$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.cer File: D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.cer (raw, json) Hash identifier: wYUqivHV680R7iAMJAnXVB2u9Xdg2SwdSLWt5PQX3pQ= Subject key identifier: D4:AD:C2:24:86:EF:8E:2F:FB:5A:CA:85:2B:B0:18:F4:A6:D5:8D:27 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D6A8FB9193BA0A5E77312987BF21AD92E6C2B1B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.mft caRepository: rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 00:33:56 +0000 Certificate not after: Fri 04 Apr 2025 00:38:56 +0000 Subordinate resources: AS: 271008 IP: 170.254.120.0/22 IP: 2804:74dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 05:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6a:8f:b9:19:3b:a0:a5:e7:73:12:98:7b:f2:1a:d9:2e:6c:2b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 5 00:33:56 2024 GMT Not After : Apr 4 00:38:56 2025 GMT Subject: CN=D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:c0:01:e0:e9:d5:2c:71:61:ad:1e:e8:1f: c7:fe:bd:ad:1a:e9:ed:84:fd:05:ab:eb:96:6f:d1: 06:3f:15:44:8a:f2:02:d9:52:48:02:24:58:0f:01: 57:2a:30:16:d8:42:68:3d:f6:b1:01:83:50:1f:b8: 73:cb:e0:1d:f1:e8:bb:39:6d:1a:ed:c3:fc:c3:5d: 20:e9:7a:d5:0f:ed:52:1e:da:6a:5e:03:78:f9:27: 99:49:49:bd:66:28:7a:61:c1:d8:23:b3:7f:f0:8e: 83:72:69:47:b9:5d:15:f2:a1:9e:b5:3d:a3:00:65: 58:eb:21:40:48:90:d3:06:bc:8b:37:e3:e2:25:5f: f1:56:8a:73:cb:fb:26:02:71:6a:ab:75:35:ea:a7: dd:f2:a2:8f:f4:cc:1a:8f:52:57:25:d9:df:bb:1d: b3:3e:96:2d:93:71:2e:ee:65:5c:5c:86:37:11:f3: 12:d5:64:ff:4f:1f:2f:9b:cd:fb:21:93:49:3e:81: 95:8f:0e:8c:19:bb:2b:19:64:41:1e:15:29:cc:a4: 82:11:ec:e8:18:c9:99:b5:14:1e:bb:eb:40:d4:25: 04:ad:6d:c2:08:9d:12:8c:0b:00:63:e0:e5:00:bd: 2b:db:37:98:2a:1c:b8:dc:8e:8b:20:ab:f2:ff:07: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:AD:C2:24:86:EF:8E:2F:FB:5A:CA:85:2B:B0:18:F4:A6:D5:8D:27 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.120.0/22 IPv6: 2804:74dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271008 Signature Algorithm: sha256WithRSAEncryption 2c:5d:b9:da:c5:b8:24:02:5a:08:72:ac:29:d4:95:1f:10:70: 5f:a2:d3:24:bd:9d:9f:d9:44:21:e6:70:c0:96:ae:00:9d:2d: e3:fb:1c:d7:2e:b0:cd:40:97:59:c8:00:42:ae:6f:ce:17:74: 86:42:9a:d2:62:ef:c3:f5:c9:d2:81:3f:b9:1f:9a:d7:0a:94: a2:ec:84:12:53:ea:04:4f:9c:97:06:0d:24:1d:5c:6f:55:f1: 3b:94:06:57:20:ba:26:dd:2a:93:55:fe:24:ba:6c:40:15:f0: 70:53:c4:0f:dd:5b:6c:9f:f8:a2:f3:c1:46:aa:dc:ce:00:af: ac:a2:80:26:09:ae:49:52:9b:01:04:cd:87:47:f4:15:45:c2: f3:68:15:17:cc:b2:d1:41:b0:df:74:b9:88:b4:29:3c:16:9a: d5:d8:2f:86:fc:a7:f1:3c:05:3d:55:e6:91:25:ab:27:c2:83: 0a:e1:93:c3:3a:7e:13:13:d0:cb:b6:ba:18:b9:97:42:b9:81: 4e:56:2c:0a:60:26:2e:cf:8e:81:8a:1f:a5:6e:63:93:4d:04: 2f:13:e7:bf:d3:15:9f:aa:d7:db:55:af:e8:d8:84:ef:ae:7b: 09:b4:b0:87:1c:d7:92:28:9d:85:ea:2b:d0:d2:18:ef:7f:d7: 30:16:f7:b9 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPWqPuRk7oKXncxKYe/Ia2S5sKxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDUwMDMzNTZaFw0yNTA0MDQwMDM4NTZaMDMxMTAvBgNV BAMTKEQ0QURDMjI0ODZFRjhFMkZGQjVBQ0E4NTJCQjAxOEY0QTZENThEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZ8AB4OnVLHFhrR7oH8f+va0a 6e2E/QWr65Zv0QY/FUSK8gLZUkgCJFgPAVcqMBbYQmg99rEBg1AfuHPL4B3x6Ls5 bRrtw/zDXSDpetUP7VIe2mpeA3j5J5lJSb1mKHphwdgjs3/wjoNyaUe5XRXyoZ61 PaMAZVjrIUBIkNMGvIs34+IlX/FWinPL+yYCcWqrdTXqp93yoo/0zBqPUlcl2d+7 HbM+li2TcS7uZVxchjcR8xLVZP9PHy+bzfshk0k+gZWPDowZuysZZEEeFSnMpIIR 7OgYyZm1FB6760DUJQStbcIInRKMCwBj4OUAvSvbN5gqHLjcjosgq/L/B/nPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUrcIkhu+OL/ta yoUrsBj0ptWNJzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzly RVFoVmppc0s4UTI3cjEzelpKSzMyc1hRNENSRkJQVlM4S05oWkJpV0IvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c5 ckVRaFZqaXNLOFEyN3IxM3paSkszMnNYUTRDUkZCUFZTOEtOaFpCaVdCLzEvRDRB REMyMjQ4NkVGOEUyRkZCNUFDQTg1MkJCMDE4RjRBNkQ1OEQyNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqv54MA0EAgACMAcDBQAoBHTcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQioDANBgkqhkiG9w0BAQsFAAOCAQEALF252sW4JAJaCHKs KdSVHxBwX6LTJL2dn9lEIeZwwJauAJ0t4/sc1y6wzUCXWcgAQq5vzhd0hkKa0mLv w/XJ0oE/uR+a1wqUouyEElPqBE+clwYNJB1cb1XxO5QGVyC6Jt0qk1X+JLpsQBXw cFPED91bbJ/4ovPBRqrczgCvrKKAJgmuSVKbAQTNh0f0FUXC82gVF8yy0UGw33S5 iLQpPBaa1dgvhvyn8TwFPVXmkSWrJ8KDCuGTwzp+ExPQy7a6GLmXQrmBTlYsCmAm Ls+OgYofpW5jk00ELxPnv9MVn6rX21Wv6NiE7657CbSwhxzXkiidheor0NIY73/X MBb3uQ== -----END CERTIFICATE-----Generated at Tue Jun 18 07:41:12 2024 by rpki-client on console-ams.rpki-client.org