72:cc:df:6b:f4:a4:28:5c:d7:bf:2e: 08:9c:a1:12:51:b3:01:fa:8b:18:d6:e8:6a:53:7b:42:87:96: 65:9d:52:0a:3f:11:43:83:50:d0:0f:01:e2:af:7c:36:25:b2: 72:8c:e2:bb:dc:aa:da:b8:f4:67:3e:13:be:14:2c:b9:08:ff: ea:29:36:d6 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUPL9s4qxxvX9/7A1RrWrtyJPPOr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNjMwNDdaFw0yNTA0MDMwNjM1NDdaMDMxMTAvBgNV BAMTKENDREZCMjUyODREMTQxMUEwNUMyRDVBOTgxNjlCQUEwOTBFRUY0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCA2VRwCDJTToNKiMYVFVKw28Pk QUKpEaYR6YyQLJNL5/Wau7JyqiP9hqneIsLepfRJ8CCPKHtfuXazULezf6J8RVoq 5wH+Z5h654gFg/+6M5s0H+KxvB135f7hbwcoZtHWkorOYsy/deveZt2TJ5C5uvx6 HGfwYC4uYDpUsw45t+Wg5yAtvOmzy1Nb3sgpTbbZWexT5RWnntZ36e273qpORlO+ mRA9UgbH8lUVB+oVz9CzSugylgk8cbx6QpRvStB1o6l3BIFaNrsRibDzTfXO+ibi ykGGKAxJhenhbZcTmgAxRS8idUdcJ5FA6hMxpy1+FX72wZcu2Hqs4O9ggnYZAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTM37JShNFBGgXC 1amBabqgkO704TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0Vr cnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dlbncvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dF a3Jxb3BraVRrbVZadGQ3ZmFqMndhbUd5QmFrcHRxNWVXS3pTVENnZW53LzEvQ0NE RkIyNTI4NEQxNDExQTA1QzJENUE5ODE2OUJBQTA5MEVFRjRFMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCLbwYAwQCitu0AwQCqlRIMA0EAgACMAcDBQAoBCgs MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQHCTANBgkqhkiG9w0BAQsFAAOCAQEA ZXfetifNNjxO7TymHrYGZH/RaFVBr6bELaTsygeIGEVnihwl2Vq+Gwgdw8BoUC/P QP8d3eyOCFWSrb37qh3Iz09iO+mRKO/1FexcMXk9gC5jxDQAbRfes7aq0n0J28C+ ji4z7XUsrwq+c2ufK/YD6670rijfNLcoX6LDmYCaH2Cfb6Ei0AocOuQeKNgH2n3+ 9GYu/R8LeZ10NVfQ6WJmCp13TXuT5x1rhGAhtsQo9Ygj4vOJviWSt0YuhnLM32v0 pChc178uCJyhElGzAfqLGNboalN7QoeWZZ1SCj8RQ4NQ0A8B4q98NiWycoziu9yq 2rj0Zz4TvhQsuQj/6ik21g== -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:50 2024 by rpki-client on console-ams.rpki-client.org