$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.cer File: CD38A7C7D796C57003E777BDB835D0DB8AC490C6.cer (raw, json) Hash identifier: tQDLRHhA1MkxFh/zfzlf1+7PTn2lEcfUV3e0KaPjOms= Subject key identifier: CD:38:A7:C7:D7:96:C5:70:03:E7:77:BD:B8:35:D0:DB:8A:C4:90:C6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 487C3C8E51FE6BEB5222EABE9F4D048477174DB2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.mft caRepository: rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:55 +0000 Certificate not after: Wed 02 Apr 2025 18:30:55 +0000 Subordinate resources: AS: 268751 IP: 45.172.60.0/22 IP: 2804:5a24::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7c:3c:8e:51:fe:6b:eb:52:22:ea:be:9f:4d:04:84:77:17:4d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:55 2024 GMT Not After : Apr 2 18:30:55 2025 GMT Subject: CN=CD38A7C7D796C57003E777BDB835D0DB8AC490C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:d5:c9:02:6d:cc:de:bc:3a:69:55:7c:2b: fc:b6:cb:b2:14:34:5e:5f:52:0c:d8:6d:c9:fb:d4: 11:e4:05:c4:36:61:19:41:13:2e:73:4a:64:a9:79: 46:36:44:20:54:c4:fd:4b:5c:f4:e4:74:dc:23:ff: 06:14:ed:d5:27:cf:70:92:30:e4:6c:15:fd:d0:60: 0e:f4:ae:ed:f0:ef:ab:0d:58:f1:96:64:63:9e:23: 4b:91:8d:ef:d4:5f:58:0d:02:ea:26:a5:5c:90:4c: 0a:d6:b2:05:5c:bd:7b:e9:85:41:b3:ea:9e:dc:4e: 58:57:fb:63:8c:e9:a6:8d:94:4c:1e:40:bc:98:53: a6:b2:86:ea:10:d1:61:84:d6:0d:5a:7a:47:c1:4d: 01:b7:8f:7f:c8:77:20:e1:99:e1:85:be:9e:67:1e: 5e:5d:6f:3d:c6:7b:fa:4e:4e:c3:1e:1b:6e:36:2b: a2:a2:73:17:af:cc:34:76:71:64:15:ad:35:13:18: b3:77:33:d6:e3:8d:bf:ac:6e:56:6d:59:33:59:39: 24:27:e1:00:be:9a:fc:26:c8:70:b2:0d:76:37:d2: cc:a5:a1:ff:1f:59:6e:d8:98:02:58:28:3d:9f:60: 7f:96:ff:37:0f:ca:4e:5e:02:22:a2:df:64:d0:14: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:38:A7:C7:D7:96:C5:70:03:E7:77:BD:B8:35:D0:DB:8A:C4:90:C6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.60.0/22 IPv6: 2804:5a24::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268751 Signature Algorithm: sha256WithRSAEncryption 29:df:95:af:79:b5:8c:bc:f3:9a:a6:8f:7d:c0:d4:bd:6b:83: 99:12:cc:ee:1c:5e:77:58:41:17:1d:bb:46:f2:91:bf:d9:bb: 8a:3e:04:15:f3:88:73:b7:da:f1:94:65:22:4a:fb:24:f0:fa: 11:34:e7:f9:06:ce:2c:d4:c4:4e:8f:9c:9f:aa:65:3a:9c:f4: c3:90:05:5a:0c:31:9e:f6:ce:07:72:85:08:7c:8c:53:85:4e: 19:ef:c7:37:a8:38:21:f9:53:42:b1:58:2f:8a:0a:50:f4:78: fb:44:58:e2:e1:3f:d6:b5:d9:a7:96:98:80:4b:9f:bb:0d:5b: d8:86:b8:c5:71:1b:54:50:74:8f:4a:d6:97:b8:78:2d:f4:97: 29:ce:b2:62:17:f0:4d:be:c0:dd:ef:b7:e5:f5:a3:f1:ca:13: b1:11:77:61:2d:72:91:06:c7:f9:63:4b:77:9d:e5:99:26:c0: 74:b3:ea:d2:42:84:da:f5:8d:21:48:af:38:fa:0f:dc:39:83: 2a:f0:a9:ea:d0:d1:43:e1:cf:23:70:1d:f7:70:af:97:c0:0b: 29:ab:60:1c:d8:80:4e:5f:8d:a2:93:47:c9:ee:0a:2b:70:73: ad:8f:e2:39:26:94:e5:5f:45:33:73:4a:42:65:db:40:dd:a1: 9a:e9:0b:4a -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUSHw8jlH+a+tSIuq+n00EhHcXTbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1NTVaFw0yNTA0MDIxODMwNTVaMDMxMTAvBgNV BAMTKENEMzhBN0M3RDc5NkM1NzAwM0U3NzdCREI4MzVEMERCOEFDNDkwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4dNXJAm3M3rw6aVV8K/y2y7IU NF5fUgzYbcn71BHkBcQ2YRlBEy5zSmSpeUY2RCBUxP1LXPTkdNwj/wYU7dUnz3CS MORsFf3QYA70ru3w76sNWPGWZGOeI0uRje/UX1gNAuompVyQTArWsgVcvXvphUGz 6p7cTlhX+2OM6aaNlEweQLyYU6ayhuoQ0WGE1g1aekfBTQG3j3/IdyDhmeGFvp5n Hl5dbz3Ge/pOTsMeG242K6KicxevzDR2cWQVrTUTGLN3M9bjjb+sblZtWTNZOSQn 4QC+mvwmyHCyDXY30sylof8fWW7YmAJYKD2fYH+W/zcPyk5eAiKi32TQFJQlAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNOKfH15bFcAPn d724NdDbisSQxjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVTRq WnJUV0NnQnp4TVA2VmJubnBTQThuaGgxaXVXNkg2aTd2eVV0RUt4di8xLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVTRq WnJUV0NnQnp4TVA2VmJubnBTQThuaGgxaXVXNkg2aTd2eVV0RUt4di8xL0NEMzhB N0M3RDc5NkM1NzAwM0U3NzdCREI4MzVEMERCOEFDNDkwQzYubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAi2sPDANBAIAAjAHAwUAKARaJDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEGc8wDQYJKoZIhvcNAQELBQADggEBACnfla95tYy885qmj33A 1L1rg5kSzO4cXndYQRcdu0bykb/Zu4o+BBXziHO32vGUZSJK+yTw+hE05/kGzizU xE6PnJ+qZTqc9MOQBVoMMZ72zgdyhQh8jFOFThnvxzeoOCH5U0KxWC+KClD0ePtE WOLhP9a12aeWmIBLn7sNW9iGuMVxG1RQdI9K1pe4eC30lynOsmIX8E2+wN3vt+X1 o/HKE7ERd2EtcpEGx/ljS3ed5ZkmwHSz6tJChNr1jSFIrzj6D9w5gyrwqerQ0UPh zyNwHfdwr5fACymrYBzYgE5fjaKTR8nuCitwc62P4jkmlOVfRTNzSkJl20DdoZrp C0o= -----END CERTIFICATE-----Generated at Sun Jun 2 00:29:24 2024 by rpki-client on console-ams.rpki-client.org