$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.cer File: DBC91D9240E3E033B5E4C0F07A164AE264F74272.cer (raw, json) Hash identifier: kukG+XvMAh7bGzOVFSAsD+nMhPHnGcnOexkICIwVwMQ= Subject key identifier: DB:C9:1D:92:40:E3:E0:33:B5:E4:C0:F0:7A:16:4A:E2:64:F7:42:72 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 24BE6D3AE7108C93044117FFB021A1712CD37E6D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.mft caRepository: rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 00:55:12 +0000 Certificate not after: Fri 04 Apr 2025 01:00:12 +0000 Subordinate resources: AS: 271152 IP: 179.42.140.0/22 IP: 2804:7710::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 12:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:be:6d:3a:e7:10:8c:93:04:41:17:ff:b0:21:a1:71:2c:d3:7e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 5 00:55:12 2024 GMT Not After : Apr 4 01:00:12 2025 GMT Subject: CN=DBC91D9240E3E033B5E4C0F07A164AE264F74272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:05:93:e8:7b:20:ff:1f:0b:40:bd:e0:61: d3:68:22:b3:21:a4:b5:fc:d6:97:62:74:b9:bc:5b: f5:03:37:f9:bf:04:22:df:94:a8:55:63:7f:e6:65: a9:61:da:35:84:14:fb:f1:f3:0a:6a:61:c3:ae:59: cb:46:46:d0:82:f7:e2:fb:6a:02:ed:da:81:12:27: da:af:f4:35:5b:7e:5f:00:bb:23:2d:4e:08:5d:77: 25:91:a0:22:b4:1b:7b:47:7e:2d:4f:0e:f8:de:3e: 16:a9:d0:e3:a3:21:80:ee:49:ce:9b:01:8a:fe:16: 29:c5:2a:46:ec:54:96:08:16:8b:f6:00:b8:94:0e: 82:a9:37:a1:94:70:9a:3e:b0:ce:56:2f:be:43:17: 4f:15:fa:0d:8a:46:a8:88:94:71:50:d2:57:c9:dc: 0d:d3:ad:5b:35:6c:1a:bd:2b:94:18:73:8c:9a:bb: aa:26:de:fd:94:b6:a8:91:40:3f:ba:84:c1:18:48: ae:17:87:a9:7f:f4:48:91:f3:50:eb:0c:7e:ed:ae: 7a:fb:a5:81:58:7a:f1:d9:69:c7:44:14:24:81:97: 3e:ab:2c:02:5c:3c:bc:46:63:90:83:52:1f:4e:f9: c3:dc:cb:65:c0:4b:22:d9:4d:12:5c:6b:80:6b:e1: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:C9:1D:92:40:E3:E0:33:B5:E4:C0:F0:7A:16:4A:E2:64:F7:42:72 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.42.140.0/22 IPv6: 2804:7710::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271152 Signature Algorithm: sha256WithRSAEncryption 4f:3d:46:17:d9:87:4d:15:62:ea:1c:98:3b:22:24:74:7e:4f: 43:8a:bf:8d:fe:b1:a1:f7:4b:ed:70:79:1b:5a:23:b4:a9:18: 95:a9:91:4e:fa:95:67:13:60:c9:88:8a:29:69:72:f0:64:61: d7:93:ab:5d:f6:6d:14:07:5d:92:0e:a6:60:56:8a:c6:28:cd: 35:a0:34:8d:fa:04:b9:c6:48:e3:e4:c8:a2:b9:8e:8c:f8:f1: d6:d0:5c:7a:6a:99:fb:fe:50:86:70:a6:af:e6:27:ed:af:3a: 1d:68:f4:ee:a6:51:ad:c5:17:ca:45:34:18:4c:2c:d7:e4:8a: 5d:05:cf:26:78:2f:68:9a:49:1f:d9:1c:a1:e3:f3:51:77:0e: a8:2e:f9:74:1d:07:3e:79:f6:8b:6b:6b:db:46:6d:6c:ac:82: f2:37:a3:9d:4c:09:ff:b5:ae:5f:75:9b:72:30:53:68:d0:1a: 2b:b0:fe:ae:d4:25:51:97:3b:32:39:70:48:69:88:2a:63:82: db:84:ff:3f:c5:23:59:49:a3:9b:aa:cf:3f:1e:20:d2:51:14: 41:f2:37:03:d4:21:bd:b9:5b:79:77:9b:ca:aa:4d:47:3b:dc: 5e:e6:af:9c:78:6b:f1:e6:14:6c:95:d1:d9:b9:8b:78:bb:97: ad:f4:01:78 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUJL5tOucQjJMEQRf/sCGhcSzTfm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDUwMDU1MTJaFw0yNTA0MDQwMTAwMTJaMDMxMTAvBgNV BAMTKERCQzkxRDkyNDBFM0UwMzNCNUU0QzBGMDdBMTY0QUUyNjRGNzQyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6AWT6Hsg/x8LQL3gYdNoIrMh pLX81pdidLm8W/UDN/m/BCLflKhVY3/mZalh2jWEFPvx8wpqYcOuWctGRtCC9+L7 agLt2oESJ9qv9DVbfl8AuyMtTghddyWRoCK0G3tHfi1PDvjePhap0OOjIYDuSc6b AYr+FinFKkbsVJYIFov2ALiUDoKpN6GUcJo+sM5WL75DF08V+g2KRqiIlHFQ0lfJ 3A3TrVs1bBq9K5QYc4yau6om3v2UtqiRQD+6hMEYSK4Xh6l/9EiR81DrDH7trnr7 pYFYevHZacdEFCSBlz6rLAJcPLxGY5CDUh9O+cPcy2XASyLZTRJca4Br4bFjAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbyR2SQOPgM7Xk wPB6FkriZPdCcjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRThG bkNLU0doajJ6MWRUQkJyV0hGeFRFVlZ3MVpLaEZRUFlKUG5tQnc0Y2ovMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRThG bkNLU0doajJ6MWRUQkJyV0hGeFRFVlZ3MVpLaEZRUFlKUG5tQnc0Y2ovMS9EQkM5 MUQ5MjQwRTNFMDMzQjVFNEMwRjA3QTE2NEFFMjY0Rjc0MjcyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKzKowwDQQCAAIwBwMFACgEdxAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCMwMA0GCSqGSIb3DQEBCwUAA4IBAQBPPUYX2YdNFWLqHJg7 IiR0fk9Dir+N/rGh90vtcHkbWiO0qRiVqZFO+pVnE2DJiIopaXLwZGHXk6td9m0U B12SDqZgVorGKM01oDSN+gS5xkjj5MiiuY6M+PHW0Fx6apn7/lCGcKav5iftrzod aPTuplGtxRfKRTQYTCzX5IpdBc8meC9omkkf2Ryh4/NRdw6oLvl0HQc+efaLa2vb Rm1srILyN6OdTAn/ta5fdZtyMFNo0BorsP6u1CVRlzsyOXBIaYgqY4LbhP8/xSNZ SaObqs8/HiDSURRB8jcD1CG9uVt5d5vKqk1HO9xe5q+ceGvx5hRsldHZuYt4u5et 9AF4 -----END CERTIFICATE-----Generated at Tue Jun 18 13:55:39 2024 by rpki-client on console-fra.rpki-client.org