$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer File: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer (raw, json) Hash identifier: AXs4x+5i1POL5wQiWT+AbxIFidwBtYoWp0sw0I93QXk= Subject key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7AEF4CE4A4FC2454B746F00B0AA4527E61FFAF42 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft caRepository: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 13:03:41 +0000 Certificate not after: Thu 03 Apr 2025 13:08:41 +0000 Subordinate resources: AS: 265078 IP: 170.233.112.0/22 IP: 2804:3270::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 05:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ef:4c:e4:a4:fc:24:54:b7:46:f0:0b:0a:a4:52:7e:61:ff:af:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 13:03:41 2024 GMT Not After : Apr 3 13:08:41 2025 GMT Subject: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:6d:6b:7b:e6:01:0a:58:3b:1b:b6:07:e6: 3a:67:4a:41:5a:f5:80:9d:5d:63:23:e8:2f:4b:43: 4e:41:77:cc:8e:a8:31:8a:01:2d:e8:13:d7:4b:dd: e1:f0:5a:e9:96:0f:ec:3a:5e:28:9b:81:d3:ae:75: a4:ef:8f:92:78:2c:0e:01:b2:22:8b:c5:6e:da:3a: e4:11:d4:2b:92:22:88:da:eb:4e:68:2b:f9:14:e5: 18:64:ad:3b:b7:fb:72:18:72:77:b8:22:8a:b9:1b: c7:8b:61:e4:06:0c:cb:02:09:7a:6b:10:d2:dc:79: 7c:73:c5:de:31:a5:11:be:27:63:73:28:70:1c:29: c9:e6:48:68:0e:e3:52:e6:71:f3:8b:04:71:bc:9a: d2:74:e9:f0:9b:ec:4a:b4:22:fe:a2:4b:ee:0c:20: e2:06:0c:eb:a7:9c:6e:da:f9:26:37:01:14:70:d0: 79:b4:aa:ee:d7:10:80:e8:0c:27:d2:3d:06:18:fe: 0a:56:8a:30:fc:03:a4:96:c1:e1:34:be:dd:25:47: 31:f0:3d:a5:a4:c4:09:b1:ec:86:f0:4e:4f:51:fd: bb:12:ae:a0:ba:35:48:f2:0d:7e:0e:51:85:e7:be: 7a:bf:52:6a:31:00:24:09:0b:31:9b:fc:71:75:79: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.112.0/22 IPv6: 2804:3270::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265078 Signature Algorithm: sha256WithRSAEncryption 4a:5b:e5:b8:f3:94:6e:93:b8:96:e7:bc:1a:a8:95:cd:56:6f: bf:df:e2:36:23:16:d5:28:74:4a:5b:4c:c3:38:39:a6:4a:1c: 04:30:2f:4e:13:9c:42:7c:d8:3c:b3:f1:59:12:1f:2d:e0:94: a1:ac:fa:ed:8b:a3:bb:ef:84:ba:10:74:f7:cc:b3:12:ea:d6: 0a:94:b4:98:f8:39:a3:7a:d8:a9:94:b7:c8:36:5d:ee:c7:a1: ce:84:ea:3a:ac:02:23:3d:7b:c2:67:46:ba:64:37:26:a4:98: 6a:d4:23:22:14:dd:8a:20:3c:ab:62:ba:62:4d:82:d8:e2:45: e9:c0:7b:4f:1d:4c:d6:48:90:b2:39:3f:88:f7:46:fa:70:88: d5:d2:86:48:90:7d:ab:18:03:59:fc:06:fb:c8:9c:b0:b1:38: 11:b5:2b:f1:bb:e9:2b:98:0f:4d:27:25:e5:0f:3b:5c:33:2e: bf:86:ee:15:86:ca:cb:c3:d8:9a:bf:db:f2:e3:2c:4c:7d:1a: aa:e1:e3:a3:ee:39:7f:56:28:44:71:6a:70:fe:09:fc:d4:70: 9b:64:01:ba:a7:24:58:b5:ab:2c:ba:ff:d2:65:9d:5e:8e:bb: 9b:92:39:ae:3b:2b:a7:3e:fe:7f:54:47:d5:99:c8:73:58:64: 46:3a:62:d3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUeu9M5KT8JFS3RvALCqRSfmH/r0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMzAzNDFaFw0yNTA0MDMxMzA4NDFaMDMxMTAvBgNV BAMTKENFOUU3RDRGQjY2NEUzQ0YyRkM5MEU5NjA0RkFFMTk4QTFBMzAyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmm1re+YBClg7G7YH5jpnSkFa 9YCdXWMj6C9LQ05Bd8yOqDGKAS3oE9dL3eHwWumWD+w6XiibgdOudaTvj5J4LA4B siKLxW7aOuQR1CuSIoja605oK/kU5RhkrTu3+3IYcne4Ioq5G8eLYeQGDMsCCXpr ENLceXxzxd4xpRG+J2NzKHAcKcnmSGgO41LmcfOLBHG8mtJ06fCb7Eq0Iv6iS+4M IOIGDOunnG7a+SY3ARRw0Hm0qu7XEIDoDCfSPQYY/gpWijD8A6SWweE0vt0lRzHw PaWkxAmx7IbwTk9R/bsSrqC6NUjyDX4OUYXnvnq/UmoxACQJCzGb/HF1ed8HAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOnn1PtmTjzy/J DpYE+uGYoaMCsjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDZi NXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdzVHYvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q2 YjV0ZEZLeU40NXczaXBka2RSQTdIV0p5RnU0Rm9FaGNVbllSUDVXc1R2LzEvQ0U5 RTdENEZCNjY0RTNDRjJGQzkwRTk2MDRGQUUxOThBMUEzMDJCMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqulwMA0EAgACMAcDBQAoBDJwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLdjANBgkqhkiG9w0BAQsFAAOCAQEASlvluPOUbpO4lue8 GqiVzVZvv9/iNiMW1Sh0SltMwzg5pkocBDAvThOcQnzYPLPxWRIfLeCUoaz67Yuj u++EuhB098yzEurWCpS0mPg5o3rYqZS3yDZd7sehzoTqOqwCIz17wmdGumQ3JqSY atQjIhTdiiA8q2K6Yk2C2OJF6cB7Tx1M1kiQsjk/iPdG+nCI1dKGSJB9qxgDWfwG +8icsLE4EbUr8bvpK5gPTScl5Q87XDMuv4buFYbKy8PYmr/b8uMsTH0aquHjo+45 f1YoRHFqcP4J/NRwm2QBuqckWLWrLLr/0mWdXo67m5I5rjsrpz7+f1RH1ZnIc1hk Rjpi0w== -----END CERTIFICATE-----Generated at Tue Jun 18 07:41:11 2024 by rpki-client on console-ams.rpki-client.org