$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer File: E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer (raw, json) Hash identifier: CBAuM+oDOKmtwqoudDtDBED+n2/ekBxY8Sm13ziLFuw= Subject key identifier: E1:C8:E0:FF:8F:E8:F0:85:E2:D7:92:B2:66:3A:22:5B:0D:93:C1:7A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 36F34D48691F51154F0DE5DE5DA6B7BDDAAB6280 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.mft caRepository: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Apr 2024 13:02:19 +0000 Certificate not after: Tue 22 Apr 2025 13:07:19 +0000 Subordinate resources: AS: 263569 IP: 45.5.220.0/22 IP: 45.163.152.0/22 IP: 45.172.252.0/22 IP: 45.186.72.0/22 IP: 45.225.160.0/22 IP: 45.225.236.0/22 IP: 131.161.60.0/22 IP: 138.118.168.0/22 IP: 143.202.244.0/22 IP: 168.232.216.0/22 IP: 170.80.208.0/22 IP: 186.249.216.0/22 IP: 200.4.116.0/22 IP: 2804:f30::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f3:4d:48:69:1f:51:15:4f:0d:e5:de:5d:a6:b7:bd:da:ab:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 23 13:02:19 2024 GMT Not After : Apr 22 13:07:19 2025 GMT Subject: CN=E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:6c:02:4e:e6:59:aa:88:c7:73:92:44:71: 24:ab:8c:f6:e8:bc:27:95:e6:05:5b:98:a6:d1:6f: 07:71:41:c6:bf:8b:6e:1c:ee:08:da:23:31:fb:9b: f1:05:80:48:b9:28:8f:ba:55:bd:b4:08:9c:56:77: 4b:7b:da:46:b6:da:ed:e6:a4:ff:97:05:25:ea:8d: 21:5f:55:cd:94:c6:1f:f4:03:78:be:80:74:6b:5a: de:ab:14:47:7e:13:37:92:e0:83:cf:27:5c:a7:a4: e2:ab:f6:12:43:6e:9d:1c:e1:be:a4:84:71:16:d4: 7b:b7:b2:4d:46:0f:38:95:64:29:7a:f2:50:7a:1b: 44:76:24:98:a2:df:d4:50:ba:c6:06:b6:12:1d:3a: 66:f3:c5:0a:f5:c5:e3:49:a1:65:92:01:dc:2e:13: 59:64:3b:e5:e6:06:b4:d3:4e:e2:38:ce:80:64:7d: 36:21:6c:fc:1b:0d:a9:b2:ec:10:89:46:5a:d0:f5: a5:18:0a:9e:cd:6b:50:f4:09:87:42:8f:95:ca:f0: dc:35:91:a9:fe:24:c9:36:c1:e5:8e:64:2c:d2:a6: 3a:50:37:1e:e7:53:c7:8d:0b:33:c1:87:ea:4e:24: cc:e8:da:1a:87:da:96:aa:36:e2:0d:2c:62:6f:cd: dc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:C8:E0:FF:8F:E8:F0:85:E2:D7:92:B2:66:3A:22:5B:0D:93:C1:7A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.220.0/22 45.163.152.0/22 45.172.252.0/22 45.186.72.0/22 45.225.160.0/22 45.225.236.0/22 131.161.60.0/22 138.118.168.0/22 143.202.244.0/22 168.232.216.0/22 170.80.208.0/22 186.249.216.0/22 200.4.116.0/22 IPv6: 2804:f30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263569 Signature Algorithm: sha256WithRSAEncryption a7:89:8d:1d:fd:fd:1d:05:6c:00:7f:cb:c1:7f:b8:18:7d:0e: