$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D17CD76D646C5E120D6691B8AAA433295A71EB1E.cer File: D17CD76D646C5E120D6691B8AAA433295A71EB1E.cer (raw, json) Hash identifier: wvZpU/B+PIkFDED6TSNaRT3ix5OiFbd9JwOFqeRzZ0I= Subject key identifier: D1:7C:D7:6D:64:6C:5E:12:0D:66:91:B8:AA:A4:33:29:5A:71:EB:1E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5413D9E66784048F257755FE6C71F3D0A4509BF0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/1/D17CD76D646C5E120D6691B8AAA433295A71EB1E.mft caRepository: rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 12:12:23 +0000 Certificate not after: Thu 03 Apr 2025 12:17:23 +0000 Subordinate resources: AS: 272530 IP: 2804:82a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:13:d9:e6:67:84:04:8f:25:77:55:fe:6c:71:f3:d0:a4:50:9b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 12:12:23 2024 GMT Not After : Apr 3 12:17:23 2025 GMT Subject: CN=D17CD76D646C5E120D6691B8AAA433295A71EB1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:65:cc:72:95:c4:5b:f1:1c:34:62:c4:0b:0b: ad:af:b9:9c:bb:31:12:e1:f9:9c:8b:f0:94:c5:b6: 61:71:5c:ea:fc:15:5e:81:a9:2f:53:89:90:47:8d: b3:15:e8:a4:b5:30:eb:d7:05:b7:bc:46:9a:43:11: 4e:1a:e3:ad:0b:04:02:4a:51:3d:70:69:7b:2e:4f: 5b:34:b2:cb:d5:88:fa:6e:e8:43:19:a8:e3:44:02: 13:42:f9:32:5a:cd:82:98:0b:5a:40:02:1e:a0:1c: 1d:cb:16:b7:55:09:04:a5:f1:58:eb:a8:19:43:4a: aa:a7:c9:39:50:dd:1c:84:f5:8a:39:55:19:5d:b3: 7e:82:d7:44:5f:97:bf:80:5c:c5:a9:b5:4b:35:3e: 93:80:f0:f9:8a:c1:19:99:2a:5e:f3:50:09:08:94: 86:32:a0:ec:19:e8:5a:6d:51:36:f0:77:6b:7b:b0: 85:94:62:67:5f:76:96:ca:da:78:ae:54:93:9a:ec: 45:84:8e:b8:5d:e5:5e:71:16:e9:4c:36:29:f3:e3: 63:4f:3c:38:b3:31:78:be:93:b7:a8:24:f7:68:92: 8c:cd:3e:1b:3d:15:b6:67:18:bf:76:b4:40:a3:3a: b8:bc:89:b1:cc:d7:e7:58:70:f2:59:ce:51:b7:37: 99:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:7C:D7:6D:64:6C:5E:12:0D:66:91:B8:AA:A4:33:29:5A:71:EB:1E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/1/D17CD76D646C5E120D6691B8AAA433295A71EB1E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:82a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272530 Signature Algorithm: sha256WithRSAEncryption 96:bd:94:56:7d:d1:fc:4c:7d:3f:a7:47:b2:2b:56:b6:67:c3: 41:6c:6a:89:4a:1d:d5:8b:ad:e8:d7:aa:92:27:bd:2a:87:d0: df:89:06:1c:d1:42:91:82:2b:fa:69:c7:eb:46:99:40:2b:33: f8:53:2b:c0:4d:71:f1:8d:a6:da:c4:6c:c6:05:66:5d:93:83: 67:13:fa:d9:b8:aa:71:e4:04:56:71:cb:ae:30:4c:36:b6:34: 5a:eb:e1:ef:65:9f:ba:92:6a:c5:15:a1:25:85:5b:f4:fc:e0: bd:39:81:65:97:c8:e2:88:e4:b8:04:f9:a3:f1:69:85:f2:86: f2:c5:f1:1f:87:00:73:39:1d:87:ad:fa:fe:7a:48:e1:6d:58: 27:73:1d:cf:8a:80:fa:ec:cf:eb:2a:2a:40:29:f7:ec:ea:65: 20:48:f8:b0:72:2c:de:2d:12:3c:bf:47:99:4f:55:58:fe:f3: 51:0a:fe:97:a1:ac:be:bf:56:cb:38:72:ed:d5:bd:bd:eb:71: 44:44:65:98:ef:e7:02:96:8d:b3:55:54:9d:1b:2e:3b:21:3e: f3:91:7f:d2:f8:de:a5:c7:dd:a7:06:b1:a4:37:14:ac:67:4f: 15:dc:9d:83:69:e9:6c:cb:df:b0:86:71:1e:2d:d4:00:ef:c0: e1:ce:6c:df -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUVBPZ5meEBI8ld1X+bHHz0KRQm/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMjEyMjNaFw0yNTA0MDMxMjE3MjNaMDMxMTAvBgNV BAMTKEQxN0NENzZENjQ2QzVFMTIwRDY2OTFCOEFBQTQzMzI5NUE3MUVCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZcxylcRb8Rw0YsQLC62vuZy7 MRLh+ZyL8JTFtmFxXOr8FV6BqS9TiZBHjbMV6KS1MOvXBbe8RppDEU4a460LBAJK UT1waXsuT1s0ssvViPpu6EMZqONEAhNC+TJazYKYC1pAAh6gHB3LFrdVCQSl8Vjr qBlDSqqnyTlQ3RyE9Yo5VRlds36C10Rfl7+AXMWptUs1PpOA8PmKwRmZKl7zUAkI lIYyoOwZ6FptUTbwd2t7sIWUYmdfdpbK2niuVJOa7EWEjrhd5V5xFulMNinz42NP PDizMXi+k7eoJPdokozNPhs9FbZnGL92tECjOri8ibHM1+dYcPJZzlG3N5mFAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRfNdtZGxeEg1m kbiqpDMpWnHrHjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1Zv ZU1DTVFCZGdMTVFOejlja0VtdnlEVlJiQjkyc2dFMmZ2dExHd1lqZmQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NW b2VNQ01RQmRnTE1RTno5Y2tFbXZ5RFZSYkI5MnNnRTJmdnRMR3dZamZkLzEvRDE3 Q0Q3NkQ2NDZDNUUxMjBENjY5MUI4QUFBNDMzMjk1QTcxRUIxRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASCoDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KJIwDQYJKoZIhvcNAQELBQADggEBAJa9lFZ90fxMfT+nR7IrVrZnw0FsaolKHdWL rejXqpInvSqH0N+JBhzRQpGCK/ppx+tGmUArM/hTK8BNcfGNptrEbMYFZl2Tg2cT +tm4qnHkBFZxy64wTDa2NFrr4e9ln7qSasUVoSWFW/T84L05gWWXyOKI5LgE+aPx aYXyhvLF8R+HAHM5HYet+v56SOFtWCdzHc+KgPrsz+sqKkAp9+zqZSBI+LByLN4t Ejy/R5lPVVj+81EK/pehrL6/Vss4cu3Vvb3rcUREZZjv5wKWjbNVVJ0bLjshPvOR f9L43qXH3acGsaQ3FKxnTxXcnYNp6WzL37CGcR4t1ADvwOHObN8= -----END CERTIFICATE-----Generated at Sun Jun 2 00:29:25 2024 by rpki-client on console-ams.rpki-client.org