$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.cer File: CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.cer (raw, json) Hash identifier: bPylale2Y3fODkKUSH9o1Y8JSN/2Hnhys1R65dTI0gE= Subject key identifier: CE:8B:3E:AB:C5:F6:A5:A9:F6:C8:BA:E8:DF:C1:C1:27:61:2D:6E:4B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 393E31C698673F8E9F706D2F595FF1E2306F4EAC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.mft caRepository: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 17 Jun 2024 20:09:31 +0000 Certificate not after: Mon 16 Jun 2025 20:14:31 +0000 Subordinate resources: AS: 264517 IP: 132.255.172.0/22 IP: 138.117.164.0/22 IP: 2804:20dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 12:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3e:31:c6:98:67:3f:8e:9f:70:6d:2f:59:5f:f1:e2:30:6f:4e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 17 20:09:31 2024 GMT Not After : Jun 16 20:14:31 2025 GMT Subject: CN=CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:02:ae:6f:0f:1d:1d:aa:63:03:20:f5:b0: 06:78:41:4b:35:38:36:2b:7e:14:4b:61:76:d5:02: 25:09:fb:ce:96:97:27:d4:7e:3b:3d:54:09:c6:16: 1d:6c:35:e3:9c:bd:64:a9:66:10:df:88:1e:5d:c5: f9:10:25:b3:5e:e9:2f:8f:3e:9f:d6:4b:cf:8c:14: db:6d:12:ec:81:6b:9a:dc:cb:c7:6d:2a:4a:bc:a5: d0:a8:48:21:2f:ca:d6:c5:17:e2:08:c8:41:88:ac: 9c:3a:9c:58:63:f7:3e:94:25:7d:bf:d9:8b:03:30: b6:db:02:33:2c:c6:08:62:21:e9:ef:5d:31:82:33: 78:fe:da:a0:4c:24:32:ad:0e:7d:45:3e:6b:73:58: 1a:be:65:cf:3f:2a:9f:5a:71:76:72:e5:69:8c:1b: e5:79:26:2b:91:14:3e:3d:6e:30:b6:79:1a:a1:c2: f0:54:0f:f9:bd:ac:96:84:9c:4c:07:b5:34:cf:bb: 65:53:f1:c4:da:3d:c1:6a:fe:2f:9a:01:01:a9:3d: 69:61:1f:43:b2:62:85:fd:cf:f5:c7:97:eb:13:64: a6:38:b4:53:0f:a0:86:dd:47:c7:f5:fe:a0:13:22: e4:28:90:9a:c0:a6:a3:7a:e0:22:5c:98:7a:6d:99: 65:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:8B:3E:AB:C5:F6:A5:A9:F6:C8:BA:E8:DF:C1:C1:27:61:2D:6E:4B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.172.0/22 138.117.164.0/22 IPv6: 2804:20dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264517 Signature Algorithm: sha256WithRSAEncryption 34:28:a9:31:a6:ac:36:55:a3:1f:9b:95:2c:85:d5:b0:91:a3: 6d:e9:74:64:b3:e7:2b:79:21:15:26:8b:88:30:a4:0c:65:c4: 9a:09:82:15:c5:8c:ba:9d:31:13:39:47:d1:b0:7a:29:a1:ca: c4:65:37:ec:26:66:8d:b6:ad:95:18:a2:bd:e6:db:e1:cf:99: 64:3c:d4:52:43:51:fc:a2:0c:e9:b7:c2:a2:d9:1a:21:6e:20: ce:89:bd:ce:99:80:34:a5:df:7c:57:53:da:69:fd:6e:6a:67: e5:3f:75:b6:a9:62:f4:b8:92:e3:f5:28:71:21:3e:4e:70:76: 00:03:49:db:cc:0f:e5:ad:4f:39:3d:cf:ad:6f:9c:a0:b2:9c: 39:e8:1b:f0:7e:90:76:90:41:15:b2:16:7a:4d:4c:87:e9:7a: 2c:7f:11:7c:b5:f1:c2:46:9b:e9:41:66:3b:6f:00:7a:1c:8c: d6:56:82:84:01:9f:5d:3e:b1:b0:1b:72:66:be:72:14:9e:0a: 87:11:cb:af:35:d0:da:1e:5a:3c:8f:ce:ef:6c:00:2e:5f:92: 01:36:2c:d8:c0:cc:23:cf:6c:13:3f:86:81:d0:5b:64:17:5e: 3c:1a:6e:4b:57:2a:8d:cb:cc:48:e1:50:59:11:7a:c6:3f:98: 4f:9f:66:10 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOT4xxphnP46fcG0vWV/x4jBvTqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA2MTcyMDA5MzFaFw0yNTA2MTYyMDE0MzFaMDMxMTAvBgNV BAMTKENFOEIzRUFCQzVGNkE1QTlGNkM4QkFFOERGQzFDMTI3NjEyRDZFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQSgKubw8dHapjAyD1sAZ4QUs1 ODYrfhRLYXbVAiUJ+86WlyfUfjs9VAnGFh1sNeOcvWSpZhDfiB5dxfkQJbNe6S+P Pp/WS8+MFNttEuyBa5rcy8dtKkq8pdCoSCEvytbFF+IIyEGIrJw6nFhj9z6UJX2/ 2YsDMLbbAjMsxghiIenvXTGCM3j+2qBMJDKtDn1FPmtzWBq+Zc8/Kp9acXZy5WmM G+V5JiuRFD49bjC2eRqhwvBUD/m9rJaEnEwHtTTPu2VT8cTaPcFq/i+aAQGpPWlh H0OyYoX9z/XHl+sTZKY4tFMPoIbdR8f1/qATIuQokJrApqN64CJcmHptmWWzAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOiz6rxfalqfbI uujfwcEnYS1uSzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEdu d1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhlUkwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRH bndYMm1BZ3RZWTNZb3JhZHNGbW9TVlg0bmpmem81ZFRxaG84bWc4ZVJMLzAvQ0U4 QjNFQUJDNUY2QTVBOUY2QzhCQUU4REZDMUMxMjc2MTJENkU0Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQChP+sAwQCinWkMA0EAgACMAcDBQAoBCDcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJRTANBgkqhkiG9w0BAQsFAAOCAQEANCipMaas NlWjH5uVLIXVsJGjbel0ZLPnK3khFSaLiDCkDGXEmgmCFcWMup0xEzlH0bB6KaHK xGU37CZmjbatlRiivebb4c+ZZDzUUkNR/KIM6bfCotkaIW4gzom9zpmANKXffFdT 2mn9bmpn5T91tqli9LiS4/UocSE+TnB2AANJ28wP5a1POT3PrW+coLKcOegb8H6Q dpBBFbIWek1Mh+l6LH8RfLXxwkab6UFmO28AehyM1laChAGfXT6xsBtyZr5yFJ4K hxHLrzXQ2h5aPI/O72wALl+SATYs2MDMI89sEz+GgdBbZBdePBpuS1cqjcvMSOFQ WRF6xj+YT59mEA== -----END CERTIFICATE-----Generated at Mon Jul 1 11:00:49 2024 by rpki-client on console-fra.rpki-client.org