$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer File: D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer (raw, json) Hash identifier: U0ZiLRwwa6HDT1irCARout/cvKxnrtKCjs86IbO2Fyg= Subject key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2CD316614AC974A7979992A1D4F90CBA55245318 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft caRepository: rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 19:00:22 +0000 Certificate not after: Wed 02 Apr 2025 19:05:22 +0000 Subordinate resources: AS: 263900 IP: 138.204.148.0/22 IP: 2804:276c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 12:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d3:16:61:4a:c9:74:a7:97:99:92:a1:d4:f9:0c:ba:55:24:53:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 19:00:22 2024 GMT Not After : Apr 2 19:05:22 2025 GMT Subject: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:1e:a3:36:6d:f2:5a:0c:91:74:7a:7f:d6: 5a:60:31:26:7f:03:c3:ed:aa:8b:47:c7:68:89:df: cd:c3:d3:2f:e5:54:0e:e4:9a:a3:89:a3:1b:ed:e2: a0:b1:35:d0:52:a2:db:ca:56:fa:c5:3a:1b:4c:00: c3:51:ed:bf:e4:83:85:03:21:26:ed:52:09:c9:4f: d2:4d:09:ec:d8:f1:8c:42:f0:3f:15:17:9e:81:1b: 3f:31:cb:a8:fa:cf:67:b1:23:b4:81:e5:90:dc:31: 51:d6:32:c9:fc:3a:01:89:56:90:bd:34:2c:04:94: 17:51:10:d0:4c:98:ae:e2:8f:1f:d5:70:ec:63:cf: 2f:0a:b5:b8:48:db:ca:8b:6f:93:5f:9f:ad:98:01: 51:28:3a:ac:f3:42:d8:db:42:a1:ac:eb:8e:cb:03: 13:33:e9:d6:77:9e:9c:ee:ed:08:44:fa:41:14:11: 38:60:81:d3:41:7d:5a:a9:5a:27:36:59:6d:69:84: bc:82:1f:99:3b:4c:ac:b5:05:d2:d2:5e:45:42:07: 0d:00:5f:44:8f:bd:b4:36:32:01:c7:c5:fc:c6:23: 21:67:05:8c:8a:c4:6f:f7:e0:b6:0b:3f:bc:84:80: d2:38:56:e7:5a:dc:57:0d:0c:d7:9a:34:1d:7c:84: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.148.0/22 IPv6: 2804:276c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263900 Signature Algorithm: sha256WithRSAEncryption a7:e7:98:91:38:5b:f1:a7:0f:89:df:e0:7b:58:7c:34:f3:78: 20:55:3d:dc:d8:f0:c7:ac:37:30:8d:ff:c3:63:d2:8d:18:7d: d0:ae:02:ea:6c:8c:1b:b6:0e:dd:cc:ae:d0:5d:6b:db:30:8a: bb:a0:6a:35:72:35:3b:3f:2b:58:ec:3c:fe:1d:50:93:26:a9: b0:fb:28:83:43:07:fa:3d:fb:95:0e:e1:0e:42:2a:4a:4c:ad: d5:83:3e:6e:a4:9a:ba:61:8f:fc:7f:e0:ff:e2:e9:3d:45:7b: 57:97:d6:39:be:07:45:24:9d:43:63:9f:ef:45:5d:55:ba:8e: 5a:48:20:cf:98:38:aa:e9:27:ab:a5:6e:67:4a:97:ad:4b:a2: b2:8b:06:e9:86:7f:21:d8:72:71:34:c0:b5:a1:12:78:49:37: 95:84:dd:42:99:1d:48:16:24:33:f4:c3:c5:86:84:42:ce:58: ce:31:8c:c1:27:07:f6:60:ac:09:4a:05:c1:b8:7d:e9:5b:56: 82:08:24:84:1b:19:18:2f:f2:c4:27:fa:c2:6f:32:53:da:1f: 88:c8:51:d8:48:0d:c2:79:d7:8a:3c:72:cd:9a:9b:e4:a8:b8: 88:e4:68:b3:0d:80:b5:d5:9b:ba:d3:89:9e:d3:e2:87:14:ce: 0a:19:68:bb -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULNMWYUrJdKeXmZKh1PkMulUkUxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxOTAwMjJaFw0yNTA0MDIxOTA1MjJaMDMxMTAvBgNV BAMTKEQxMDhBNkE0OThCMzgzOUI0RjNGODA1QUNDQUU5MzRGOENGNzlEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyh6jNm3yWgyRdHp/1lpgMSZ/ A8PtqotHx2iJ383D0y/lVA7kmqOJoxvt4qCxNdBSotvKVvrFOhtMAMNR7b/kg4UD ISbtUgnJT9JNCezY8YxC8D8VF56BGz8xy6j6z2exI7SB5ZDcMVHWMsn8OgGJVpC9 NCwElBdRENBMmK7ijx/VcOxjzy8KtbhI28qLb5Nfn62YAVEoOqzzQtjbQqGs647L AxMz6dZ3npzu7QhE+kEUEThggdNBfVqpWic2WW1phLyCH5k7TKy1BdLSXkVCBw0A X0SPvbQ2MgHHxfzGIyFnBYyKxG/34LYLP7yEgNI4Vuda3FcNDNeaNB18hCJ/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRCKakmLODm08/ gFrMrpNPjPedkDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlJS TVJacDd6Q1hNVVZVWlNXTnJzM3FzUG9QM2I3WE55QzlSanFtanY1dXovMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZS Uk1SWnA3ekNYTVVWVVpTV05yczNxc1BvUDNiN1hOeUM5UmpxbWp2NXV6LzIvRDEw OEE2QTQ5OEIzODM5QjRGM0Y4MDVBQ0NBRTkzNEY4Q0Y3OUQ5MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCisyUMA0EAgACMAcDBQAoBCdsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQG3DANBgkqhkiG9w0BAQsFAAOCAQEAp+eYkThb8acPid/g e1h8NPN4IFU93Njwx6w3MI3/w2PSjRh90K4C6myMG7YO3cyu0F1r2zCKu6BqNXI1 Oz8rWOw8/h1QkyapsPsog0MH+j37lQ7hDkIqSkyt1YM+bqSaumGP/H/g/+LpPUV7 V5fWOb4HRSSdQ2Of70VdVbqOWkggz5g4quknq6VuZ0qXrUuisosG6YZ/IdhycTTA taESeEk3lYTdQpkdSBYkM/TDxYaEQs5YzjGMwScH9mCsCUoFwbh96VtWgggkhBsZ GC/yxCf6wm8yU9ofiMhR2EgNwnnXijxyzZqb5Ki4iORosw2AtdWbutOJntPihxTO Chlouw== -----END CERTIFICATE-----Generated at Mon Jul 1 11:00:50 2024 by rpki-client on console-fra.rpki-client.org