$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.cer File: E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.cer (raw, json) Hash identifier: J3n6vDjxjl1DrYjq3CrEI7h8nYZggyVrGcaQMWMU7VQ= Subject key identifier: E3:23:E2:3C:16:E9:98:B1:FB:AB:1F:A1:C8:5D:27:3E:8D:4F:FE:EE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0BDBCA090387719052344E440ADEDB61AA0ED4FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft caRepository: rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 04:34:34 +0000 Certificate not after: Thu 03 Apr 2025 04:39:34 +0000 Subordinate resources: AS: 263443 IP: 177.91.132.0/22 IP: 2804:11d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 05:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:db:ca:09:03:87:71:90:52:34:4e:44:0a:de:db:61:aa:0e:d4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 04:34:34 2024 GMT Not After : Apr 3 04:39:34 2025 GMT Subject: CN=E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:5a:92:ef:36:b8:76:24:70:55:33:17:29: 74:57:b9:15:0f:88:c0:55:62:08:17:5b:2f:5e:ba: df:f4:46:1d:b6:11:7f:31:f8:4c:2e:d0:57:f0:59: 58:fd:7d:92:84:9c:17:e4:c3:2c:e5:1a:4f:72:ef: 10:40:e6:b5:54:c3:e0:a5:7e:cd:9f:cb:d1:c6:c8: 00:8f:39:20:0c:18:e5:4f:0f:28:37:3d:17:01:bc: d7:93:31:00:60:19:ad:c8:8b:f2:4a:70:ff:59:d8: 0e:b9:b8:6a:63:d0:e1:9c:65:fa:06:42:93:f0:87: 0f:a9:2e:6e:a2:26:af:e5:bc:04:af:f1:d8:c2:04: 84:5e:3d:ef:84:ba:03:db:03:01:81:00:87:70:30: 65:22:82:2e:0c:8c:63:20:53:8c:0c:67:48:29:b1: 21:e3:d1:82:c8:9a:37:0a:9a:e8:e1:70:f0:8f:9d: c2:9f:0c:2b:9f:94:33:eb:d2:6a:68:7e:8f:06:ea: da:e4:1b:e3:ed:dd:9f:d5:e0:8c:a2:f5:c7:56:71: 9b:a1:5b:d5:95:73:42:56:45:e2:2a:71:84:d1:7f: 8a:a8:a5:03:bf:99:51:e4:8c:6e:cf:aa:4d:ee:3e: 70:96:e8:b6:2c:8e:d4:5a:cc:b1:38:cd:43:84:c9: ae:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:23:E2:3C:16:E9:98:B1:FB:AB:1F:A1:C8:5D:27:3E:8D:4F:FE:EE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.91.132.0/22 IPv6: 2804:11d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263443 Signature Algorithm: sha256WithRSAEncryption b4:44:19:cb:a2:9a:da:22:be:e5:55:6a:f3:94:2e:64:65:b6: 26:d8:3a:0a:a4:d0:10:59:18:56:33:ec:b8:9c:25:c2:7e:f5: bd:bd:6c:0e:fa:93:ef:48:d7:bd:24:38:2d:25:b3:63:94:40: c9:87:69:df:ea:b9:08:63:fc:d4:b8:07:11:6c:27:20:ff:da: 93:ae:76:c0:f0:6d:03:39:51:16:cf:f4:96:73:b6:64:36:1a: e0:d4:57:3f:0c:7b:c8:86:3e:50:b8:c1:71:1a:f9:26:95:b3: f7:42:ad:a8:f0:35:97:b7:b1:b5:4a:87:fb:76:f1:49:93:dd: d5:72:cf:46:52:20:3d:d8:13:1f:b5:b6:bc:64:94:15:21:78: d2:b6:29:bf:02:36:e2:d8:88:a8:91:5d:26:be:0a:2c:52:c4: ce:35:74:6a:f8:00:c9:5c:9d:d9:65:dc:2d:ac:92:49:76:3c: f5:14:de:ef:7d:42:2c:89:0a:7a:a3:99:50:98:de:4d:06:e1: a4:3e:71:f8:96:ae:70:57:bb:04:a1:2b:0f:49:b6:4f:7b:0a: 36:84:c0:e3:4e:b8:69:f8:ac:b5:ea:5e:a8:50:33:e2:f9:c6: b6:85:8f:4c:d7:ff:04:b1:6c:cd:92:38:70:5e:ab:03:b9:63: 29:9c:c5:94 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUC9vKCQOHcZBSNE5ECt7bYaoO1PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNDM0MzRaFw0yNTA0MDMwNDM5MzRaMDMxMTAvBgNV BAMTKEUzMjNFMjNDMTZFOTk4QjFGQkFCMUZBMUM4NUQyNzNFOEQ0RkZFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDlqS7za4diRwVTMXKXRXuRUP iMBVYggXWy9eut/0Rh22EX8x+Ewu0FfwWVj9fZKEnBfkwyzlGk9y7xBA5rVUw+Cl fs2fy9HGyACPOSAMGOVPDyg3PRcBvNeTMQBgGa3Ii/JKcP9Z2A65uGpj0OGcZfoG QpPwhw+pLm6iJq/lvASv8djCBIRePe+EugPbAwGBAIdwMGUigi4MjGMgU4wMZ0gp sSHj0YLImjcKmujhcPCPncKfDCuflDPr0mpofo8G6trkG+Pt3Z/V4Iyi9cdWcZuh W9WVc0JWReIqcYTRf4qopQO/mVHkjG7Pqk3uPnCW6LYsjtRazLE4zUOEya4BAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjI+I8FumYsfur H6HIXSc+jU/+7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVJ0 aFRodFp2N3JyUkVWRjVibkJhSzVZenpNUGEyNVdMMXp4eTVxOE5TY3UvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVJ0 aFRodFp2N3JyUkVWRjVibkJhSzVZenpNUGEyNVdMMXp4eTVxOE5TY3UvMS9FMzIz RTIzQzE2RTk5OEIxRkJBQjFGQTFDODVEMjczRThENEZGRUVFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKxW4QwDQQCAAIwBwMFACgEEdgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAUTMA0GCSqGSIb3DQEBCwUAA4IBAQC0RBnLopraIr7lVWrz lC5kZbYm2DoKpNAQWRhWM+y4nCXCfvW9vWwO+pPvSNe9JDgtJbNjlEDJh2nf6rkI Y/zUuAcRbCcg/9qTrnbA8G0DOVEWz/SWc7ZkNhrg1Fc/DHvIhj5QuMFxGvkmlbP3 Qq2o8DWXt7G1Sof7dvFJk93Vcs9GUiA92BMftba8ZJQVIXjStim/Ajbi2IiokV0m vgosUsTONXRq+ADJXJ3ZZdwtrJJJdjz1FN7vfUIsiQp6o5lQmN5NBuGkPnH4lq5w V7sEoSsPSbZPewo2hMDjTrhp+Ky16l6oUDPi+ca2hY9M1/8EsWzNkjhwXqsDuWMp nMWU -----END CERTIFICATE-----Generated at Mon Jul 1 02:59:41 2024 by rpki-client on console-fra.rpki-client.org