$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer File: D4B92897692C4F611B738C6728923C318CA5378D.cer (raw, json) Hash identifier: BeeXvSK3xolCJpOOGn8RtJstuQxQ80T7aFVA1QApgqc= Subject key identifier: D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3F1B67216F1977CE3B35A9B8C801BFBCAB5C47AB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft caRepository: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 00:32:45 +0000 Certificate not after: Thu 03 Apr 2025 00:37:45 +0000 Subordinate resources: AS: 273654 IP: 2804:8a34::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1b:67:21:6f:19:77:ce:3b:35:a9:b8:c8:01:bf:bc:ab:5c:47:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 00:32:45 2024 GMT Not After : Apr 3 00:37:45 2025 GMT Subject: CN=D4B92897692C4F611B738C6728923C318CA5378D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:18:7f:9f:f5:53:37:ca:07:14:67:6d:b0: 44:e1:54:d0:65:9b:fe:33:9b:fb:35:a4:47:21:2c: e4:8f:e1:78:5b:32:a5:35:96:e2:33:b7:76:f4:05: bb:fb:c6:17:ae:d5:25:6f:fd:53:e2:78:4c:0e:80: 45:08:8e:52:b6:f5:d0:9d:33:75:1c:64:48:d1:93: ec:0f:03:19:95:3a:ee:69:3d:4e:c2:f7:79:5d:8f: bb:9e:cc:e8:9b:7f:b1:4c:ad:d9:d3:eb:78:d4:51: 08:2d:02:8e:12:4d:e6:a7:82:2d:80:72:2e:5a:f2: de:45:1b:1f:89:e4:e5:5f:ac:d4:e2:9f:c8:fc:e4: 2f:ad:19:af:80:65:7a:b7:88:9b:00:aa:2a:1e:13: e9:c7:d5:a5:d1:58:a7:20:5e:23:06:b5:e7:17:c8: 86:5c:af:9e:14:04:b9:09:ba:48:de:95:ad:e7:4f: 67:c3:1b:c6:39:3a:98:cd:f7:5d:23:ae:bd:cb:47: 7e:c0:68:21:8d:e9:e5:49:36:ef:f7:19:93:16:e6: cc:5d:58:e9:de:5a:b8:d4:c7:81:6e:48:f0:ec:5f: 35:23:4e:6d:a8:86:56:90:37:14:4c:65:5b:f9:7d: 4f:99:93:30:44:80:07:fa:ba:7d:e1:23:d8:1d:bf: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8a34::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273654 Signature Algorithm: sha256WithRSAEncryption 28:92:c2:5e:5f:33:cb:13:28:a1:a4:1b:0d:bd:18:b8:7e:24: c1:77:a8:8f:98:6d:d0:80:aa:24:39:ad:f6:cd:8b:1f:f8:39: c9:be:ea:77:68:a8:a4:54:f5:b8:7c:e6:60:fe:b8:b0:a0:db: 73:48:ed:29:65:16:36:cf:66:0f:f0:8a:4a:df:1f:cf:84:a6: c0:db:b6:e1:1b:33:2d:18:8f:a5:d0:c3:ef:cf:7a:3a:1e:e7: ac:f7:32:e8:46:9e:e9:88:f0:8b:3c:95:bc:3b:d6:dd:0d:5f: fb:8f:21:1c:b1:21:8c:08:db:d3:bb:96:68:96:4e:db:ae:50: ed:7d:61:b0:22:90:9f:5c:63:99:fb:98:63:a2:8a:3f:29:55: e5:98:6d:b5:76:cb:3d:8b:72:7d:d3:c8:66:3b:d2:8e:9b:3c: fe:36:cc:b0:46:ba:a1:ab:61:d9:09:51:96:6e:d6:4b:7e:19: 3b:f3:af:98:15:86:4e:9e:f8:f4:3c:40:dd:1a:0b:3f:24:fc: 4e:92:a5:66:fd:bf:92:74:ec:db:a0:96:f2:dd:bb:77:57:df: fb:62:17:5e:f9:27:0c:e8:20:ad:a4:12:9e:d5:bc:fd:de:29: 75:8c:f7:e0:d2:99:5a:fc:eb:c7:c6:d1:4e:7f:e9:1f:a7:2b: 19:e2:40:93 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUPxtnIW8Zd847Nam4yAG/vKtcR6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMDMyNDVaFw0yNTA0MDMwMDM3NDVaMDMxMTAvBgNV BAMTKEQ0QjkyODk3NjkyQzRGNjExQjczOEM2NzI4OTIzQzMxOENBNTM3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFxh/n/VTN8oHFGdtsEThVNBl m/4zm/s1pEchLOSP4XhbMqU1luIzt3b0Bbv7xheu1SVv/VPieEwOgEUIjlK29dCd M3UcZEjRk+wPAxmVOu5pPU7C93ldj7uezOibf7FMrdnT63jUUQgtAo4STeangi2A ci5a8t5FGx+J5OVfrNTin8j85C+tGa+AZXq3iJsAqioeE+nH1aXRWKcgXiMGtecX yIZcr54UBLkJukjela3nT2fDG8Y5OpjN910jrr3LR37AaCGN6eVJNu/3GZMW5sxd WOneWrjUx4FuSPDsXzUjTm2ohlaQNxRMZVv5fU+ZkzBEgAf6un3hI9gdv1fbAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUuSiXaSxPYRtz jGcokjwxjKU3jTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2hu cUJoRU1oUk5TVnlodmNLbkNjamU0dW9qRDFFTHB3VGREV2ViTUh6ZzMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0do bnFCaEVNaFJOU1Z5aHZjS25DY2plNHVvakQxRUxwd1RkRFdlYk1IemczLzEvRDRC OTI4OTc2OTJDNEY2MTFCNzM4QzY3Mjg5MjNDMzE4Q0E1Mzc4RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASKNDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LPYwDQYJKoZIhvcNAQELBQADggEBACiSwl5fM8sTKKGkGw29GLh+JMF3qI+YbdCA qiQ5rfbNix/4Ocm+6ndoqKRU9bh85mD+uLCg23NI7SllFjbPZg/wikrfH8+EpsDb tuEbMy0Yj6XQw+/Pejoe56z3MuhGnumI8Is8lbw71t0NX/uPIRyxIYwI29O7lmiW TtuuUO19YbAikJ9cY5n7mGOiij8pVeWYbbV2yz2Lcn3TyGY70o6bPP42zLBGuqGr YdkJUZZu1kt+GTvzr5gVhk6e+PQ8QN0aCz8k/E6SpWb9v5J07NuglvLdu3dX3/ti F175JwzoIK2kEp7VvP3eKXWM9+DSmVr868fG0U5/6R+nKxniQJM= -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:36 2024 by rpki-client on console-fra.rpki-client.org