$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer File: DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer (raw, json) Hash identifier: 7xJ9FCkHGLXjIjeEBisYOQceky8ennUolkEPia/Akcs= Subject key identifier: DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 39076B04818775FC4075F378D6EE1320D16D2E5E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft caRepository: rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 22:12:27 +0000 Certificate not after: Thu 03 Apr 2025 22:17:27 +0000 Subordinate resources: AS: 266073 IP: 45.4.148.0/22 IP: 2804:3a24::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:07:6b:04:81:87:75:fc:40:75:f3:78:d6:ee:13:20:d1:6d:2e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 22:12:27 2024 GMT Not After : Apr 3 22:17:27 2025 GMT Subject: CN=DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:f8:05:04:b8:f0:ab:fb:d9:e7:04:c5:18: fa:dd:7a:ee:28:3b:ee:80:a9:84:46:c3:d7:fd:9d: e8:08:1d:74:f1:12:64:6b:4b:54:bd:69:13:0f:93: bd:66:af:c6:42:a6:42:dd:aa:ff:d2:3d:9a:53:56: bc:ad:97:d2:34:75:f8:cf:43:35:51:02:07:18:3d: 5a:d0:84:4b:2c:66:e6:a4:dc:5a:69:ce:6a:8d:3f: 04:3c:57:1a:c1:ac:bd:4b:c0:60:67:67:b6:65:15: 4a:00:f1:f8:bc:6d:9e:9a:6a:36:b7:ce:87:79:17: a7:79:45:04:86:4f:15:82:88:d3:c6:64:c7:b8:05: 83:f2:a9:67:f6:30:d1:ee:1c:bc:39:69:2b:38:0e: 78:d2:8d:f5:b6:c8:3b:65:75:04:38:fa:a2:2b:d2: 9b:2d:a9:b2:85:74:70:72:bd:35:65:a2:ce:de:38: d8:95:bb:55:72:a2:67:f9:0e:6c:8c:47:0b:8b:86: 50:f6:49:d7:7c:36:15:dc:b2:95:d0:d9:6f:d6:ab: 2b:a2:37:37:bf:8d:c8:45:a0:01:3a:e0:7c:ee:c2: 00:21:a7:af:63:36:68:e4:f5:72:14:fc:73:24:32: 9b:8c:37:95:10:5c:87:11:94:60:89:4c:10:78:f4: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.148.0/22 IPv6: 2804:3a24::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266073 Signature Algorithm: sha256WithRSAEncryption 4d:bd:dd:b2:4a:b1:df:89:ac:ca:d8:77:bc:bb:4c:20:22:69: 8f:e0:52:89:df:93:cb:4a:af:bb:62:4a:87:94:47:71:75:62: 5f:a9:3e:a2:b8:25:88:d7:aa:cc:e0:aa:d6:5f:be:e3:fd:1c: 6d:90:b9:8a:7d:c9:f9:67:bc:8f:2b:d7:58:b9:1f:62:d5:ec: b8:b6:27:ba:89:04:cc:fd:5e:88:bf:67:be:f6:c9:91:1e:75: ea:38:94:02:dc:72:45:84:14:13:59:5f:94:a8:07:7e:35:6b: 2a:1d:a9:5a:c0:2f:c2:4c:a6:11:97:24:ac:37:3d:8b:f3:48: fa:1c:1e:ae:7f:f4:b0:b5:4f:eb:53:2e:4b:17:16:ad:01:9b: e4:ce:8d:d0:dc:f4:08:0e:31:84:cd:57:31:db:81:e2:d9:c6: bf:2b:44:44:4d:03:e2:92:89:ad:43:5b:ef:f5:fc:e2:a6:62: 5c:20:f3:26:72:cc:40:66:9b:d7:13:0a:d7:a0:ad:7c:77:16: 70:8f:9d:ae:05:d8:5d:34:2b:37:61:bd:09:2c:31:f8:a8:02: c7:97:cf:66:ac:73:e6:cd:57:98:94:15:f4:dc:6d:88:43:81: 0d:27:44:c4:f1:14:b0:75:36:16:83:86:b8:13:6b:fa:24:f2: 6a:f0:e5:e5 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOQdrBIGHdfxAdfN41u4TINFtLl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQyMjEyMjdaFw0yNTA0MDMyMjE3MjdaMDMxMTAvBgNV BAMTKERBNDEwN0FGMUQ5RkY3MEU5RUQ3QjlBMkU4RTM1ODA4QkE5MjFDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe3vgFBLjwq/vZ5wTFGPrdeu4o O+6AqYRGw9f9negIHXTxEmRrS1S9aRMPk71mr8ZCpkLdqv/SPZpTVrytl9I0dfjP QzVRAgcYPVrQhEssZuak3FppzmqNPwQ8VxrBrL1LwGBnZ7ZlFUoA8fi8bZ6aaja3 zod5F6d5RQSGTxWCiNPGZMe4BYPyqWf2MNHuHLw5aSs4DnjSjfW2yDtldQQ4+qIr 0pstqbKFdHByvTVlos7eONiVu1Vyomf5DmyMRwuLhlD2Sdd8NhXcspXQ2W/Wqyui Nze/jchFoAE64HzuwgAhp69jNmjk9XIU/HMkMpuMN5UQXIcRlGCJTBB49EA3AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTaQQevHZ/3Dp7X uaLo41gIupIchTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3dk ZjFYb1A1UldvaXpNa25TQm1rM0NZS290dTk3ZlZ0NmdNUkdkS2o4ZGUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N3 ZGYxWG9QNVJXb2l6TWtuU0JtazNDWUtvdHU5N2ZWdDZnTVJHZEtqOGRlLzEvREE0 MTA3QUYxRDlGRjcwRTlFRDdCOUEyRThFMzU4MDhCQTkyMUM4NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLQSUMA0EAgACMAcDBQAoBDokMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPWTANBgkqhkiG9w0BAQsFAAOCAQEATb3dskqx34msyth3 vLtMICJpj+BSid+Ty0qvu2JKh5RHcXViX6k+orgliNeqzOCq1l++4/0cbZC5in3J +We8jyvXWLkfYtXsuLYnuokEzP1eiL9nvvbJkR516jiUAtxyRYQUE1lflKgHfjVr Kh2pWsAvwkymEZckrDc9i/NI+hwern/0sLVP61MuSxcWrQGb5M6N0Nz0CA4xhM1X MduB4tnGvytERE0D4pKJrUNb7/X84qZiXCDzJnLMQGab1xMK16CtfHcWcI+drgXY XTQrN2G9CSwx+KgCx5fPZqxz5s1XmJQV9NxtiEOBDSdExPEUsHU2FoOGuBNr+iTy avDl5Q== -----END CERTIFICATE-----Generated at Sat Jun 1 23:01:15 2024 by rpki-client on console-ams.rpki-client.org