$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DE9CCE06E83BD5D6C431D0ABE8840F143543EDFF.cer File: DE9CCE06E83BD5D6C431D0ABE8840F143543EDFF.cer (raw, json) Hash identifier: XalV4NrEfSHxRG8Rc9+DNhHTxwM7jTpsUOASSxLWFs8= Subject key identifier: DE:9C:CE:06:E8:3B:D5:D6:C4:31:D0:AB:E8:84:0F:14:35:43:ED:FF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4C21C9375270321E9E3B132CCF60A67016953669 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/1/DE9CCE06E83BD5D6C431D0ABE8840F143543EDFF.mft caRepository: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:33 +0000 Certificate not after: Wed 02 Apr 2025 18:31:33 +0000 Subordinate resources: AS: 28165 IP: 131.255.100.0/22 IP: 138.59.148.0/22 IP: 138.204.92.0/22 IP: 170.81.168.0/22 IP: 177.184.192.0/20 IP: 177.222.16.0/20 IP: 187.62.208.0/20 IP: 191.240.144.0/20 IP: 200.229.224.0/20 IP: 2804:340::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 03:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:21:c9:37:52:70:32:1e:9e:3b:13:2c:cf:60:a6:70:16:95:36:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:33 2024 GMT Not After : Apr 2 18:31:33 2025 GMT Subject: CN=DE9CCE06E83BD5D6C431D0ABE8840F143543EDFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:87:cb:20:9f:53:53:8b:bc:ad:df:5f:61: 9e:1d:d1:6f:35:e9:2e:1d:b5:a1:15:85:77:75:f0: ba:c7:a8:2e:18:bb:28:a5:65:8b:6e:e5:dc:a9:26: 72:4e:bf:e2:08:45:bb:ee:a5:29:2e:35:f2:08:5b: 32:9d:83:d3:9a:2d:2f:74:b9:13:85:17:97:92:60: 78:ff:94:47:45:fe:0c:25:7c:3c:24:83:3c:ae:7f: 65:03:9b:6e:bd:c4:5a:17:9f:db:c4:bc:8d:51:1f: e8:de:ee:1b:77:9b:b3:fd:21:7e:24:58:c0:83:0e: 4d:0a:b3:09:dd:80:b9:d6:e8:02:4e:6d:f6:ee:c8: c6:34:79:8a:1b:79:b6:e5:39:73:61:c3:d0:d4:2b: de:eb:79:1d:71:83:84:2a:ac:39:bc:33:91:a3:f6: 79:6b:f3:48:d4:c3:02:93:a5:bf:5b:28:43:4b:f0: 64:cb:85:a2:3b:00:cc:65:57:43:02:8b:f9:a8:a4: cb:81:1c:4b:52:cf:e7:5c:72:b6:b0:a1:c1:16:7a: 04:58:0d:39:4c:ac:5e:83:6e:01:0f:35:c9:0f:71: 27:3e:60:01:8f:d6:ef:93:ab:25:4e:52:5a:c8:56: e8:cf:5b:d7:bd:f5:8c:85:a0:75:2c:4a:1e:84:e1: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:9C:CE:06:E8:3B:D5:D6:C4:31:D0:AB:E8:84:0F:14:35:43:ED:FF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/1/DE9CCE06E83BD5D6C431D0ABE8840F143543EDFF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.100.0/22 138.59.148.0/22 138.204.92.0/22 170.81.168.0/22 177.184.192.0/20 177.222.16.0/20 187.62.208.0/20 191.240.144.0/20 200.229.224.0/20 IPv6: 2804:340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28165 Signature Algorithm: sha256WithRSAEncryption 