$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6.cer File: DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6.cer (raw, json) Hash identifier: R2E8vv+QV/3odvTW6He7TxMLUqgKAV/LZCsSer0WOQs= Subject key identifier: DD:E7:99:9F:E8:4D:BC:66:E6:3D:2E:F7:7A:A9:38:96:5C:8F:F5:F6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7A541ED9DA2D7A9CB239ECE53627B59B32DB3390 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/1/DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6.mft caRepository: rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 21:29:57 +0000 Certificate not after: Wed 02 Apr 2025 21:34:57 +0000 Subordinate resources: AS: 273748 IP: 2804:8bac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:54:1e:d9:da:2d:7a:9c:b2:39:ec:e5:36:27:b5:9b:32:db:33:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 21:29:57 2024 GMT Not After : Apr 2 21:34:57 2025 GMT Subject: CN=DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:bf:c9:15:90:fb:a6:2b:6d:33:f3:38:e1: bd:ac:66:2e:7d:f1:d0:b8:4e:3f:4e:26:23:05:d5: 8a:32:fc:bf:2b:4d:3b:e3:5f:5f:83:69:f9:ca:06: 34:ca:5b:cb:e2:e1:9a:4f:54:a9:10:87:64:04:5d: fa:e0:e7:06:7b:2b:fa:c4:cd:62:0e:f4:76:24:a4: bb:98:99:f8:f5:07:06:3c:03:d9:c2:68:2d:1f:ac: 48:de:b7:e7:26:ff:56:93:3e:0b:47:2b:c8:2e:81: 5f:20:a9:e4:17:d1:34:54:06:99:00:4a:7a:2a:cc: d4:67:e0:de:3f:38:82:f5:d8:85:d8:ce:ab:dd:7e: 8f:6d:7f:22:55:d1:5d:8b:e9:fa:9c:1c:05:bb:0a: 1f:94:21:63:42:f7:4c:0b:b3:a4:0c:9d:ea:56:b6: 5f:0b:9d:58:02:22:dd:25:aa:af:8a:ec:da:eb:23: 12:c0:67:5f:93:b9:61:4d:10:b7:f8:1b:74:38:0d: 9f:07:31:58:3f:4b:9f:08:9c:bb:fb:49:55:ec:cb: 44:c6:3a:61:fb:6a:55:d8:eb:0e:fa:66:ce:1e:91: 80:b4:4d:86:cf:29:e3:02:cd:0f:6a:81:43:87:ef: 61:8d:5e:8b:a1:12:49:72:a1:1a:3a:ca:84:14:3e: 64:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:E7:99:9F:E8:4D:BC:66:E6:3D:2E:F7:7A:A9:38:96:5C:8F:F5:F6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/1/DDE7999FE84DBC66E63D2EF77AA938965C8FF5F6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8bac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273748 Signature Algorithm: sha256WithRSAEncryption 10:d7:52:1b:55:8d:94:53:d5:46:5c:ff:da:52:e0:30:e0:45: 64:e4:f6:a4:63:87:10:b5:03:78:f7:de:4f:c9:12:75:04:b6: b0:ce:1a:f4:b8:bd:52:84:ed:05:73:d4:34:3a:6d:7a:d4:a0: f3:2e:5c:e7:b5:29:1e:3b:b5:a7:68:d2:b6:15:2d:32:90:d6: e2:9f:c3:c2:b4:e7:84:ca:3e:60:8c:43:96:b6:34:27:0b:c3: f1:1a:5a:e6:ec:ea:4f:20:5c:45:c6:74:d0:26:89:a7:e1:73: 78:ef:bf:c5:e5:bc:fa:80:17:a2:05:9d:9c:35:12:6d:ec:e4: 7e:dd:3a:24:b7:c0:74:48:f0:18:67:1f:66:e0:96:8e:96:4b: 1b:99:c3:d4:ae:65:42:0f:e0:7c:de:f7:76:f5:e0:84:cf:11: cd:f4:97:1a:a6:35:3b:0e:8c:38:41:06:7d:eb:b1:cd:61:1a: 5d:15:83:9b:21:05:8c:4c:87:41:67:76:18:b0:c4:06:33:5f: a3:59:3c:0e:2a:78:a3:01:ae:c7:60:23:28:8e:26:48:58:9a: 58:d9:78:0b:97:b8:47:c6:6f:b1:de:34:46:37:91:be:3a:5f: a2:0b:3f:a2:89:d9:f2:b4:d7:ec:9d:37:a1:e2:d7:e8:c5:7d: 0d:e8:6d:5c -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUelQe2dotepyyOezlNie1mzLbM5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMTI5NTdaFw0yNTA0MDIyMTM0NTdaMDMxMTAvBgNV BAMTKERERTc5OTlGRTg0REJDNjZFNjNEMkVGNzdBQTkzODk2NUM4RkY1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cL/JFZD7pittM/M44b2sZi59 8dC4Tj9OJiMF1Yoy/L8rTTvjX1+DafnKBjTKW8vi4ZpPVKkQh2QEXfrg5wZ7K/rE zWIO9HYkpLuYmfj1BwY8A9nCaC0frEjet+cm/1aTPgtHK8gugV8gqeQX0TRUBpkA SnoqzNRn4N4/OIL12IXYzqvdfo9tfyJV0V2L6fqcHAW7Ch+UIWNC90wLs6QMnepW tl8LnVgCIt0lqq+K7NrrIxLAZ1+TuWFNELf4G3Q4DZ8HMVg/S58InLv7SVXsy0TG OmH7alXY6w76Zs4ekYC0TYbPKeMCzQ9qgUOH72GNXouhEklyoRo6yoQUPmQ3AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTd55mf6E28ZuY9 Lvd6qTiWXI/19jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlRO WFZEcDJHS2NOUXZvVDEzcnlOb2dEMXV6RnM2eDNXRGVlZ0N4WTV1YWYvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZU TlhWRHAyR0tjTlF2b1QxM3J5Tm9nRDF1ekZzNngzV0RlZWdDeFk1dWFmLzEvRERF Nzk5OUZFODREQkM2NkU2M0QyRUY3N0FBOTM4OTY1QzhGRjVGNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASLrDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LVQwDQYJKoZIhvcNAQELBQADggEBABDXUhtVjZRT1UZc/9pS4DDgRWTk9qRjhxC1 A3j33k/JEnUEtrDOGvS4vVKE7QVz1DQ6bXrUoPMuXOe1KR47tado0rYVLTKQ1uKf w8K054TKPmCMQ5a2NCcLw/EaWubs6k8gXEXGdNAmiafhc3jvv8XlvPqAF6IFnZw1 Em3s5H7dOiS3wHRI8BhnH2bglo6WSxuZw9SuZUIP4Hze93b14ITPEc30lxqmNTsO jDhBBn3rsc1hGl0Vg5shBYxMh0FndhiwxAYzX6NZPA4qeKMBrsdgIyiOJkhYmljZ eAuXuEfGb7HeNEY3kb46X6ILP6KJ2fK01+ydN6Hi1+jFfQ3obVw= -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:52 2024 by rpki-client on console-ams.rpki-client.org