$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer File: DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer (raw, json) Hash identifier: Cw0h0Bas8p0+D5tjOIUGypsOlU1migXduhRyie/uN+4= Subject key identifier: DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 58C8F683DB962DA93DCE27B5ECABED10288C7BDC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft caRepository: rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 17:26:49 +0000 Certificate not after: Thu 03 Apr 2025 17:31:49 +0000 Subordinate resources: AS: 53048 IP: 132.255.176.0/22 IP: 177.137.48.0/21 IP: 187.73.96.0/20 IP: 2804:1b04::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 05:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c8:f6:83:db:96:2d:a9:3d:ce:27:b5:ec:ab:ed:10:28:8c:7b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 17:26:49 2024 GMT Not After : Apr 3 17:31:49 2025 GMT Subject: CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:57:c2:8f:05:92:ba:0c:8a:f3:48:83:c4: 62:84:98:2e:c2:e6:e6:b9:80:d5:7b:cf:2c:2c:4b: 25:d1:93:a6:40:7c:6a:e4:90:36:a5:33:4c:fa:7b: b5:4b:e1:d4:4c:c9:41:7a:4f:18:e3:b8:db:39:7a: 60:7b:0f:3a:90:b1:92:62:42:3c:72:13:67:2c:2a: 6d:ec:39:67:66:4e:39:6f:3c:6e:3e:97:f1:f0:27: cb:fb:7a:50:72:f8:a6:13:f3:bc:bf:fd:f6:e8:96: 3c:29:e7:51:16:3c:55:be:53:8e:07:f9:9c:f3:18: cf:59:71:44:50:29:ce:37:ac:c9:41:20:2d:ac:be: 9a:51:30:dc:16:de:fd:26:8b:c6:c8:85:a6:78:0b: 14:2e:a2:db:89:0a:0b:cc:6b:30:9f:1c:d2:0a:1d: 7e:ef:2a:e0:57:89:55:e0:47:22:4f:1c:39:b2:7f: 3f:90:1f:10:87:69:dd:5e:8a:3a:75:19:2c:55:10: bf:32:b8:b6:71:f8:e6:ce:fe:41:bd:11:40:9b:2c: ed:35:1d:8f:57:98:c8:ea:d1:18:db:75:f2:83:bf: 64:c5:1b:55:62:11:55:0d:ff:06:62:a6:f2:cc:a5: 4f:66:c9:85:e1:9c:b8:16:e2:36:62:8d:69:44:3e: f5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.176.0/22 177.137.48.0/21 187.73.96.0/20 IPv6: 2804:1b04::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53048 Signature Algorithm: sha256WithRSAEncryption 87:ab:28:41:10:0e:1b:09:b8:10:35:94:20:59:8f:e9:fc:61: b5:72:58:7c:f8:ff:86:ea:f9:ab:69:7f:ad:99:02:87:bf:fd: d8:de:50:6e:4f:ac:07:4f:11:68:fd:aa:f5:6c:c9:f0:8a:40: 3c:d9:8a:16:e3:cc:9e:ca:5f:a7:f9:ac:9f:62:0f:fe:4c:ac: 2d:d3:aa:24:39:ef:a7:be:b5:b1:3b:a2:b1:cb:4b:a7:95:99: 6e:c4:7f:ac:d6:05:56:8d:ff:dc:ff:a7:32:c9:51:c8:e9:95: 31:63:d6:3b:fe:d5:90:3d:2e:59:8c:2f:10:a6:34:fd:66:2d: a1:64:07:04:88:6e:a3:21:48:1c:6d:54:c6:27:fe:76:6e:73: 1d:45:75:56:a4:48:54:07:a5:dc:29:43:0a:47:87:20:07:7e: 17:25:20:52:be:07:66:8f:47:ac:c9:04:70:13:f9:d8:87:e3: a5:7a:38:2d:9f:05:cb:ed:a0:16:17:d9:f8:a9:63:32:c5:2b: ee:3a:9a:d1:b4:fb:b9:ba:15:a7:f5:a4:17:23:2f:77:8c:23: 6f:2e:c9:87:f5:80:6a:42:35:30:9f:7d:c0:d7:49:25:f0:b4: c5:b5:d3:60:a2:31:70:57:66:32:fe:f4:47:e7:f0:50:2c:23: c1:2c:59:6b -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUWMj2g9uWLak9zie17KvtECiMe9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNzI2NDlaFw0yNTA0MDMxNzMxNDlaMDMxMTAvBgNV BAMTKERCMEZCNURDMTAyMjQwOEQzQjMyRDdFOTQ3QjAwMzFFNUVDMThDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv11fCjwWSugyK80iDxGKEmC7C 5ua5gNV7zywsSyXRk6ZAfGrkkDalM0z6e7VL4dRMyUF6TxjjuNs5emB7DzqQsZJi QjxyE2csKm3sOWdmTjlvPG4+l/HwJ8v7elBy+KYT87y//fboljwp51EWPFW+U44H +ZzzGM9ZcURQKc43rMlBIC2svppRMNwW3v0mi8bIhaZ4CxQuotuJCgvMazCfHNIK HX7vKuBXiVXgRyJPHDmyfz+QHxCHad1eijp1GSxVEL8yuLZx+ObO/kG9EUCbLO01 HY9XmMjq0RjbdfKDv2TFG1ViEVUN/wZipvLMpU9myYXhnLgW4jZijWlEPvUpAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbD7XcECJAjTsy 1+lHsAMeXsGMxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1g1 dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNFQWkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNY NXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzEvREIw RkI1REMxMDIyNDA4RDNCMzJEN0U5NDdCMDAzMUU1RUMxOENDNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQChP+wAwQDsYkwAwQEu0lgMA0EAgACMAcDBQAoBBsE MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDPODANBgkqhkiG9w0BAQsFAAOCAQEA h6soQRAOGwm4EDWUIFmP6fxhtXJYfPj/hur5q2l/rZkCh7/92N5Qbk+sB08RaP2q 9WzJ8IpAPNmKFuPMnspfp/msn2IP/kysLdOqJDnvp761sTuisctLp5WZbsR/rNYF Vo3/3P+nMslRyOmVMWPWO/7VkD0uWYwvEKY0/WYtoWQHBIhuoyFIHG1Uxif+dm5z HUV1VqRIVAel3ClDCkeHIAd+FyUgUr4HZo9HrMkEcBP52IfjpXo4LZ8Fy+2gFhfZ +KljMsUr7jqa0bT7uboVp/WkFyMvd4wjby7Jh/WAakI1MJ99wNdJJfC0xbXTYKIx cFdmMv70R+fwUCwjwSxZaw== -----END CERTIFICATE-----Generated at Mon Jul 1 02:59:40 2024 by rpki-client on console-fra.rpki-client.org