$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer File: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer (raw, json) Hash identifier: p5A7tdA2HZDkLtFwiI7JJIm+8GGEnRKFpO5V4wfqLKU= Subject key identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 63EFDDFFB5AE84F330A6F3EF4F858A6BDC8C8DDD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft caRepository: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:11 +0000 Certificate not after: Wed 02 Apr 2025 18:30:11 +0000 Subordinate resources: AS: 271489 IP: 181.232.200.0/22 IP: 2804:7c54::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ef:dd:ff:b5:ae:84:f3:30:a6:f3:ef:4f:85:8a:6b:dc:8c:8d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:11 2024 GMT Not After : Apr 2 18:30:11 2025 GMT Subject: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:63:45:02:e3:0d:21:92:49:c4:07:62:b5: df:01:22:fc:8c:46:ad:3d:73:08:96:65:f5:d1:a6: 80:ad:f1:a7:13:ac:2a:5b:45:15:b5:ce:e5:33:d0: 15:e8:b4:f5:2c:64:dd:d8:5d:63:40:95:04:5f:fd: 84:3a:38:a9:57:9a:2c:83:d8:e5:73:2e:67:84:7b: de:14:d6:c9:5c:65:4d:86:bc:97:12:ff:99:ef:36: 3b:89:c6:04:91:6f:3d:28:a3:ca:23:c7:e4:39:a7: b0:d1:32:80:2d:43:48:5a:5f:ef:e3:7c:dc:50:cb: 19:00:04:71:83:68:df:dc:7b:0e:90:ec:1d:1b:2b: 58:09:27:9e:94:47:bc:48:89:61:15:40:e9:48:01: fd:b6:ab:75:88:88:58:30:b6:d9:a6:d3:61:5f:87: 52:19:5f:b1:12:d4:f1:2f:9f:77:18:6a:d1:11:47: b5:fa:30:58:a2:f0:9b:0b:f2:eb:f6:76:1d:87:68: a7:0f:91:84:ae:98:f3:33:3f:96:5d:c3:85:80:90: 6f:ce:f5:ab:f5:09:94:33:45:64:25:72:07:6e:20: 21:56:7d:a3:f3:f6:0d:56:40:8a:e4:9d:34:e4:99: 9f:af:b5:70:f3:67:34:10:9c:b7:e5:5e:71:29:f5: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.200.0/22 IPv6: 2804:7c54::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271489 Signature Algorithm: sha256WithRSAEncryption 23:6e:2f:3e:22:0b:df:c1:2d:a5:39:5e:23:84:fc:fe:f2:ae: d6:4e:2a:a6:c8:b5:81:01:37:00:cf:f9:88:ba:53:c9:9f:11: f6:05:20:d1:df:d1:4c:06:18:fa:f0:1a:23:2d:14:ef:ce:48: ca:13:1c:ad:25:36:3c:53:14:67:38:71:b7:39:af:b6:66:61: a6:12:cd:13:af:63:76:7d:bd:95:9b:d7:7e:11:f5:9e:68:cb: 02:a8:dd:61:df:31:0a:2b:c4:41:54:ab:bb:99:14:ed:61:d7: a8:2b:3e:ce:7a:ba:bb:76:91:22:11:63:85:d8:12:11:92:a1: 29:3a:31:1b:9a:60:52:6a:67:a8:38:03:0f:c9:55:65:f7:c4: 73:46:31:d9:82:3f:2e:35:7b:be:74:d2:b4:97:2c:35:83:d4: 19:2f:e2:5d:e4:28:9f:b0:30:4a:cb:90:c3:e9:28:6e:7b:7b: f1:aa:39:22:32:34:79:78:d6:6d:40:1a:51:0a:c9:d6:f8:59: ef:2a:a9:59:64:f7:3e:5b:89:4b:25:84:ee:5c:b9:b3:19:fb: 83:e8:e5:55:76:40:ec:c4:44:95:66:35:ec:64:d7:3b:43:a1: 66:da:28:16:72:22:84:72:84:37:70:16:93:29:8f:39:28:cb: 65:c8:05:c2 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUY+/d/7WuhPMwpvPvT4WKa9yMjd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1MTFaFw0yNTA0MDIxODMwMTFaMDMxMTAvBgNV BAMTKERDRDdBMUFERDRERUJEMjNCMUM1RkFENUU2MEJDMjY5RDJBRDEwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40WNFAuMNIZJJxAditd8BIvyM Rq09cwiWZfXRpoCt8acTrCpbRRW1zuUz0BXotPUsZN3YXWNAlQRf/YQ6OKlXmiyD 2OVzLmeEe94U1slcZU2GvJcS/5nvNjuJxgSRbz0oo8ojx+Q5p7DRMoAtQ0haX+/j fNxQyxkABHGDaN/cew6Q7B0bK1gJJ56UR7xIiWEVQOlIAf22q3WIiFgwttmm02Ff h1IZX7ES1PEvn3cYatERR7X6MFii8JsL8uv2dh2HaKcPkYSumPMzP5Zdw4WAkG/O 9av1CZQzRWQlcgduICFWfaPz9g1WQIrknTTkmZ+vtXDzZzQQnLflXnEp9WCXAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTc16Gt1N69I7HF +tXmC8Jp0q0QDzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3NI a0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3NI a0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMS9EQ0Q3 QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK16MgwDQQCAAIwBwMFACgEfFQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCSBMA0GCSqGSIb3DQEBCwUAA4IBAQAjbi8+IgvfwS2lOV4j hPz+8q7WTiqmyLWBATcAz/mIulPJnxH2BSDR39FMBhj68BojLRTvzkjKExytJTY8 UxRnOHG3Oa+2ZmGmEs0Tr2N2fb2Vm9d+EfWeaMsCqN1h3zEKK8RBVKu7mRTtYdeo Kz7Oerq7dpEiEWOF2BIRkqEpOjEbmmBSameoOAMPyVVl98RzRjHZgj8uNXu+dNK0 lyw1g9QZL+Jd5CifsDBKy5DD6Shue3vxqjkiMjR5eNZtQBpRCsnW+FnvKqlZZPc+ W4lLJYTuXLmzGfuD6OVVdkDsxESVZjXsZNc7Q6Fm2igWciKEcoQ3cBaTKY85KMtl yAXC -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:36 2024 by rpki-client on console-fra.rpki-client.org