$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer File: D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer (raw, json) Hash identifier: TUbbrEYq2vsknUIjKvcGPFgVReKZKZjujtC6uwNVMII= Subject key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D99E2BDFF58EFD7DE1B5800DC7F167FDAFF7567 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft caRepository: rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 27 May 2024 21:45:54 +0000 Certificate not after: Mon 26 May 2025 21:50:54 +0000 Subordinate resources: AS: 265010 IP: 170.84.100.0/22 IP: 2804:3160::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 00:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:99:e2:bd:ff:58:ef:d7:de:1b:58:00:dc:7f:16:7f:da:ff:75:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 27 21:45:54 2024 GMT Not After : May 26 21:50:54 2025 GMT Subject: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:03:40:91:69:01:07:e5:69:0d:e4:b0:62: 0e:cb:5f:b6:79:92:e6:b4:b6:63:fb:0a:4d:73:44: 57:57:21:a8:0f:2e:ba:72:b1:de:d5:e0:21:83:56: 5d:75:26:ad:88:fd:70:12:2a:42:ab:0f:68:98:f8: 6f:bc:ed:24:42:6d:30:6a:e6:75:53:62:26:ac:20: 56:1f:b7:5b:36:b0:96:25:0b:22:22:97:9b:1e:80: 86:fc:04:7c:15:21:9e:7f:da:05:00:d9:e1:ee:a5: 56:fe:17:46:78:99:01:2d:0d:d4:7d:76:3e:d9:3e: 5f:1d:9e:d5:b1:eb:d7:8b:ef:3a:5d:d5:c0:48:99: 51:b9:6e:45:56:3d:c7:b7:5b:dd:4b:3e:a2:68:90: 20:42:b9:db:e9:dc:83:af:c0:24:d1:a5:55:e7:13: 34:42:01:2c:fa:41:b5:68:0f:4a:dd:20:6e:01:ef: de:e7:d9:21:cf:13:04:4d:a1:ca:6e:ad:45:06:1d: 74:b5:27:28:74:d5:10:dc:bf:cb:a6:6e:0a:f4:8b: 46:14:3d:b3:46:83:95:24:8e:69:2c:ce:f3:4c:12: 07:3e:9e:e1:e6:92:a2:6a:69:45:bc:36:c4:14:cd: 2c:df:84:61:ea:3d:45:1f:3a:2a:06:0b:66:b8:c4: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.100.0/22 IPv6: 2804:3160::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265010 Signature Algorithm: sha256WithRSAEncryption 1d:d8:dd:f7:9e:56:c8:01:fa:ab:57:16:d7:de:0f:c9:aa:bd: de:87:dc:52:ee:b6:98:7d:38:21:fd:60:c0:db:35:ca:80:d7: 21:6e:70:b0:7b:db:e9:9c:5a:dc:cf:36:85:13:2b:71:19:8f: 81:80:7b:a5:57:ed:0c:37:d2:65:ab:d4:4c:35:50:71:9f:0b: e0:7f:23:26:6e:b2:c5:e5:17:ff:a6:62:62:92:2f:53:3b:86: 86:f9:67:0b:0e:91:35:df:de:2c:94:02:b3:dd:59:ae:90:7f: 8b:76:7a:33:3b:76:4a:40:e9:fd:ac:7b:0f:6a:81:dc:f5:1c: 8b:1a:43:ab:d1:eb:e4:6a:b8:27:90:c6:00:3e:22:7e:94:2f: 82:9e:98:a3:b3:88:68:c1:bc:2e:94:4e:df:90:6d:45:da:92: 81:f0:84:5d:68:fd:26:00:75:d3:c0:82:5d:6e:bb:64:51:f8: 60:64:d0:62:29:8e:a3:d9:b1:dd:b9:1f:12:f3:f3:d2:c8:1d: e6:1b:c2:8e:a2:d3:7c:b9:69:be:c9:1c:40:49:13:28:5b:df: 71:7e:c4:b9:1c:64:bd:33:d1:88:cf:9e:4e:76:2b:1a:27:8a: 38:19:76:15:1c:8b:4f:3b:84:d8:e7:6c:72:3d:32:c3:bd:5e: 7a:82:94:b9 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUPZnivf9Y79feG1gA3H8Wf9r/dWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MjcyMTQ1NTRaFw0yNTA1MjYyMTUwNTRaMDMxMTAvBgNV BAMTKEQzRDlDOTI0N0MyQ0FDNjkyRTBDNjgxQURDRkE2OTI2NjlDQkNGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpgNAkWkBB+VpDeSwYg7LX7Z5 kua0tmP7Ck1zRFdXIagPLrpysd7V4CGDVl11Jq2I/XASKkKrD2iY+G+87SRCbTBq 5nVTYiasIFYft1s2sJYlCyIil5segIb8BHwVIZ5/2gUA2eHupVb+F0Z4mQEtDdR9 dj7ZPl8dntWx69eL7zpd1cBImVG5bkVWPce3W91LPqJokCBCudvp3IOvwCTRpVXn EzRCASz6QbVoD0rdIG4B797n2SHPEwRNocpurUUGHXS1Jyh01RDcv8umbgr0i0YU PbNGg5UkjmkszvNMEgc+nuHmkqJqaUW8NsQUzSzfhGHqPUUfOioGC2a4xKrxAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTT2ckkfCysaS4M aBrc+mkmacvP1zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0No UWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1UncvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0No UWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1UncvMC9EM0Q5 QzkyNDdDMkNBQzY5MkUwQzY4MUFEQ0ZBNjkyNjY5Q0JDRkQ3Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKqVGQwDQQCAAIwBwMFACgEMWAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAsyMA0GCSqGSIb3DQEBCwUAA4IBAQAd2N33nlbIAfqrVxbX 3g/Jqr3eh9xS7raYfTgh/WDA2zXKgNchbnCwe9vpnFrczzaFEytxGY+BgHulV+0M N9Jlq9RMNVBxnwvgfyMmbrLF5Rf/pmJiki9TO4aG+WcLDpE1394slAKz3VmukH+L dnozO3ZKQOn9rHsPaoHc9RyLGkOr0evkargnkMYAPiJ+lC+Cnpijs4howbwulE7f kG1F2pKB8IRdaP0mAHXTwIJdbrtkUfhgZNBiKY6j2bHduR8S8/PSyB3mG8KOotN8 uWm+yRxASRMoW99xfsS5HGS9M9GIz55OdisaJ4o4GXYVHItPO4TY52xyPTLDvV56 gpS5 -----END CERTIFICATE-----Generated at Tue Jun 25 23:05:08 2024 by rpki-client on console-fra.rpki-client.org