$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.cer File: D7F2FAC1B5025CADC06EADA362B65D3C990ED062.cer (raw, json) Hash identifier: 3VbEyi8En6oP3cBeRIBV5ViY2yGbglr+Wfey86JWgfg= Subject key identifier: D7:F2:FA:C1:B5:02:5C:AD:C0:6E:AD:A3:62:B6:5D:3C:99:0E:D0:62 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0FD8E2C36C6D727A5BEB2965DD952262CFB8207D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.mft caRepository: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 17 May 2024 14:00:56 +0000 Certificate not after: Fri 16 May 2025 14:05:56 +0000 Subordinate resources: AS: 61784 IP: 138.186.184.0/22 IP: 201.55.200.0/22 IP: 2804:1948::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d8:e2:c3:6c:6d:72:7a:5b:eb:29:65:dd:95:22:62:cf:b8:20:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 17 14:00:56 2024 GMT Not After : May 16 14:05:56 2025 GMT Subject: CN=D7F2FAC1B5025CADC06EADA362B65D3C990ED062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:65:62:31:f2:e4:26:b1:d6:09:75:e9:d2: a9:9d:46:22:d1:61:f2:64:8d:cc:f0:7a:29:ce:d4: 6d:7e:82:13:34:e9:7c:f3:ed:c4:49:c0:f5:e6:47: 11:97:e1:8b:ca:30:9b:62:a4:7d:4b:e7:57:de:a5: 34:7a:74:61:df:64:8a:fd:fd:ed:aa:ef:5f:36:50: 69:44:80:34:02:67:82:59:22:9a:fc:62:3e:36:98: 06:13:a7:69:72:d4:09:94:1b:fc:06:e5:42:ea:de: af:1c:97:bf:cd:a2:bc:d8:0b:4c:ab:0c:86:89:85: 7e:1b:87:49:3f:72:5c:34:fe:ce:b9:b5:c2:66:f6: 39:f0:0c:50:ba:dd:5b:a7:ae:ec:00:a1:84:f8:f6: 49:c4:7e:f0:50:8f:ed:13:48:96:be:7e:87:5a:f9: 5b:05:b3:7d:b0:11:15:4b:c8:c5:b9:c9:52:fa:a5: 54:72:84:1b:b9:fa:c4:1b:43:2a:95:bf:d0:0c:6d: 00:73:b3:df:ed:dd:3a:b9:6b:62:42:86:6c:b7:e0: e1:a7:e0:86:81:d5:3e:66:c7:90:ff:9f:72:21:89: c9:d9:3f:42:28:d2:18:26:5b:75:9f:dd:a8:2d:e0: 6d:45:5e:13:6e:f2:85:69:f0:15:9e:86:74:22:7f: 59:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:F2:FA:C1:B5:02:5C:AD:C0:6E:AD:A3:62:B6:5D:3C:99:0E:D0:62 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.184.0/22 201.55.200.0/22 IPv6: 2804:1948::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61784 Signature Algorithm: sha256WithRSAEncryption b6:08:ad:73:06:a1:6e:8d:db:df:74:52:d0:8b:f0:51:c7:0f: d5:ed:16:7e:c4:78:f0:dc:a0:f3:07:b6:fa:c7:ff:1d:d9:c4: dd:f6:fc:51:c9:c5:a4:19:49:48:6f:01:6f:1f:4d:1e:5d:b5: 39:43:ec:96:d7:68:b3:41:8f:d7:92:64:3a:cc:55:17:2f:f4: 6a:bc:60:1b:b3:3d:18:1a:55:32:7f:2c:8c:04:60:06:42:5c: bf:e9:ee:a7:4c:dc:32:55:db:c0:c8:f7:f1:19:0f:6c:0b:cc: e7:eb:53:fa:c3:fa:21:74:b2:10:bf:d5:9d:52:88:22:cf:fa: 8d:ff:70:15:b2:4c:6b:5e:08:11:72:b3:34:f3:aa:7a:69:a7: 55:4f:1d:56:9b:2f:15:61:d5:df:a2:46:70:d3:2a:16:7f:86: 25:3b:31:10:60:8e:de:fa:23:65:78:bc:a6:6f:19:6d:5c:e6: e0:e8:71:a5:92:17:a6:96:f5:23:db:b0:1c:eb:da:7c:f4:f0: 74:35:df:96:9e:f5:b4:0f:32:03:62:db:ae:86:a1:ce:af:c8: 82:d5:66:72:e3:3d:28:07:e5:66:14:db:31:c6:50:15:51:8c: 41:c5:71:fc:9b:e0:24:1b:88:15:ed:77:85:e4:db:30:ac:e6: 40:79:bf:cc -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUD9jiw2xtcnpb6yll3ZUiYs+4IH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MTcxNDAwNTZaFw0yNTA1MTYxNDA1NTZaMDMxMTAvBgNV BAMTKEQ3RjJGQUMxQjUwMjVDQURDMDZFQURBMzYyQjY1RDNDOTkwRUQwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yWViMfLkJrHWCXXp0qmdRiLR YfJkjczweinO1G1+ghM06Xzz7cRJwPXmRxGX4YvKMJtipH1L51fepTR6dGHfZIr9 /e2q7182UGlEgDQCZ4JZIpr8Yj42mAYTp2ly1AmUG/wG5ULq3q8cl7/NorzYC0yr DIaJhX4bh0k/clw0/s65tcJm9jnwDFC63VunruwAoYT49knEfvBQj+0TSJa+foda +VsFs32wERVLyMW5yVL6pVRyhBu5+sQbQyqVv9AMbQBzs9/t3Tq5a2JChmy34OGn 4IaB1T5mx5D/n3IhicnZP0Io0hgmW3Wf3agt4G1FXhNu8oVp8BWehnQif1llAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTX8vrBtQJcrcBu raNitl08mQ7QYjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDRF V1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJUVVIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q0 RVdUWFhHVWlvQnBhUzM4YldVR1AzMXcxcEdoRVZMcURkUmJVYloyVFVSLzAvRDdG MkZBQzFCNTAyNUNBREMwNkVBREEzNjJCNjVEM0M5OTBFRDA2Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCirq4AwQCyTfIMA0EAgACMAcDBQAoBBlIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxWDANBgkqhkiG9w0BAQsFAAOCAQEAtgitcwah bo3b33RS0IvwUccP1e0WfsR48Nyg8we2+sf/HdnE3fb8UcnFpBlJSG8Bbx9NHl21 OUPsltdos0GP15JkOsxVFy/0arxgG7M9GBpVMn8sjARgBkJcv+nup0zcMlXbwMj3 8RkPbAvM5+tT+sP6IXSyEL/VnVKIIs/6jf9wFbJMa14IEXKzNPOqemmnVU8dVpsv FWHV36JGcNMqFn+GJTsxEGCO3vojZXi8pm8ZbVzm4OhxpZIXppb1I9uwHOvafPTw dDXflp71tA8yA2Lbroahzq/IgtVmcuM9KAflZhTbMcZQFVGMQcVx/JvgJBuIFe13 heTbMKzmQHm/zA== -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:51 2024 by rpki-client on console-ams.rpki-client.org