$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer File: D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer (raw, json) Hash identifier: yk2gLCH51JJ7f4IxCv8v0VSPIA9BHfqXIVlyqzod0uI= Subject key identifier: D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 409F6C431A9CCB6A571C12FA8066CE245E0C364C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.mft caRepository: rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 12:35:26 +0000 Certificate not after: Thu 03 Apr 2025 12:40:26 +0000 Subordinate resources: AS: 52617 IP: 45.161.92.0/22 IP: 160.238.164.0/22 IP: 177.124.100.0/22 IP: 2804:d64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 20:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9f:6c:43:1a:9c:cb:6a:57:1c:12:fa:80:66:ce:24:5e:0c:36:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 12:35:26 2024 GMT Not After : Apr 3 12:40:26 2025 GMT Subject: CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:40:a8:78:6e:56:53:9c:3f:12:7a:21:75: fb:79:e1:df:f7:8d:7f:3b:78:38:84:79:81:5a:a9: 79:2d:9a:9c:73:70:2f:69:2c:86:3d:80:d5:01:d1: 8f:0e:94:7f:5d:26:0f:9a:00:3d:1a:54:a9:bb:a0: a0:7a:de:2b:8d:4b:09:8f:f5:9d:f7:de:8b:73:a8: 96:50:1b:32:93:cd:82:20:41:0b:d7:35:fb:09:69: 76:b5:f1:fe:14:70:e1:4f:c5:23:8a:0c:1a:7e:71: c6:25:d4:2a:8c:0f:40:61:27:b8:f1:75:f5:a1:30: ae:c9:f4:bb:1c:6d:f0:bb:75:12:18:b0:3b:b4:4b: 24:49:25:e5:8e:0b:9d:b3:69:9b:04:27:9c:f3:96: e9:40:ce:79:72:96:97:96:e4:20:ba:ed:ea:f9:00: b1:0b:f4:ab:c3:66:89:61:6f:ee:78:f2:f9:54:db: 84:e0:5a:42:56:72:1b:5d:6b:9b:8b:2b:00:36:3b: 75:2b:90:d9:80:b5:5c:0d:ac:89:fa:c3:72:fc:0c: e3:17:98:d7:81:24:8a:bb:f7:b5:da:50:cc:58:62: 04:fc:63:45:07:bc:c0:b7:6b:b9:3c:79:d1:f1:ac: 1b:4a:91:aa:6c:4a:af:99:0c:3f:a2:0d:c6:16:b0: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.92.0/22 160.238.164.0/22 177.124.100.0/22 IPv6: 2804:d64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52617 Signature Algorithm: sha256WithRSAEncryption 08:8c:1d:39:bd:6d:cc:15:fd:b8:ba:c0:b7:d1:a3:87:c1:6a: b0:0e:ea:1d:29:51:6e:aa:5d:8c:15:d7:10:00:b2:07:6a:b4: 17:dc:1b:94:f3:51:78:8c:db:7e:05:c8:7f:dd:78:10:90:c4: 4f:f0:6c:e3:6c:fa:10:90:34:cf:5d:a1:90:93:58:69:6d:b2: e1:2d:8b:6c:d3:ee:51:ef:2e:d1:54:e4:ce:48:b1:e3:c8:ba: 8f:9b:34:f2:b0:37:91:0a:31:a7:17:0e:32:7d:c0:80:7e:8b: 37:dd:2d:9a:8f:10:bb:39:e4:fc:8e:1c:55:25:dc:62:6b:71: 6b:f2:d1:3a:2b:40:cb:21:8e:01:a3:39:ac:e7:95:9b:45:92: 8f:51:08:ca:aa:a3:3f:da:3a:cc:7f:34:bc:62:f0:72:bb:99: 27:b1:b6:d7:57:d9:ff:7f:06:1f:ea:cb:a2:66:b7:40:f3:ed: b2:13:74:de:ef:f4:91:7b:d5:92:02:12:11:37:e8:f1:2d:f0: db:75:cf:c9:9f:58:96:e5:56:40:ec:c3:4d:07:25:35:8f:56: 61:ed:10:58:76:2c:43:9e:7d:79:16:1e:9b:4f:ee:03:46:8a: a3:14:bb:f3:85:3c:43:30:e3:19:10:e1:08:71:c1:61:a5:92: e4:5b:72:08 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUQJ9sQxqcy2pXHBL6gGbOJF4MNkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMjM1MjZaFw0yNTA0MDMxMjQwMjZaMDMxMTAvBgNV BAMTKEQ1MkVBODdDQjZFRDc0OTkzNDM2OTM4NTFGNEY5M0M0RDI4QUFENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oECoeG5WU5w/Enohdft54d/3 jX87eDiEeYFaqXktmpxzcC9pLIY9gNUB0Y8OlH9dJg+aAD0aVKm7oKB63iuNSwmP 9Z333otzqJZQGzKTzYIgQQvXNfsJaXa18f4UcOFPxSOKDBp+ccYl1CqMD0BhJ7jx dfWhMK7J9LscbfC7dRIYsDu0SyRJJeWOC52zaZsEJ5zzlulAznlylpeW5CC67er5 ALEL9KvDZolhb+548vlU24TgWkJWchtda5uLKwA2O3UrkNmAtVwNrIn6w3L8DOMX mNeBJIq797XaUMxYYgT8Y0UHvMC3a7k8edHxrBtKkapsSq+ZDD+iDcYWsGGzAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVLqh8tu10mTQ2 k4UfT5PE0oqtZTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzVZ TER3R21nWGNoOXQ3YnM3NzlCU05hdFFBOWdMTHlnYTVnNWt0OVhjNk0vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M1 WUxEd0dtZ1hjaDl0N2JzNzc5QlNOYXRRQTlnTEx5Z2E1ZzVrdDlYYzZNLzEvRDUy RUE4N0NCNkVENzQ5OTM0MzY5Mzg1MUY0RjkzQzREMjhBQUQ2NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCLaFcAwQCoO6kAwQCsXxkMA0EAgACMAcDBQAoBA1k MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDNiTANBgkqhkiG9w0BAQsFAAOCAQEA CIwdOb1tzBX9uLrAt9Gjh8FqsA7qHSlRbqpdjBXXEACyB2q0F9wblPNReIzbfgXI f914EJDET/Bs42z6EJA0z12hkJNYaW2y4S2LbNPuUe8u0VTkzkix48i6j5s08rA3 kQoxpxcOMn3AgH6LN90tmo8Quznk/I4cVSXcYmtxa/LROitAyyGOAaM5rOeVm0WS j1EIyqqjP9o6zH80vGLwcruZJ7G211fZ/38GH+rLoma3QPPtshN03u/0kXvVkgIS ETfo8S3w23XPyZ9YluVWQOzDTQclNY9WYe0QWHYsQ559eRYem0/uA0aKoxS784U8 QzDjGRDhCHHBYaWS5FtyCA== -----END CERTIFICATE-----Generated at Tue Jun 18 18:37:09 2024 by rpki-client on console-fra.rpki-client.org