$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer File: D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer (raw, json) Hash identifier: pBPcMvMPZNmwx01b6AhnBx81nvSaOQVBJAhwgiwTz8o= Subject key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A61DF7F570FCFF66C00EAEF946B4EC8A9DB935D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft caRepository: rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 23:52:33 +0000 Certificate not after: Wed 02 Apr 2025 23:57:33 +0000 Subordinate resources: AS: 271641 IP: 200.194.188.0/22 IP: 2804:7eb0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 02:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:61:df:7f:57:0f:cf:f6:6c:00:ea:ef:94:6b:4e:c8:a9:db:93:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 23:52:33 2024 GMT Not After : Apr 2 23:57:33 2025 GMT Subject: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:f3:a0:cb:dd:17:53:85:aa:90:9f:d6:f5: 4a:b4:84:59:ff:11:62:54:a0:05:89:f9:ef:7d:06: 75:9a:0f:85:b6:80:73:ec:fb:18:55:03:24:98:88: 04:3a:a1:68:f9:90:4f:57:fd:1f:3f:f2:ad:7c:c6: c3:81:13:f8:5a:3b:0d:1d:07:bd:01:d6:38:4c:58: 30:5e:15:43:c6:6d:d2:32:0c:a9:f8:4b:fd:66:13: 8c:8f:2d:10:02:89:f1:8c:c5:19:e0:13:bc:4c:e6: ab:fd:49:31:db:21:c7:f2:9e:eb:a5:08:46:96:fe: 97:97:a6:8d:d5:f2:61:c3:59:58:30:36:ac:d0:45: 1a:2c:57:8b:ae:9a:11:da:38:8f:dc:bf:31:9f:f5: cf:25:01:e3:6c:44:7c:f9:e0:d0:cb:95:8f:8f:b2: 5d:f2:f5:8d:7b:cb:ea:2f:81:6e:53:68:e9:34:21: a8:e9:f9:fd:af:50:3b:10:4f:f0:c3:a9:99:4c:b4: 99:88:20:af:ad:3a:2d:9d:07:9b:80:76:25:17:c7: 6f:9d:99:ea:f7:54:0f:ab:77:5c:90:4c:ca:f1:7f: 59:04:4a:f7:51:d9:51:36:fa:86:fa:63:cc:61:bf: 20:d1:fa:ee:61:ed:b0:36:e8:12:bb:06:1f:90:47: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.194.188.0/22 IPv6: 2804:7eb0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271641 Signature Algorithm: sha256WithRSAEncryption a3:01:04:0d:38:5f:47:5d:31:98:ea:97:b8:bf:c9:6a:a8:34: bd:51:5b:31:4d:ed:5e:fe:be:ce:53:c6:22:44:bb:81:7d:6b: d9:06:b3:e2:b4:5b:77:21:14:9b:88:e6:19:67:e6:4c:3c:32: 7e:64:b8:51:85:de:64:9e:42:dd:11:21:da:72:82:f5:58:9e: e3:9b:24:73:c4:ac:3b:f9:73:fb:4d:06:87:b2:d7:f8:48:f1: c8:62:1e:fa:4d:7c:e8:61:72:d3:75:ea:ec:77:ac:30:df:7d: f0:b4:91:9a:8f:70:45:b1:04:34:73:a9:d8:bb:f2:56:ff:c2: 04:ed:ef:65:05:c9:2b:fb:06:0a:f6:c8:e5:0c:ed:ab:72:63: 02:f6:12:a9:77:dd:de:d0:a3:66:fe:ba:aa:3a:36:7a:aa:20: 22:5b:79:d1:31:a6:4b:a9:95:0e:53:6b:d2:cd:4d:6e:60:0f: 10:a3:a4:67:1b:6e:2a:ac:b1:f8:89:88:e1:41:d8:c8:89:da: 14:f6:e7:9b:3d:32:79:45:5d:70:23:ba:9e:2a:fa:55:59:99: 54:01:32:57:b8:2c:61:87:16:30:a0:d5:7d:67:71:35:f0:b0: 75:d6:dc:fc:7a:c0:5d:50:2c:0e:30:88:61:53:78:d0:38:9d: 78:41:1f:5b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWmHff1cPz/ZsAOrvlGtOyKnbk10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMzUyMzNaFw0yNTA0MDIyMzU3MzNaMDMxMTAvBgNV BAMTKEQzOURBRkVGRTVCM0M4NzBGOUUxQThCREFFOTI0RTI5RUYxQTk5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4bPOgy90XU4WqkJ/W9Uq0hFn/ EWJUoAWJ+e99BnWaD4W2gHPs+xhVAySYiAQ6oWj5kE9X/R8/8q18xsOBE/haOw0d B70B1jhMWDBeFUPGbdIyDKn4S/1mE4yPLRACifGMxRngE7xM5qv9STHbIcfynuul CEaW/peXpo3V8mHDWVgwNqzQRRosV4uumhHaOI/cvzGf9c8lAeNsRHz54NDLlY+P sl3y9Y17y+ovgW5TaOk0Iajp+f2vUDsQT/DDqZlMtJmIIK+tOi2dB5uAdiUXx2+d mer3VA+rd1yQTMrxf1kESvdR2VE2+ob6Y8xhvyDR+u5h7bA26BK7Bh+QR1q1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTna/v5bPIcPnh qL2ukk4p7xqZHTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1J0 aHlNTkNGd29yY0hXQ3ZFd3o1QUZ1aUVqd1J6YnJEOURqbVNmZWZaNVMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdS dGh5TU5DRndvcmNIV0N2RXd6NUFGdWlFandSemJyRDlEam1TZmVmWjVTLzEvRDM5 REFGRUZFNUIzQzg3MEY5RTFBOEJEQUU5MjRFMjlFRjFBOTkxRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyMK8MA0EAgACMAcDBQAoBH6wMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQlGTANBgkqhkiG9w0BAQsFAAOCAQEAowEEDThfR10xmOqX uL/Jaqg0vVFbMU3tXv6+zlPGIkS7gX1r2Qaz4rRbdyEUm4jmGWfmTDwyfmS4UYXe ZJ5C3REh2nKC9Vie45skc8SsO/lz+00Gh7LX+EjxyGIe+k186GFy03Xq7HesMN99 8LSRmo9wRbEENHOp2LvyVv/CBO3vZQXJK/sGCvbI5Qztq3JjAvYSqXfd3tCjZv66 qjo2eqogIlt50TGmS6mVDlNr0s1NbmAPEKOkZxtuKqyx+ImI4UHYyInaFPbnmz0y eUVdcCO6nir6VVmZVAEyV7gsYYcWMKDVfWdxNfCwddbc/HrAXVAsDjCIYVN40Did eEEfWw== -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:41 2024 by rpki-client on console-fra.rpki-client.org