$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer File: CD474EAA2CD8D52421F339174CBFE8D756A44685.cer (raw, json) Hash identifier: Jx88MfSwEmFrzRG7C2ongKKHbyvz9FiF4UBtlxQ1YoU= Subject key identifier: CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4E12AB399217C1B3A453681F49181C82C3F3F3CC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft caRepository: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 25 Apr 2024 15:01:27 +0000 Certificate not after: Thu 24 Apr 2025 15:06:27 +0000 Subordinate resources: AS: 52999 IP: 168.195.68.0/22 IP: 177.66.32.0/21 IP: 186.216.216.0/21 IP: 186.226.96.0/20 IP: 2804:508::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:12:ab:39:92:17:c1:b3:a4:53:68:1f:49:18:1c:82:c3:f3:f3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 25 15:01:27 2024 GMT Not After : Apr 24 15:06:27 2025 GMT Subject: CN=CD474EAA2CD8D52421F339174CBFE8D756A44685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:e3:4d:65:25:ef:56:6e:05:86:ca:01:40: 18:a1:9c:7f:03:7a:28:79:6e:b8:14:d3:b5:05:82: b0:53:a2:60:61:14:60:c2:3f:8e:dc:b5:01:e7:00: 42:f8:1a:86:96:f2:97:e8:ab:0d:f9:6a:97:86:35: 82:9a:77:a7:96:a4:6b:1d:7f:36:0b:71:16:11:2c: 15:f7:1b:16:c2:29:9b:9e:c1:cc:f0:94:49:5b:d1: 8f:93:19:73:c9:01:28:6b:e8:fd:f0:80:b4:b1:69: fb:7d:6c:16:2c:3a:6f:46:8c:4b:b9:81:1a:bc:f8: cc:fc:3e:d3:34:73:32:ef:9a:46:cf:e0:6a:05:0a: 07:e7:bc:ac:5e:c1:d4:30:d2:fa:a3:48:d6:14:5d: 06:0c:e2:08:5d:87:33:f6:fc:3b:d9:62:51:65:eb: a4:53:c6:62:ec:63:2b:1d:38:65:b1:fb:7d:35:44: 59:d9:73:69:b9:78:1e:0b:63:39:d2:84:26:b5:b4: 77:49:28:63:f3:16:42:fa:0a:e4:e0:64:7f:b2:99: d4:7f:8c:52:4a:39:45:a4:9b:ed:d9:c6:66:26:36: 45:43:0b:1d:99:3e:6a:98:60:a7:37:96:cd:27:1d: 68:9e:5a:8b:68:d8:df:b2:d9:7b:92:cc:88:fb:f8: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.68.0/22 177.66.32.0/21 186.216.216.0/21 186.226.96.0/20 IPv6: 2804:508::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52999 Signature Algorithm: sha256WithRSAEncryption 52:be:2c:a6:d2:f2:60:d2:31:1f:06:69:37:9c:bd:1d:f6:fb: b4:c2:74:b7:28:f9:d9:20:3c:49:e9:5f:54:b7:ea:fe:5d:b0: d1:10:d4:ab:01:41:e4:2d:0f:80:d8:f9:a6:8d:93:3a:52:9c: 3b:c3:40:e6:53:62:c2:1d:66:83:69:ec:cd:51:d3:d6:da:2f: 79:72:0f:27:d4:4f:e4:10:8b:ae:cc:03:9f:51:0f:c2:7c:dc: 1d:73:c5:5b:ac:4b:a2:b9:00:f2:36:c5:3d:8b:1f:28:e5:04: af:fd:cd:5e:d6:0c:16:ce:8a:67:db:17:4c:64:3c:68:73:a8: 50:6f:e5:80:81:f8:91:ed:2d:2f:e1:db:5b:ac:5c:e0:11:7c: 70:4f:49:62:ab:13:15:5b:9b:0f:73:5a:d2:94:65:1a:85:92: 2d:4f:d5:77:6f:1d:c5:57:d3:5a:eb:67:ae:73:f7:41:97:77: e5:c5:15:12:cf:48:28:7f:28:f0:18:51:bc:77:46:c7:6e:18: fa:80:17:d6:b3:af:f9:ad:a9:29:18:96:79:7f:ce:ba:31:d0: a1:76:1e:9d:56:3e:d9:a4:7e:b7:16:49:43:45:42:eb:21:40: 1a:03:c9:53:3a:bf:4c:df:59:bb:b9:fb:0d:03:dd:5a:f9:74: ad:50:17:21 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUThKrOZIXwbOkU2gfSRgcgsPz88wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjUxNTAxMjdaFw0yNTA0MjQxNTA2MjdaMDMxMTAvBgNV BAMTKENENDc0RUFBMkNEOEQ1MjQyMUYzMzkxNzRDQkZFOEQ3NTZBNDQ2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgPeNNZSXvVm4FhsoBQBihnH8D eih5brgU07UFgrBTomBhFGDCP47ctQHnAEL4GoaW8pfoqw35apeGNYKad6eWpGsd fzYLcRYRLBX3GxbCKZuewczwlElb0Y+TGXPJAShr6P3wgLSxaft9bBYsOm9GjEu5 gRq8+Mz8PtM0czLvmkbP4GoFCgfnvKxewdQw0vqjSNYUXQYM4ghdhzP2/DvZYlFl 66RTxmLsYysdOGWx+301RFnZc2m5eB4LYznShCa1tHdJKGPzFkL6CuTgZH+ymdR/ jFJKOUWkm+3ZxmYmNkVDCx2ZPmqYYKc3ls0nHWieWoto2N+y2XuSzIj7+LnLAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNR06qLNjVJCHz ORdMv+jXVqRGhTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTdy bzJoUXdFbnY2blV0eWpTR3NBR1FvdEpHMmJUQWpQVW55OEZKd0pTY3EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk3 cm8yaFF3RW52Nm5VdHlqU0dzQUdRb3RKRzJiVEFqUFVueThGSndKU2NxLzAvQ0Q0 NzRFQUEyQ0Q4RDUyNDIxRjMzOTE3NENCRkU4RDc1NkE0NDY4NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCqMNEAwQDsUIgAwQDutjYAwQEuuJgMA0EAgACMAcD BQAoBAUIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDPBzANBgkqhkiG9w0BAQsF AAOCAQEAUr4sptLyYNIxHwZpN5y9Hfb7tMJ0tyj52SA8SelfVLfq/l2w0RDUqwFB 5C0PgNj5po2TOlKcO8NA5lNiwh1mg2nszVHT1toveXIPJ9RP5BCLrswDn1EPwnzc HXPFW6xLorkA8jbFPYsfKOUEr/3NXtYMFs6KZ9sXTGQ8aHOoUG/lgIH4ke0tL+Hb W6xc4BF8cE9JYqsTFVubD3Na0pRlGoWSLU/Vd28dxVfTWutnrnP3QZd35cUVEs9I KH8o8BhRvHdGx24Y+oAX1rOv+a2pKRiWeX/OujHQoXYenVY+2aR+txZJQ0VC6yFA GgPJUzq/TN9Zu7n7DQPdWvl0rVAXIQ== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:35 2024 by rpki-client on console-fra.rpki-client.org