$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.cer File: D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.cer (raw, json) Hash identifier: PxM6QV66TzBAMZb6bYjblAH6en4qWcpOZdzrLWHmcXc= Subject key identifier: D8:85:13:0E:44:A5:EE:4B:6D:B1:87:29:BF:AF:1D:19:E7:8D:A9:5A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 524A064C5B0CFF9CAD20982E474F782544F26B8E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.mft caRepository: rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 17:47:14 +0000 Certificate not after: Thu 03 Apr 2025 17:52:14 +0000 Subordinate resources: AS: 269627 IP: 45.190.52.0/22 IP: 2804:676c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 21:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4a:06:4c:5b:0c:ff:9c:ad:20:98:2e:47:4f:78:25:44:f2:6b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 17:47:14 2024 GMT Not After : Apr 3 17:52:14 2025 GMT Subject: CN=D885130E44A5EE4B6DB18729BFAF1D19E78DA95A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:67:90:de:40:e7:c8:fe:3d:24:8d:e8:48:f4: 11:13:00:12:08:38:5c:5e:6d:14:d5:16:07:55:f0: ed:8e:fa:a0:e8:3c:67:e8:0c:14:c7:b8:cd:09:80: 68:94:a8:c5:75:4a:0a:ea:2c:31:3f:9a:59:79:74: 8b:88:4c:6d:55:43:6a:04:15:55:95:ae:6a:05:5e: c1:1d:aa:28:87:9e:c7:d8:9b:01:6e:bd:fe:d9:f9: b6:16:d4:1c:84:29:b2:2f:c1:5f:ac:04:00:f1:cf: 66:7a:fd:ad:24:97:ae:2f:34:46:fe:4a:b7:1e:3a: 2f:55:21:dc:b6:22:1b:2e:5a:89:25:d2:74:82:4f: 8a:9c:ec:d2:42:10:27:cb:c1:de:10:f0:a0:40:02: 25:d3:34:09:f6:ec:3c:24:62:92:58:ea:ed:13:ca: 90:fb:ad:92:08:11:f0:48:b3:ac:c5:55:c7:1d:d8: e9:7a:87:e0:91:9b:ff:d0:2e:82:10:c4:08:92:b0: 6e:fd:f3:af:c0:45:7d:30:a1:08:ff:86:b9:38:93: 87:ed:39:50:0e:93:2a:e0:83:e7:11:9c:b8:c8:1b: 78:45:04:90:61:3a:26:e4:a8:2b:c1:d4:14:46:57: 32:ab:c7:b1:d5:05:0a:9f:0b:d7:cb:de:26:cd:23: 67:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:85:13:0E:44:A5:EE:4B:6D:B1:87:29:BF:AF:1D:19:E7:8D:A9:5A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.190.52.0/22 IPv6: 2804:676c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269627 Signature Algorithm: sha256WithRSAEncryption ba:f7:7e:73:d2:84:7f:5f:d2:c9:29:82:41:a2:f9:48:be:05: eb:ab:51:69:60:7b:aa:8d:6a:e2:7e:c3:c2:2c:4a:ca:c6:c8: 9b:b4:5b:7a:56:e1:e9:77:b8:ba:99:ef:02:8d:5e:de:77:c3: f2:49:62:ee:2a:7c:32:d8:14:4d:a5:bc:19:4c:bb:f3:73:d7: 6e:34:6f:ca:00:ee:c4:5e:6c:60:65:c5:48:f7:f9:2c:50:6d: c5:fa:7d:4d:7b:2c:1d:48:e9:c7:aa:e1:84:9f:4a:19:64:67: 1b:0d:8b:d7:0c:86:2b:fb:3d:64:8d:a7:b9:4c:d5:b7:d6:8a: 1f:de:14:ed:80:55:01:4e:ca:f2:04:e8:39:01:a5:f6:74:f6: 8c:38:3f:0e:a0:5e:13:1f:4c:7a:87:6b:44:75:78:58:b6:db: 9a:20:e9:cc:4a:f1:a3:3d:08:67:82:0f:56:93:67:86:91:b7: 68:0b:76:98:cd:18:ee:4f:31:be:0f:f2:ee:ad:39:b5:88:4b: 52:87:f1:45:af:6d:55:6d:ab:05:ae:ad:37:33:fa:8a:55:71: 95:ab:a7:c4:75:9a:e6:c0:a5:4b:a4:d8:5e:c6:5a:f9:e3:45: 63:46:1f:43:ea:a2:7f:31:51:0d:25:be:b9:33:2f:0b:1c:41: 62:48:59:1e -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUUkoGTFsM/5ytIJguR094JUTya44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNzQ3MTRaFw0yNTA0MDMxNzUyMTRaMDMxMTAvBgNV BAMTKEQ4ODUxMzBFNDRBNUVFNEI2REIxODcyOUJGQUYxRDE5RTc4REE5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZ5DeQOfI/j0kjehI9BETABII OFxebRTVFgdV8O2O+qDoPGfoDBTHuM0JgGiUqMV1SgrqLDE/mll5dIuITG1VQ2oE FVWVrmoFXsEdqiiHnsfYmwFuvf7Z+bYW1ByEKbIvwV+sBADxz2Z6/a0kl64vNEb+ SrceOi9VIdy2IhsuWokl0nSCT4qc7NJCECfLwd4Q8KBAAiXTNAn27DwkYpJY6u0T ypD7rZIIEfBIs6zFVccd2Ol6h+CRm//QLoIQxAiSsG7986/ARX0woQj/hrk4k4ft OVAOkyrgg+cRnLjIG3hFBJBhOibkqCvB1BRGVzKrx7HVBQqfC9fL3ibNI2e7AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYhRMORKXuS22x hym/rx0Z542pWjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGcz eGtpYnJDODdOTkY0aFNDSlZlS2lXaXVhbUhyTURIcFdlOHBVenBSem8vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGcz eGtpYnJDODdOTkY0aFNDSlZlS2lXaXVhbUhyTURIcFdlOHBVenBSem8vMS9EODg1 MTMwRTQ0QTVFRTRCNkRCMTg3MjlCRkFGMUQxOUU3OERBOTVBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItvjQwDQQCAAIwBwMFACgEZ2wwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBB07MA0GCSqGSIb3DQEBCwUAA4IBAQC6935z0oR/X9LJKYJB ovlIvgXrq1FpYHuqjWrifsPCLErKxsibtFt6VuHpd7i6me8CjV7ed8PySWLuKnwy 2BRNpbwZTLvzc9duNG/KAO7EXmxgZcVI9/ksUG3F+n1NeywdSOnHquGEn0oZZGcb DYvXDIYr+z1kjae5TNW31oof3hTtgFUBTsryBOg5AaX2dPaMOD8OoF4TH0x6h2tE dXhYttuaIOnMSvGjPQhngg9Wk2eGkbdoC3aYzRjuTzG+D/LurTm1iEtSh/FFr21V basFrq03M/qKVXGVq6fEdZrmwKVLpNhexlr540VjRh9D6qJ/MVENJb65My8LHEFi SFke -----END CERTIFICATE-----Generated at Sat Sep 28 20:54:05 2024 by rpki-client on console-ams.rpki-client.org