$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer File: D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer (raw, json) Hash identifier: Y5EUbjDAMT7qDhHTf1jbUidYqA6qUA8s3rJorxjTAQ0= Subject key identifier: D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7FA7246F94F0F71C2A9890600BA7A1FE90D9BBB3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.mft caRepository: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 23:57:20 +0000 Certificate not after: Thu 03 Apr 2025 00:02:20 +0000 Subordinate resources: AS: 268746 IP: 45.171.228.0/22 IP: 2804:5a10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a7:24:6f:94:f0:f7:1c:2a:98:90:60:0b:a7:a1:fe:90:d9:bb:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 23:57:20 2024 GMT Not After : Apr 3 00:02:20 2025 GMT Subject: CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:0b:43:65:1d:53:c0:f7:a2:f3:ff:56:be: 7d:29:28:94:d4:f5:92:0b:93:f4:76:03:9d:c0:ad: 03:65:34:09:13:0a:7b:ca:2f:6d:28:bd:41:60:33: 28:3f:cc:72:d2:21:24:b7:7a:c8:a4:0b:49:2e:ba: 9e:3c:1f:97:0f:f1:17:31:be:c1:cc:bb:fc:40:78: c8:f6:f9:ab:c3:7c:06:47:b1:f3:d7:0c:15:8f:91: f3:29:a7:8f:24:1f:59:d3:33:2d:36:95:a7:2a:fd: c8:13:61:7a:79:c0:3f:7f:c6:45:04:37:4f:d7:36: 72:85:4d:7b:a7:d3:7f:63:e4:30:42:a2:9d:4c:16: 48:8d:6f:6e:92:92:91:35:0d:46:8d:32:b3:57:95: fa:93:13:44:5b:3a:63:f2:74:82:53:de:03:8b:b7: cf:09:ca:13:a9:ab:c2:6c:2a:fa:df:d6:4c:10:ea: e0:9c:30:eb:e8:af:51:63:e6:f4:28:6d:e4:a1:fe: f2:1d:20:cc:43:68:1f:00:b7:81:99:34:e3:d3:de: 6f:78:66:08:26:48:f6:c3:4a:53:94:1f:86:ea:73: 90:2f:80:e3:1d:26:5d:b1:90:55:da:82:28:b5:97: cd:32:8b:ac:24:e8:fb:ee:16:a4:32:44:e3:57:bd: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.228.0/22 IPv6: 2804:5a10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268746 Signature Algorithm: sha256WithRSAEncryption 8a:ea:28:d3:4e:57:fc:ad:d5:15:cc:53:ca:6f:e9:63:7a:75: 33:4b:52:f6:5c:da:6d:fe:78:f2:59:a0:15:dd:d0:0e:5c:88: 71:cd:03:66:46:20:e1:e8:f8:d6:b0:54:dc:96:d8:7e:67:fe: 49:d4:05:7d:8f:b3:d3:9b:a2:63:24:87:eb:74:8d:f5:3b:71: 10:91:d4:44:2a:91:ed:9d:29:16:7c:54:e9:45:3b:82:f4:3a: 16:d1:ec:25:6e:dd:17:ee:67:1f:86:c8:c6:25:19:42:e0:99: 81:88:b4:49:a6:74:ac:08:15:af:a3:4f:cd:66:04:74:82:f5: 58:e9:ce:cd:49:e8:07:4d:37:26:a2:ea:7a:24:02:e0:15:0a: df:a7:b3:74:99:47:2b:1b:5f:87:d8:67:f9:4e:a9:14:f0:1c: eb:fc:f3:40:5a:f8:45:e5:28:92:cf:65:c9:13:30:28:40:51: 36:ac:0b:d8:af:5f:d3:d1:91:6c:83:b8:24:b6:a1:7e:8a:f7: 96:40:c4:f2:89:73:ee:1c:17:0a:88:bc:3e:1f:06:60:a5:8e: 8e:52:ff:4a:ef:9b:f8:49:7d:e7:5d:01:53:30:45:7b:7a:d2: 68:58:6f:99:3b:48:69:ad:95:a5:05:57:a8:59:b9:4c:8f:59: 70:27:29:58 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUf6ckb5Tw9xwqmJBgC6eh/pDZu7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMzU3MjBaFw0yNTA0MDMwMDAyMjBaMDMxMTAvBgNV BAMTKEQxRUMwQTE1N0U0NzQ1QzZFMkM0QUNDRTk2QzBBOTJFREU5RjhCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqAtDZR1TwPei8/9Wvn0pKJTU 9ZILk/R2A53ArQNlNAkTCnvKL20ovUFgMyg/zHLSISS3esikC0kuup48H5cP8Rcx vsHMu/xAeMj2+avDfAZHsfPXDBWPkfMpp48kH1nTMy02lacq/cgTYXp5wD9/xkUE N0/XNnKFTXun039j5DBCop1MFkiNb26SkpE1DUaNMrNXlfqTE0RbOmPydIJT3gOL t88JyhOpq8JsKvrf1kwQ6uCcMOvor1Fj5vQobeSh/vIdIMxDaB8At4GZNOPT3m94 ZggmSPbDSlOUH4bqc5AvgOMdJl2xkFXagii1l80yi6wk6PvuFqQyRONXvSErAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTR7AoVfkdFxuLE rM6WwKku3p+LRzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vc1Fv VlhEM3Z3UGhIRVRmRG0zUjZaM0twRUZlVk44RldwbndhcGlBS0N5cy8xLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vc1Fv VlhEM3Z3UGhIRVRmRG0zUjZaM0twRUZlVk44RldwbndhcGlBS0N5cy8xL0QxRUMw QTE1N0U0NzQ1QzZFMkM0QUNDRTk2QzBBOTJFREU5RjhCNDcubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAi2r5DANBAIAAjAHAwUAKARaEDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEGcowDQYJKoZIhvcNAQELBQADggEBAIrqKNNOV/yt1RXMU8pv 6WN6dTNLUvZc2m3+ePJZoBXd0A5ciHHNA2ZGIOHo+NawVNyW2H5n/knUBX2Ps9Ob omMkh+t0jfU7cRCR1EQqke2dKRZ8VOlFO4L0OhbR7CVu3RfuZx+GyMYlGULgmYGI tEmmdKwIFa+jT81mBHSC9Vjpzs1J6AdNNyai6nokAuAVCt+ns3SZRysbX4fYZ/lO qRTwHOv880Ba+EXlKJLPZckTMChAUTasC9ivX9PRkWyDuCS2oX6K95ZAxPKJc+4c FwqIvD4fBmCljo5S/0rvm/hJfeddAVMwRXt60mhYb5k7SGmtlaUFV6hZuUyPWXAn KVg= -----END CERTIFICATE-----Generated at Sat Nov 23 00:06:34 2024 by rpki-client on console-ams.rpki-client.org