$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.cer File: D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.cer (raw, json) Hash identifier: F3E5JRPVMJyzhVrIMpHnPDnRu7HYf0B8/yk4TCbCp3M= Subject key identifier: D7:07:0B:DA:8B:EE:3E:41:04:1E:7D:F6:8A:C2:BA:D4:65:DF:60:DE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1D0D4DCB0C996363909ABE5B84DCD04AAA0DB6A0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.mft caRepository: rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 13:44:26 +0000 Certificate not after: Thu 03 Apr 2025 13:49:26 +0000 Subordinate resources: AS: 262380 IP: 131.0.240.0/22 IP: 138.255.92.0/22 IP: 177.128.232.0/22 IP: 186.251.28.0/22 IP: 2804:898::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0d:4d:cb:0c:99:63:63:90:9a:be:5b:84:dc:d0:4a:aa:0d:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 13:44:26 2024 GMT Not After : Apr 3 13:49:26 2025 GMT Subject: CN=D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:3f:c5:a9:dd:0b:a1:f5:00:c6:27:81:d9: a3:24:e6:50:5b:92:f4:39:43:c9:2c:2d:de:02:ae: a6:cb:ee:84:05:52:6b:83:9d:5a:39:46:b4:ae:e5: be:8d:19:33:d2:6d:34:43:fb:a7:9d:56:3d:7d:6c: 0e:27:07:53:70:e3:24:aa:e5:78:cf:25:c5:f7:2b: 5e:10:70:8c:c8:90:e1:7f:f4:a7:64:5e:e6:ce:52: 7d:e0:62:70:89:9c:e3:c5:b1:e8:11:fb:72:e0:ab: cb:7d:1a:35:45:02:45:94:65:97:bc:66:13:52:68: 53:5d:20:2b:28:95:78:e5:68:ec:f3:7a:4f:9f:1c: b8:23:b0:1f:9c:5e:33:ef:24:86:77:c6:66:35:bb: d4:3f:da:e8:93:f9:e8:6c:0b:30:a3:c1:73:d1:ce: 30:b9:97:aa:be:a8:1f:b5:e2:85:37:c0:2b:2f:ae: cf:05:2b:dc:2f:eb:c1:63:88:d9:51:72:57:95:a7: cf:f6:7e:08:32:56:fd:6e:dc:23:79:ff:83:3c:0e: 54:ab:ae:d6:eb:a1:4f:d0:ea:e3:25:45:f7:ff:eb: 70:f5:c6:47:cc:ba:a3:3b:47:e8:b7:b4:4e:b5:80: 2b:b6:f9:44:78:9a:b8:9c:c2:dc:ac:0d:9b:2a:35: 8e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:07:0B:DA:8B:EE:3E:41:04:1E:7D:F6:8A:C2:BA:D4:65:DF:60:DE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.240.0/22 138.255.92.0/22 177.128.232.0/22 186.251.28.0/22 IPv6: 2804:898::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262380 Signature Algorithm: sha256WithRSAEncryption 5e:ac:fb:ae:29:c4:41:2a:44:7a:5d:33:1e:6d:b6:b8:f7:ff: 50:72:58:ea:54:5c:31:64:97:7a:ba:d4:5d:2f:a4:bb:7b:0d: bc:c1:22:d1:5b:34:98:9c:d2:96:8c:39:47:57:82:09:78:9a: 6a:8e:1b:ab:a4:a7:ae:f1:37:47:cf:c7:5c:5e:72:58:da:13: 32:06:79:68:88:7b:d0:92:5e:fc:51:1b:6a:be:76:81:f4:1c: 18:89:e4:57:c5:26:d6:6c:6b:46:98:f7:5a:06:52:52:01:b5: 64:65:61:5e:9b:76:3c:60:14:0d:22:59:e8:bf:e4:14:f3:62: 5e:d9:83:5d:49:19:1d:08:84:2d:54:e2:21:b2:5c:8e:a0:9b: fa:00:65:2e:ba:a3:81:e2:76:c9:f4:9d:01:03:77:5a:7f:5b: 37:9e:6e:b9:12:42:fe:04:4d:ca:e5:ef:de:bc:83:29:6f:98: dd:57:7c:26:c1:b9:ac:a6:09:ef:56:ff:92:db:8b:61:7d:34: 67:b9:59:17:f7:33:2d:b8:de:2f:d7:b8:4e:51:42:77:d6:81: 43:43:e0:ed:b8:ac:da:ed:b8:8c:e4:ec:de:f5:d7:f0:cb:46: 7f:33:f1:56:b0:b7:ba:5c:cd:1e:eb:98:d2:ec:35:b2:1e:8c: ef:6f:ca:a9 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUHQ1NywyZY2OQmr5bhNzQSqoNtqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMzQ0MjZaFw0yNTA0MDMxMzQ5MjZaMDMxMTAvBgNV BAMTKEQ3MDcwQkRBOEJFRTNFNDEwNDFFN0RGNjhBQzJCQUQ0NjVERjYwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVjj/Fqd0LofUAxieB2aMk5lBb kvQ5Q8ksLd4CrqbL7oQFUmuDnVo5RrSu5b6NGTPSbTRD+6edVj19bA4nB1Nw4ySq 5XjPJcX3K14QcIzIkOF/9KdkXubOUn3gYnCJnOPFsegR+3Lgq8t9GjVFAkWUZZe8 ZhNSaFNdICsolXjlaOzzek+fHLgjsB+cXjPvJIZ3xmY1u9Q/2uiT+ehsCzCjwXPR zjC5l6q+qB+14oU3wCsvrs8FK9wv68FjiNlRcleVp8/2fggyVv1u3CN5/4M8DlSr rtbroU/Q6uMlRff/63D1xkfMuqM7R+i3tE61gCu2+UR4mricwtysDZsqNY7VAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXBwvai+4+QQQe ffaKwrrUZd9g3jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWJo NzhuV0tDYnNveHpZZ2lVWFBaalR4djJRQ3FQZXJwbVoxR3FyaG1EcWYvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWJo NzhuV0tDYnNveHpZZ2lVWFBaalR4djJRQ3FQZXJwbVoxR3FyaG1EcWYvMS9ENzA3 MEJEQThCRUUzRTQxMDQxRTdERjY4QUMyQkFENDY1REY2MERFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcB Af8EMTAvMB4EAgABMBgDBAKDAPADBAKK/1wDBAKxgOgDBAK6+xwwDQQCAAIwBwMF ACgECJgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBADsMA0GCSqGSIb3DQEBCwUA A4IBAQBerPuuKcRBKkR6XTMebba49/9QcljqVFwxZJd6utRdL6S7ew28wSLRWzSY nNKWjDlHV4IJeJpqjhurpKeu8TdHz8dcXnJY2hMyBnloiHvQkl78URtqvnaB9BwY ieRXxSbWbGtGmPdaBlJSAbVkZWFem3Y8YBQNIlnov+QU82Je2YNdSRkdCIQtVOIh slyOoJv6AGUuuqOB4nbJ9J0BA3daf1s3nm65EkL+BE3K5e/evIMpb5jdV3wmwbms pgnvVv+S24thfTRnuVkX9zMtuN4v17hOUUJ31oFDQ+DtuKza7biM5Oze9dfwy0Z/ M/FWsLe6XM0e65jS7DWyHozvb8qp -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:36 2024 by rpki-client on console-fra.rpki-client.org