1d:f6:fa:98:a7:96:b2:cf:24:49:8b:0b:6f:fb:c0:fc:b1:1c: 0b:db:23:be:c2:db:54:c4:49:dc:a8:df:fc:8b:94:11:dd:ec: ec:e3:da:42:f0:95:c5:7f:86:d2:3d:9c:97:b3:d3:53:f3:cb: d9:eb:20:3e:ee:62:8f:4f:f2:bb:a4:98:49:dc:50:84:74:fa: 73:1e:00:ea:8a:d6:9b:f1:10:33:72:06:42:8b:bf:c0:17:9b: 2e:e8:f0:92:c7:fb:83:1e:1d:4e:33:78:8d:3f:43:14:00:58: 78:74:49:54:d8:d7:5b:96:20:d1:6f:3a:70:35:d7:26:8e:e2: d6:9c:f4:6c:ca:b2:92:23:ab:58:b0:4f:91:76:5d:55:28:a2: 3b:80:c3:19:18:44:ac:31:11:6d:f0:dd:21:e4:30:11:71:82: c1:f9:b9:26:8a:bd:57:35:05:5e:15:1d:77:44:6d:9c:6b:2f: db:03:12:75:fa:5e:b7:11:5f:75:ff:0a:aa:fd:4e:5e:80:7a: 38:1d:15:8c:1b:6b:85:3e:12:16:f3:a5:44:b7:b2:74:64:6d: 46:f9:dc:c1:d7:da:25:ea:d8:11:68:50:d2:e8:23:a3:de:ca: 7d:dd:d0:0a:41:2f:5e:eb:8d:81:60:d9:1b:57:d2:15:1b:3a: e2:45:61:cd -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUTCHJN1JwMh6eOxMsz2CmcBaVNmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2MzNaFw0yNTA0MDIxODMxMzNaMDMxMTAvBgNV BAMTKERFOUNDRTA2RTgzQkQ1RDZDNDMxRDBBQkU4ODQwRjE0MzU0M0VERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpYfLIJ9TU4u8rd9fYZ4d0W81 6S4dtaEVhXd18LrHqC4YuyilZYtu5dypJnJOv+IIRbvupSkuNfIIWzKdg9OaLS90 uROFF5eSYHj/lEdF/gwlfDwkgzyuf2UDm269xFoXn9vEvI1RH+je7ht3m7P9IX4k WMCDDk0KswndgLnW6AJObfbuyMY0eYobebblOXNhw9DUK97reR1xg4QqrDm8M5Gj 9nlr80jUwwKTpb9bKENL8GTLhaI7AMxlV0MCi/mopMuBHEtSz+dccrawocEWegRY DTlMrF6DbgEPNckPcSc+YAGP1u+TqyVOUlrIVujPW9e99YyFoHUsSh6E4X9NAgMB AAGjggNpMIIDZTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTenM4G6DvV1sQx 0KvohA8UNUPt/zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDJN UlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXprb0QvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Qy TVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzEvREU5 Q0NFMDZFODNCRDVENkM0MzFEMEFCRTg4NDBGMTQzNTQzRURGRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEH AQH/BE8wTTA8BAIAATA2AwQCg/9kAwQCijuUAwQCisxcAwQCqlGoAwQEsbjAAwQE sd4QAwQEuz7QAwQEv/CQAwQEyOXgMA0EAgACMAcDBQAoBANAMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm4FMA0GCSqGSIb3DQEBCwUAA4IBAQAd9vqYp5ayzyRJiwtv +8D8sRwL2yO+wttUxEncqN/8i5QR3ezs49pC8JXFf4bSPZyXs9NT88vZ6yA+7mKP T/K7pJhJ3FCEdPpzHgDqitab8RAzcgZCi7/AF5su6PCSx/uDHh1OM3iNP0MUAFh4 dElU2NdbliDRbzpwNdcmjuLWnPRsyrKSI6tYsE+Rdl1VKKI7gMMZGESsMRFt8N0h 5DARcYLB+bkmir1XNQVeFR13RG2cay/bAxJ1+l63EV91/wqq/U5egHo4HRWMG2uF PhIW86VEt7J0ZG1G+dzB19ol6tgRaFDS6COj3sp93dAKQS9e642BYNkbV9IVGzri RWHN -----END CERTIFICATE-----Generated at Tue Jun 18 03:36:25 2024 by rpki-client on console-fra.rpki-client.org