$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer File: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer (raw, json) Hash identifier: ojpt2mhse3WrZQOww6BhDKpRoZiDSu0tmph+hpM1aW8= Subject key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0BEC3FC3DE0A59D220E6A1C081E9E22CE91BA2BC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft caRepository: rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 23:55:08 +0000 Certificate not after: Fri 04 Apr 2025 00:00:08 +0000 Subordinate resources: AS: 273706 IP: 2804:8b00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 18:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ec:3f:c3:de:0a:59:d2:20:e6:a1:c0:81:e9:e2:2c:e9:1b:a2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 23:55:08 2024 GMT Not After : Apr 4 00:00:08 2025 GMT Subject: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:21:f1:c6:b6:2f:85:32:07:e4:98:c9:d8: 2a:0c:6e:14:d2:2a:ca:dc:9d:2d:c2:04:e6:2c:f5: 51:76:dd:b0:ce:9f:d0:85:1c:ba:4b:82:a6:44:ef: f2:98:e9:cd:7c:85:3f:24:0c:66:54:d9:50:c6:e6: cc:2c:f2:b7:c8:82:7a:68:12:bd:08:71:9f:fb:88: 8c:73:f6:d3:24:34:e3:a4:2c:ea:94:d3:f9:71:bb: d1:9e:e5:50:d7:14:6d:5b:c4:fa:33:01:95:4e:aa: 78:37:8d:8b:be:f3:50:46:d4:07:b3:1d:bb:e0:47: fe:34:76:db:5e:d9:9b:24:89:e5:04:34:ab:da:f3: 63:ab:62:5a:9e:8f:2d:17:a9:f1:41:74:4f:47:3a: eb:82:8e:49:00:d4:70:69:ca:3f:28:45:86:26:45: f8:da:f8:e9:4a:ef:59:76:15:4b:dc:ad:ec:9d:2a: de:42:e6:87:a3:9d:3a:1b:45:34:73:93:b6:5e:6a: e4:69:6b:4d:24:22:35:68:e1:5d:a1:70:78:1b:36: 7f:05:db:cd:6f:f0:06:1f:46:e4:ee:63:2b:2c:3f: 4b:ec:51:a9:e5:8c:d8:fe:2c:04:02:1b:80:c0:20: f6:18:78:34:1e:92:f0:54:b1:b6:ba:78:bf:4f:be: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273706 Signature Algorithm: sha256WithRSAEncryption a1:cf:c7:e4:57:7d:76:da:f0:ca:ee:51:b6:a4:b5:b6:1e:c7: 3c:fe:97:a9:6e:73:14:7f:b6:80:f4:cb:85:08:b3:8d:e8:e9: e6:cf:7d:ae:56:77:03:d1:da:5a:83:81:18:ff:55:bb:9e:ec: 77:97:14:a8:5e:ca:a9:ab:3d:88:65:b9:7a:ec:77:61:91:9b: 4e:a5:b3:f7:7c:e1:1e:e6:88:c5:e5:b4:1f:7b:7e:21:72:e6: 24:b9:8f:f4:9b:5c:92:bf:94:ac:fe:d5:00:18:bb:9a:35:67: b6:af:81:de:56:3b:c5:1f:d0:36:cf:00:64:95:0c:4f:8c:af: a6:c9:56:bd:03:a4:7e:58:4c:d4:a0:5e:b7:4a:9d:13:6c:da: d3:5f:95:85:f1:55:03:23:c3:2c:d6:1b:e3:cf:30:80:e5:ee: 2b:83:53:1c:7f:68:ac:f5:45:cb:86:4a:af:f4:e5:ef:f7:33: bb:bb:8c:64:7b:1c:31:09:8d:02:0d:8a:d2:27:7f:cd:b6:70: b3:6e:ce:73:dc:28:40:d5:2f:e7:bf:41:f3:49:4d:21:04:98: 74:27:4d:3a:7c:b1:1e:ed:a2:a2:1a:15:0f:b0:b3:ec:a7:67: 74:2a:3a:75:ae:c1:8c:52:e1:af:ab:53:3c:73:06:99:ee:83: 58:45:2b:fc -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUC+w/w94KWdIg5qHAgeniLOkborwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQyMzU1MDhaFw0yNTA0MDQwMDAwMDhaMDMxMTAvBgNV BAMTKERGRDQyMEJFRUU4NjY1OEM2OUJGN0JGMDI1QUJERUIzNUY3MjNCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALyHxxrYvhTIH5JjJ2CoMbhTS KsrcnS3CBOYs9VF23bDOn9CFHLpLgqZE7/KY6c18hT8kDGZU2VDG5sws8rfIgnpo Er0IcZ/7iIxz9tMkNOOkLOqU0/lxu9Ge5VDXFG1bxPozAZVOqng3jYu+81BG1Aez HbvgR/40dtte2ZskieUENKva82OrYlqejy0XqfFBdE9HOuuCjkkA1HBpyj8oRYYm Rfja+OlK71l2FUvcreydKt5C5oejnTobRTRzk7ZeauRpa00kIjVo4V2hcHgbNn8F 281v8AYfRuTuYyssP0vsUanljNj+LAQCG4DAIPYYeDQekvBUsba6eL9PvkTrAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTf1CC+7oZljGm/ e/Alq96zX3I7PTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTR1 SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0V3YvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk0 dUp2cEIyS0FyQnlmU1JjcktUNEpEV0gxZEpDTnpjbW1MdXBkdlNzdFd2LzEvREZE NDIwQkVFRTg2NjU4QzY5QkY3QkYwMjVBQkRFQjM1RjcyM0IzRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASLADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LSowDQYJKoZIhvcNAQELBQADggEBAKHPx+RXfXba8MruUbaktbYexzz+l6lucxR/ toD0y4UIs43o6ebPfa5WdwPR2lqDgRj/Vbue7HeXFKheyqmrPYhluXrsd2GRm06l s/d84R7miMXltB97fiFy5iS5j/SbXJK/lKz+1QAYu5o1Z7avgd5WO8Uf0DbPAGSV DE+Mr6bJVr0DpH5YTNSgXrdKnRNs2tNflYXxVQMjwyzWG+PPMIDl7iuDUxx/aKz1 RcuGSq/05e/3M7u7jGR7HDEJjQINitInf822cLNuznPcKEDVL+e/QfNJTSEEmHQn TTp8sR7toqIaFQ+ws+ynZ3QqOnWuwYxS4a+rUzxzBpnug1hFK/w= -----END CERTIFICATE-----Generated at Tue Jun 18 16:14:11 2024 by rpki-client on console-fra.rpki-client.org