$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.cer File: D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.cer (raw, json) Hash identifier: YmwNJH+BCtobeWOdrzTyc1FDCZRnF4/6R9jKizeADlQ= Subject key identifier: D3:A7:41:0A:F5:39:DF:60:1C:7D:31:EF:DD:CE:90:F6:D1:1D:3D:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 070B310F8B55DB116BF46B6045CEF77ED6BDFC53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.mft caRepository: rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 25 Apr 2024 20:13:52 +0000 Certificate not after: Thu 24 Apr 2025 20:18:52 +0000 Subordinate resources: AS: 271310 IP: 177.53.208.0/22 IP: 2804:7984::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:0b:31:0f:8b:55:db:11:6b:f4:6b:60:45:ce:f7:7e:d6:bd:fc:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 25 20:13:52 2024 GMT Not After : Apr 24 20:18:52 2025 GMT Subject: CN=D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:76:1d:26:00:05:7d:b9:20:43:e4:78:0b:96: 48:21:96:a2:8a:02:66:c6:66:74:58:b7:35:dc:50: 08:b3:49:8b:34:2c:9d:e2:e3:5e:c5:a6:1a:b6:19: 8c:e8:56:e8:bb:db:df:a0:7a:8f:34:96:10:e1:3e: 1a:b9:a9:4b:1a:34:91:7a:49:68:1d:49:ce:c7:a5: db:0d:87:bc:50:d6:21:47:a3:68:63:21:ff:a8:1a: 74:49:d4:36:28:9e:ea:bd:4d:dd:10:77:f3:03:73: 98:cc:3c:61:0c:2e:52:e0:5d:d3:af:c0:29:c0:d8: 1b:b8:2f:2d:82:67:32:2b:f2:32:22:99:70:35:d6: 82:41:bf:52:be:6f:27:08:eb:92:3d:df:67:7e:e7: 6e:44:0d:f3:55:56:a8:0f:01:10:8f:e3:c3:4c:2b: 41:b9:37:a3:4d:e7:42:e4:68:f1:45:bd:fa:9b:bc: b8:4d:85:38:b7:63:80:a9:61:0a:d1:94:49:4e:81: 78:d3:03:ef:d3:c4:22:43:cd:75:49:27:31:69:ef: b9:d5:4e:c7:a8:55:29:ed:97:a7:d2:26:3e:ac:76: ce:e0:a9:74:c9:20:ba:22:ef:b5:c5:ed:00:aa:2a: 40:a7:36:74:d4:ed:b8:04:27:6e:db:1b:aa:04:1f: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:A7:41:0A:F5:39:DF:60:1C:7D:31:EF:DD:CE:90:F6:D1:1D:3D:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/1/D3A7410AF539DF601C7D31EFDDCE90F6D11D3D1D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.53.208.0/22 IPv6: 2804:7984::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271310 Signature Algorithm: sha256WithRSAEncryption 10:44:22:56:77:cc:54:a2:dd:e5:e0:4d:89:16:d2:76:2f:8b: e1:42:01:e9:44:da:6b:23:7f:ea:62:40:46:75:98:46:b4:35: b6:71:23:a3:fb:51:f9:ab:fd:e4:52:56:46:46:df:1f:b3:5f: ee:ef:2e:37:b1:24:f6:36:a7:0b:38:1e:f8:27:d1:66:cd:2b: c0:7f:20:59:93:73:4e:2e:4f:e4:40:e8:00:1b:21:dd:05:a8: 63:e4:b5:65:6b:3b:c7:1f:1b:0a:15:94:76:cd:64:60:c2:2c: 51:ba:6c:6d:9f:62:61:56:06:cf:f2:36:48:d4:93:87:18:f8: 56:0c:cd:70:af:98:8d:d9:9c:0e:1e:fb:0f:80:93:3c:56:ce: 7d:a0:7a:6f:23:82:da:2c:8d:1b:fa:61:62:c5:e4:66:84:6e: 2f:51:ac:95:b7:53:b9:98:29:7e:2e:c0:02:10:c5:ac:9d:4b: 46:be:4f:b5:1a:cc:bd:cc:f4:2f:dc:07:ad:35:4c:ba:33:98: 10:1e:39:2f:fd:76:68:9a:63:df:3a:7b:52:2d:ef:69:0d:ab: a4:72:36:d3:ca:d1:68:7e:e4:a7:73:04:e2:7d:cb:78:c8:72: fe:3c:83:8f:0b:67:79:1e:25:6e:f7:4e:72:05:b8:3a:fd:13: d3:af:f4:ac -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBwsxD4tV2xFr9GtgRc73fta9/FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjUyMDEzNTJaFw0yNTA0MjQyMDE4NTJaMDMxMTAvBgNV BAMTKEQzQTc0MTBBRjUzOURGNjAxQzdEMzFFRkREQ0U5MEY2RDExRDNEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJdh0mAAV9uSBD5HgLlkghlqKK AmbGZnRYtzXcUAizSYs0LJ3i417Fphq2GYzoVui729+geo80lhDhPhq5qUsaNJF6 SWgdSc7HpdsNh7xQ1iFHo2hjIf+oGnRJ1DYonuq9Td0Qd/MDc5jMPGEMLlLgXdOv wCnA2Bu4Ly2CZzIr8jIimXA11oJBv1K+bycI65I932d+525EDfNVVqgPARCP48NM K0G5N6NN50LkaPFFvfqbvLhNhTi3Y4CpYQrRlElOgXjTA+/TxCJDzXVJJzFp77nV TseoVSntl6fSJj6sds7gqXTJILoi77XF7QCqKkCnNnTU7bgEJ27bG6oEH3JZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTp0EK9TnfYBx9 Me/dzpD20R09HTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXZ5 VXp1TTJWMWNyb3d3Ulp3RUVLaUdEZG9mVzdXUUd5eXRiZTUzb01xd1cvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl2 eVV6dU0yVjFjcm93d1Jad0VFS2lHRGRvZlc3V1FHeXl0YmU1M29NcXdXLzEvRDNB NzQxMEFGNTM5REY2MDFDN0QzMUVGRERDRTkwRjZEMTFEM0QxRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsTXQMA0EAgACMAcDBQAoBHmEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjzjANBgkqhkiG9w0BAQsFAAOCAQEAEEQiVnfMVKLd5eBN iRbSdi+L4UIB6UTaayN/6mJARnWYRrQ1tnEjo/tR+av95FJWRkbfH7Nf7u8uN7Ek 9janCzge+CfRZs0rwH8gWZNzTi5P5EDoABsh3QWoY+S1ZWs7xx8bChWUds1kYMIs UbpsbZ9iYVYGz/I2SNSThxj4VgzNcK+YjdmcDh77D4CTPFbOfaB6byOC2iyNG/ph YsXkZoRuL1GslbdTuZgpfi7AAhDFrJ1LRr5PtRrMvcz0L9wHrTVMujOYEB45L/12 aJpj3zp7Ui3vaQ2rpHI208rRaH7kp3ME4n3LeMhy/jyDjwtneR4lbvdOcgW4Ov0T 06/0rA== -----END CERTIFICATE-----Generated at Sun Jun 2 00:29:25 2024 by rpki-client on console-ams.rpki-client.org