$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.cer File: E48F797567B9CA8F99E372027B386B7DD7DBB414.cer (raw, json) Hash identifier: pzolXsbXeT076ueGGO/OhzYKoMb3IXy6B1OXrDBpzIU= Subject key identifier: E4:8F:79:75:67:B9:CA:8F:99:E3:72:02:7B:38:6B:7D:D7:DB:B4:14 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C70E87B222C4A8643AAD91443C5BD4C93CFF430 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.mft caRepository: rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 07:31:01 +0000 Certificate not after: Thu 03 Apr 2025 07:36:01 +0000 Subordinate resources: AS: 264450 IP: 131.255.36.0/22 IP: 2804:1edc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:70:e8:7b:22:2c:4a:86:43:aa:d9:14:43:c5:bd:4c:93:cf:f4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 07:31:01 2024 GMT Not After : Apr 3 07:36:01 2025 GMT Subject: CN=E48F797567B9CA8F99E372027B386B7DD7DBB414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:ef:ea:c2:4e:44:5e:c4:99:09:64:19:01: 83:07:7b:2f:5e:e2:03:42:fb:c1:b6:6c:5b:4c:09: 0d:89:6f:59:10:6c:32:de:be:c2:a0:81:15:06:eb: 8c:23:fc:8b:d2:fd:a1:02:fe:45:6b:b7:ca:74:ff: 53:45:ac:14:57:2d:24:eb:2d:90:a2:1b:29:14:b9: 59:ba:19:89:4e:77:51:49:7e:51:ab:61:90:17:c0: 14:16:76:a9:12:06:39:c2:d9:31:c0:40:b4:d5:81: a5:1a:05:6f:7f:49:14:f4:0a:67:88:87:5f:84:4c: 2c:60:f2:40:f9:62:8b:e7:ce:18:bc:09:8a:93:95: 7d:13:38:36:be:8e:6b:5e:03:8c:7b:fb:3f:05:28: cd:ea:cb:39:c6:af:01:09:bf:e0:50:6c:79:cf:11: 36:ed:b6:f2:b9:86:56:f0:17:03:ba:0e:aa:a5:00: 6b:4f:43:c5:50:dd:b0:10:15:43:37:a2:49:52:e8: 29:46:4a:f7:2d:db:d0:3d:f3:26:e0:20:8a:6d:76: 9f:6b:39:d9:c8:6f:3c:9d:85:3d:d3:3d:74:50:03: e9:75:17:e0:cb:07:ca:7d:03:a5:55:d4:f1:e6:48: a0:39:d8:30:38:9d:0d:4b:4d:90:ca:5d:01:e6:66: 70:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:8F:79:75:67:B9:CA:8F:99:E3:72:02:7B:38:6B:7D:D7:DB:B4:14 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.36.0/22 IPv6: 2804:1edc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264450 Signature Algorithm: sha256WithRSAEncryption 2a:2f:b4:45:24:e8:e4:7b:65:94:30:b9:01:11:2b:ac:f7:8e: 33:75:57:65:44:6c:10:d9:24:10:53:c9:c8:90:9c:13:45:02: ba:1a:9d:75:de:e6:4f:62:1c:b6:00:50:2a:ca:86:ab:bd:6b: 5c:a4:8e:4f:27:44:1c:49:a9:b8:7f:d7:ef:e9:da:bb:b3:63: bb:65:0c:a4:1a:d1:7c:30:66:26:42:4e:e1:82:ad:c9:a2:a8: 21:a2:12:7c:a9:dd:62:8d:b0:fc:92:be:bf:66:b8:ed:4f:e3: 01:52:cf:50:10:49:f5:44:7a:d4:dd:44:a7:58:03:16:f8:d2: 98:83:2f:74:42:f5:4c:96:20:f8:18:ba:00:f6:c5:5a:13:97: e0:f5:59:c5:cc:e7:99:7b:d5:04:f2:8c:51:7f:16:c3:e6:11: 4f:5f:bc:80:3b:54:d4:09:07:af:cf:6c:a3:2e:60:2e:80:3c: 8b:3c:d4:25:e1:c4:9b:25:48:46:a3:22:f7:1a:fe:42:e3:ed: 9c:77:15:bc:85:70:ce:0a:b8:62:65:4c:35:54:31:fa:1e:ab: 01:75:25:b2:cf:a2:36:b7:d5:ce:8f:2a:35:12:ea:8a:b3:f5: a5:78:38:de:f1:8e:79:7b:67:7f:d9:34:5a:32:94:5b:6d:f3: 15:b2:d6:e4 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUfHDoeyIsSoZDqtkUQ8W9TJPP9DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNzMxMDFaFw0yNTA0MDMwNzM2MDFaMDMxMTAvBgNV BAMTKEU0OEY3OTc1NjdCOUNBOEY5OUUzNzIwMjdCMzg2QjdERDdEQkI0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGe/qwk5EXsSZCWQZAYMHey9e 4gNC+8G2bFtMCQ2Jb1kQbDLevsKggRUG64wj/IvS/aEC/kVrt8p0/1NFrBRXLSTr LZCiGykUuVm6GYlOd1FJflGrYZAXwBQWdqkSBjnC2THAQLTVgaUaBW9/SRT0CmeI h1+ETCxg8kD5Yovnzhi8CYqTlX0TODa+jmteA4x7+z8FKM3qyznGrwEJv+BQbHnP ETbttvK5hlbwFwO6DqqlAGtPQ8VQ3bAQFUM3oklS6ClGSvct29A98ybgIIptdp9r OdnIbzydhT3TPXRQA+l1F+DLB8p9A6VV1PHmSKA52DA4nQ1LTZDKXQHmZnAdAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkj3l1Z7nKj5nj cgJ7OGt919u0FDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFpV N3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVVb1kvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFpV N3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVVb1kvMS9FNDhG Nzk3NTY3QjlDQThGOTlFMzcyMDI3QjM4NkI3REQ3REJCNDE0Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKD/yQwDQQCAAIwBwMFACgEHtwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAkCMA0GCSqGSIb3DQEBCwUAA4IBAQAqL7RFJOjke2WUMLkB ESus944zdVdlRGwQ2SQQU8nIkJwTRQK6Gp113uZPYhy2AFAqyoarvWtcpI5PJ0Qc Sam4f9fv6dq7s2O7ZQykGtF8MGYmQk7hgq3JoqghohJ8qd1ijbD8kr6/ZrjtT+MB Us9QEEn1RHrU3USnWAMW+NKYgy90QvVMliD4GLoA9sVaE5fg9VnFzOeZe9UE8oxR fxbD5hFPX7yAO1TUCQevz2yjLmAugDyLPNQl4cSbJUhGoyL3Gv5C4+2cdxW8hXDO CrhiZUw1VDH6HqsBdSWyz6I2t9XOjyo1EuqKs/WleDje8Y55e2d/2TRaMpRbbfMV stbk -----END CERTIFICATE-----Generated at Sat Jun 1 23:01:16 2024 by rpki-client on console-ams.rpki-client.org