de:b6:f0:a7:5a:c7:1a:61:95:a3:b9:3c:09:bd:15:25:4a:82: 4d:48:94:46:16:00:10:7e:1a:56:be:fd:2d:1b:bb:0f:a3:3b: 25:69:27:bd:79:34:d4:99:4c:0e:d3:57:6e:a2:5c:0d:32:f7: b3:37:61:89:15:10:c6:63:3b:e5:76:5f:78:7f:3c:e3:cc:5b: ee:e6:1b:b9:2f:59:be:7f:1c:2c:a6:89:ae:81:59:f1:27:85: 53:01:f6:e2:2e:8d:dc:4b:3f:f6:d5:24:60:99:d6:c7:fc:aa: 66:05:01:62:1d:8a:9a:70:5a:e2:e2:8c:6d:77:30:ca:d7:d9: 37:93:49:91:8b:16:18:35:49:3c:e1:45:46:84:d0:ce:2d:c0: a6:d3:78:12:c6:44:5f:5a:7f:08:97:eb:ba:d6:93:4f:61:47: a4:27:b5:f7:4e:36:df:bc:e3:46:08:9f:45:68:62:6d:c8:17: f8:c9:ec:06:0f:32:f0:f2:79:89:f5:63:32:99:b6:a7:c6:e4: 19:5c:5d:22:6f:02:7a:a2:7e:46:7a:81:e5:75:12:b6:27:7c: 4a:ce:5c:c1:40:67:5c:25:3d:77:e4:8a:12:a1:0b:c0:c9:6b: ec:a8:f3:44 -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUNvNNSGkfURVPDeXeXaa3vdqrYoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjMxMzAyMTlaFw0yNTA0MjIxMzA3MTlaMDMxMTAvBgNV BAMTKEUxQzhFMEZGOEZFOEYwODVFMkQ3OTJCMjY2M0EyMjVCMEQ5M0MxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOWwCTuZZqojHc5JEcSSrjPbo vCeV5gVbmKbRbwdxQca/i24c7gjaIzH7m/EFgEi5KI+6Vb20CJxWd0t72ka22u3m pP+XBSXqjSFfVc2Uxh/0A3i+gHRrWt6rFEd+EzeS4IPPJ1ynpOKr9hJDbp0c4b6k hHEW1Hu3sk1GDziVZCl68lB6G0R2JJii39RQusYGthIdOmbzxQr1xeNJoWWSAdwu E1lkO+XmBrTTTuI4zoBkfTYhbPwbDamy7BCJRlrQ9aUYCp7Na1D0CYdCj5XK8Nw1 kan+JMk2weWOZCzSpjpQNx7nU8eNCzPBh+pOJMzo2hqH2paqNuINLGJvzdz/AgMB AAGjggOCMIIDfjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBThyOD/j+jwheLX krJmOiJbDZPBejAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGNm TGhrcXU3d3dRYzRGRlNXaVNkcjJKZmI1bkNiWHVtb2ZoZkRYUEVMWHgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hj Zkxoa3F1N3d3UWM0RkZTV2lTZHIySmZiNW5DYlh1bW9maGZEWFBFTFh4LzAvRTFD OEUwRkY4RkU4RjA4NUUyRDc5MkIyNjYzQTIyNUIwRDkzQzE3QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEH AQH/BGcwZTBUBAIAATBOAwQCLQXcAwQCLaOYAwQCLaz8AwQCLbpIAwQCLeGgAwQC LeHsAwQCg6E8AwQCinaoAwQCj8r0AwQCqOjYAwQCqlDQAwQCuvnYAwQCyAR0MA0E AgACMAcDBQAoBA8wMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQFkTANBgkqhkiG 9w0BAQsFAAOCAQEAp4mNHf39HQVsAH/LwX+4GH0O3rbwp1rHGmGVo7k8Cb0VJUqC TUiURhYAEH4aVr79LRu7D6M7JWknvXk01JlMDtNXbqJcDTL3szdhiRUQxmM75XZf eH8848xb7uYbuS9Zvn8cLKaJroFZ8SeFUwH24i6N3Es/9tUkYJnWx/yqZgUBYh2K mnBa4uKMbXcwytfZN5NJkYsWGDVJPOFFRoTQzi3AptN4EsZEX1p/CJfrutaTT2FH pCe1904237zjRgifRWhibcgX+MnsBg8y8PJ5ifVjMpm2p8bkGVxdIm8CeqJ+RnqB 5XUStid8Ss5cwUBnXCU9d+SKEqELwMlr7KjzRA== -----END CERTIFICATE-----Generated at Sat Jun 1 23:01:16 2024 by rpki-client on console-ams.rpki-client.org