$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer File: D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer (raw, json) Hash identifier: 3bKHGlq8t7FrHhFJ8nJGqB1EWuxfSz5DgWt7f7eyU1Q= Subject key identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 143D3FC10412867695155A79A8773C689256EA66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft caRepository: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 22:02:23 +0000 Certificate not after: Wed 02 Apr 2025 22:07:23 +0000 Subordinate resources: AS: 271455 IP: 187.63.148.0/22 IP: 2804:7bcc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3d:3f:c1:04:12:86:76:95:15:5a:79:a8:77:3c:68:92:56:ea:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 22:02:23 2024 GMT Not After : Apr 2 22:07:23 2025 GMT Subject: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:d9:6b:df:58:9e:79:14:9e:9b:32:72:56: 62:c0:70:b4:68:8c:27:2a:77:e1:10:fd:16:92:dc: 7d:79:87:31:97:7c:cc:8d:48:50:f4:5c:55:89:e0: 3f:6c:ee:88:fe:e2:92:1e:21:67:c8:39:7a:10:a8: 03:31:f5:b1:6d:d1:c1:2d:25:ac:d0:5d:84:4f:ef: f9:9e:b4:f5:39:18:b0:a4:d0:3a:d2:b1:87:a5:7a: c6:7f:48:91:97:9f:0d:61:cf:7c:ad:89:81:25:51: 73:52:17:26:8d:0f:f3:f6:ad:46:55:e1:5c:79:3f: f8:9f:be:20:9e:d4:f8:3a:29:5b:6f:28:38:70:84: 4a:39:5b:e6:3e:1a:7d:87:21:db:a4:33:b8:c9:7f: 7b:b2:c9:26:ad:5c:84:9e:ce:61:fd:65:29:aa:ad: 2a:3e:8a:87:d8:0e:bb:66:8c:8d:86:d4:4c:a8:71: 02:63:81:eb:d7:aa:d4:73:d0:2c:ca:3c:2b:2e:a1: 92:20:6d:34:38:61:59:14:23:96:71:e2:5c:af:77: a7:47:ca:5d:72:87:50:e2:a7:7a:79:f6:ef:49:48: 46:db:51:3b:11:cf:ad:8c:c2:94:b0:c8:d4:99:0e: 7f:31:4d:53:60:de:1e:eb:a1:18:19:9f:cb:8c:3a: 46:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.63.148.0/22 IPv6: 2804:7bcc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271455 Signature Algorithm: sha256WithRSAEncryption 70:b8:9d:50:e8:1e:6d:e9:2c:40:76:9b:7e:db:e4:ec:a7:d4: ab:4a:b7:15:35:a1:8d:ad:42:0a:a6:61:a9:84:12:3f:12:6d: 39:de:f2:74:a7:f3:d5:5c:61:ed:56:c5:b1:eb:29:32:9e:35: 2f:1b:33:c3:59:02:8b:ea:9e:87:db:ed:fa:50:0a:a8:4f:0f: ba:a6:88:ec:85:76:98:9b:3a:3e:03:5e:27:3b:d0:70:85:82: 72:d5:19:9c:b4:d3:ab:d8:c3:e4:27:32:62:0c:98:4f:69:7c: 8d:b8:39:4f:cb:9e:b4:a4:46:7e:7d:48:dd:a2:52:5f:3e:ff: ee:c2:d5:22:72:6b:6a:6b:30:d1:bc:4d:f9:e5:96:4c:41:62: b1:fb:6e:bd:fb:a7:ef:bc:ec:57:c2:d5:20:c2:e4:52:e4:a9: e9:67:b3:dc:d3:88:d1:a2:ac:9a:e6:7d:29:1e:7c:c1:74:fd: ee:d2:d4:05:3e:c4:cd:14:16:bb:87:9b:2d:15:e7:24:dc:63: 20:82:76:13:2b:20:c2:bb:a9:d9:30:9e:91:94:c8:f5:65:7e: 83:fb:f6:0e:23:7f:aa:06:34:39:dd:02:18:67:d1:00:03:44: 3a:92:c1:06:45:69:7e:3b:e5:57:cd:a7:42:c2:f3:3b:8f:92: b5:39:c6:9e -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUFD0/wQQShnaVFVp5qHc8aJJW6mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMjAyMjNaFw0yNTA0MDIyMjA3MjNaMDMxMTAvBgNV BAMTKEQzRjcxMDg3MDBGNjlBQjNDNDYwRTAxNzBFOTlFNzA1MUVDQjMxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTdlr31ieeRSemzJyVmLAcLRo jCcqd+EQ/RaS3H15hzGXfMyNSFD0XFWJ4D9s7oj+4pIeIWfIOXoQqAMx9bFt0cEt JazQXYRP7/metPU5GLCk0DrSsYelesZ/SJGXnw1hz3ytiYElUXNSFyaND/P2rUZV 4Vx5P/ifviCe1Pg6KVtvKDhwhEo5W+Y+Gn2HIdukM7jJf3uyySatXISezmH9ZSmq rSo+iofYDrtmjI2G1EyocQJjgevXqtRz0CzKPCsuoZIgbTQ4YVkUI5Zx4lyvd6dH yl1yh1Dip3p59u9JSEbbUTsRz62MwpSwyNSZDn8xTVNg3h7roRgZn8uMOkbPAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTT9xCHAPaas8Rg 4BcOmecFHssx7DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHpo dzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVLMzMvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHpo dzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVLMzMvMS9EM0Y3 MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK7P5QwDQQCAAIwBwMFACgEe8wwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCRfMA0GCSqGSIb3DQEBCwUAA4IBAQBwuJ1Q6B5t6SxAdpt+ 2+Tsp9SrSrcVNaGNrUIKpmGphBI/Em053vJ0p/PVXGHtVsWx6ykynjUvGzPDWQKL 6p6H2+36UAqoTw+6pojshXaYmzo+A14nO9BwhYJy1RmctNOr2MPkJzJiDJhPaXyN uDlPy560pEZ+fUjdolJfPv/uwtUicmtqazDRvE355ZZMQWKx+269+6fvvOxXwtUg wuRS5KnpZ7Pc04jRoqya5n0pHnzBdP3u0tQFPsTNFBa7h5stFeck3GMggnYTKyDC u6nZMJ6RlMj1ZX6D+/YOI3+qBjQ53QIYZ9EAA0Q6ksEGRWl+O+VXzadCwvM7j5K1 Ocae -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:51 2024 by rpki-client on console-ams.rpki-client.org