$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer File: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer (raw, json) Hash identifier: moePZ5jZJLdujLd+RkdANhBW9aWBxOAISPwmSBo2fRc= Subject key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3904A90E719296B616DB69666F6549D5C3460F7A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft caRepository: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 20:30:05 +0000 Certificate not after: Thu 03 Apr 2025 20:35:05 +0000 Subordinate resources: AS: 262966 IP: 168.121.248.0/22 IP: 186.250.28.0/22 IP: 2804:ea8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 14:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:04:a9:0e:71:92:96:b6:16:db:69:66:6f:65:49:d5:c3:46:0f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 20:30:05 2024 GMT Not After : Apr 3 20:35:05 2025 GMT Subject: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:2b:fa:c9:5c:f5:e4:9c:0c:26:30:97:72: ee:31:58:d4:23:72:82:d4:3d:64:52:ee:5b:8b:be: 40:a5:91:b0:7b:a3:54:bc:cb:f7:6b:f9:33:8c:59: 28:9d:b7:34:9b:14:e0:22:9b:c9:68:60:b9:0e:48: ab:55:46:30:c2:df:74:60:51:9b:2b:36:91:55:b3: 8c:f4:ba:72:4e:f2:fd:d9:8a:0a:95:5d:30:21:69: 61:53:2f:5c:a4:85:51:6b:e8:8f:eb:8c:20:7d:bb: c5:39:49:28:fa:5b:c2:41:92:10:d3:2b:53:7f:07: 98:ca:ca:f4:70:0f:9c:a1:05:76:5b:7a:c0:a1:2b: 3a:b5:47:10:c1:34:47:bc:fc:ac:47:56:a6:9c:54: 18:ba:66:3b:fa:ce:e0:6d:98:0e:1b:a4:1b:24:19: 66:90:13:6a:12:05:e4:4f:cc:a8:0f:39:d2:b2:ce: af:a3:2b:81:71:6d:c6:62:64:a3:58:5f:d8:3f:f9: f7:b5:3e:9b:97:da:91:93:ed:a7:d5:6f:06:ae:cc: d2:28:af:03:b4:a0:e6:9e:87:79:b7:79:62:65:a4: be:89:f6:76:6c:b1:39:8f:3b:4a:10:9d:94:9c:8e: 6d:3b:10:67:d1:e8:78:52:44:b8:6a:a9:63:04:29: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.248.0/22 186.250.28.0/22 IPv6: 2804:ea8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262966 Signature Algorithm: sha256WithRSAEncryption 87:43:02:3a:98:bf:41:34:eb:23:07:f7:d3:90:eb:3c:0f:f5: 0f:ba:82:97:e5:7c:68:ca:06:0e:d2:99:1b:4f:24:32:f1:a0: 00:db:eb:7d:b5:e0:57:1a:de:33:94:0c:e2:a9:51:44:4e:81: 64:8a:71:7b:cb:24:3a:27:53:c9:66:a6:84:9b:45:d6:80:d9: 8e:62:6e:12:95:14:85:c0:55:5d:a0:7a:46:a5:2e:32:c0:11: eb:3b:42:2a:2b:ff:de:59:37:f5:08:53:2e:77:e8:24:8a:98: 4f:52:8b:05:23:65:1c:08:c5:de:05:9b:5a:6a:1d:c8:51:6c: cf:a5:27:9b:30:a6:bf:f4:14:a2:ac:8e:33:08:f3:a0:7e:b1: e7:ce:bc:bd:09:97:82:d2:aa:1a:ba:a2:f0:73:01:76:c5:16: b4:16:40:54:b7:8a:87:cd:6a:27:70:58:61:79:68:cd:88:c8: 25:74:4e:99:c1:14:8a:32:c6:44:92:c6:0d:73:49:4c:58:e4: 41:29:a5:1e:be:7a:3b:ae:a5:be:02:1a:93:a2:10:de:52:6f: 6e:b2:bb:9e:7a:45:0f:6c:5e:43:c2:9e:fd:1d:56:50:93:4b: 70:88:4e:90:d4:86:85:2d:84:f7:ee:ef:2e:64:52:f6:21:92: 76:ed:fb:9a -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUOQSpDnGSlrYW22lmb2VJ1cNGD3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQyMDMwMDVaFw0yNTA0MDMyMDM1MDVaMDMxMTAvBgNV BAMTKERCNjAxMTNEQjg0N0VFNEZERkVDRjhFN0IzMkQ4Q0IwQTI4QTQyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ECv6yVz15JwMJjCXcu4xWNQj coLUPWRS7luLvkClkbB7o1S8y/dr+TOMWSidtzSbFOAim8loYLkOSKtVRjDC33Rg UZsrNpFVs4z0unJO8v3ZigqVXTAhaWFTL1ykhVFr6I/rjCB9u8U5SSj6W8JBkhDT K1N/B5jKyvRwD5yhBXZbesChKzq1RxDBNEe8/KxHVqacVBi6Zjv6zuBtmA4bpBsk GWaQE2oSBeRPzKgPOdKyzq+jK4FxbcZiZKNYX9g/+fe1PpuX2pGT7afVbwauzNIo rwO0oOaeh3m3eWJlpL6J9nZssTmPO0oQnZScjm07EGfR6HhSRLhqqWMEKV1RAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbYBE9uEfuT9/s +OezLYywoopCKTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2sz ZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01zQ2ovMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2sz ZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01zQ2ovMS9EQjYw MTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKoefgDBAK6+hwwDQQCAAIwBwMFACgEDqgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAM2MA0GCSqGSIb3DQEBCwUAA4IBAQCHQwI6mL9B NOsjB/fTkOs8D/UPuoKX5XxoygYO0pkbTyQy8aAA2+t9teBXGt4zlAziqVFEToFk inF7yyQ6J1PJZqaEm0XWgNmOYm4SlRSFwFVdoHpGpS4ywBHrO0IqK//eWTf1CFMu d+gkiphPUosFI2UcCMXeBZtaah3IUWzPpSebMKa/9BSirI4zCPOgfrHnzry9CZeC 0qoauqLwcwF2xRa0FkBUt4qHzWoncFhheWjNiMgldE6ZwRSKMsZEksYNc0lMWORB KaUevno7rqW+AhqTohDeUm9usrueekUPbF5Dwp79HVZQk0twiE6Q1IaFLYT37u8u ZFL2IZJ27fua -----END CERTIFICATE-----Generated at Sat Sep 28 15:16:10 2024 by rpki-client on console-fra.rpki-client.org