$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer File: E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer (raw, json) Hash identifier: H1FPdtK8psOGVTBogVOgQLqD2FPXQcTF/5FUignmz+0= Subject key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 21AED54CB974394F1E63BEA1538B18708FDC5C8C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft caRepository: rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 24 May 2024 13:22:10 +0000 Certificate not after: Fri 23 May 2025 13:27:10 +0000 Subordinate resources: AS: 273467 IP: 168.194.179.0/24 IP: 170.245.172.0/22 IP: 2804:8f18::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 12:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ae:d5:4c:b9:74:39:4f:1e:63:be:a1:53:8b:18:70:8f:dc:5c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 24 13:22:10 2024 GMT Not After : May 23 13:27:10 2025 GMT Subject: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:d8:72:c2:f6:11:9e:88:72:33:7f:9d:0e: a0:c1:13:9a:04:d8:02:19:83:92:20:49:ca:c3:e3: 95:bd:db:4b:1c:2b:e9:0a:5c:e3:52:d6:44:57:55: 89:6a:e0:85:dd:59:bd:0e:8f:cf:29:da:18:71:be: a8:5a:35:d0:cf:2c:04:6c:30:62:f6:1f:69:59:0b: 4a:70:f1:de:a9:6d:f6:90:b7:c1:ec:ca:6d:a6:89: f1:c5:99:52:d9:a1:4c:ee:ff:88:27:2d:7c:52:76: 4c:48:70:16:37:f9:2f:37:7f:1a:d2:8e:fe:4a:24: 7a:f9:ee:a2:2a:7d:f4:dc:f5:88:83:5d:c0:19:67: 8b:32:26:d5:40:fb:dc:52:37:f9:6b:82:e0:47:55: ef:a4:1e:5b:e6:db:9a:c5:01:fa:17:32:7c:3d:4a: a9:a5:d2:fc:d3:94:cd:c8:ca:e0:16:21:9a:a1:23: 3e:21:ad:bc:04:df:c0:16:c6:09:61:4a:82:c3:82: b3:76:91:16:4e:8f:dc:ee:7b:15:7c:53:f3:8f:90: 11:b1:91:8b:6e:07:d8:ff:42:50:21:8b:44:96:96: 6b:e8:39:a4:75:d1:89:7f:dc:83:2f:be:9b:9a:8f: 48:e8:71:6f:cb:13:f7:81:8e:62:53:3d:73:72:4c: eb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.194.179.0/24 170.245.172.0/22 IPv6: 2804:8f18::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273467 Signature Algorithm: sha256WithRSAEncryption a4:b2:f6:9a:43:6f:dc:78:e8:40:99:9d:1a:e1:75:b9:8c:8f: 4c:5e:4d:7f:1c:75:34:2f:47:d5:d4:6a:30:70:74:fe:80:2d: c7:54:08:b6:c9:95:b9:3e:ba:b6:d1:7f:66:2e:f8:9c:90:f9: de:8b:54:fc:82:10:c2:ec:15:44:1b:10:39:e6:da:ca:de:79: 76:d8:c4:5f:38:c0:84:c9:51:3c:75:a8:61:d3:8e:e9:fd:3c: ab:de:01:65:8f:d1:1d:de:6a:f6:61:57:87:c5:76:9a:82:1a: 72:19:83:73:55:a4:8f:86:4e:89:cd:bd:cb:e8:1b:9e:e8:b0: 40:14:50:bb:8a:10:f1:6a:d0:0a:1f:84:18:a2:d7:3e:c4:5b: c9:5d:ba:a5:d3:7a:84:df:cf:5a:70:ca:1b:35:26:ca:e3:d9: 30:a1:ae:e9:cd:c6:d9:9e:f4:77:7b:ea:b5:1a:e0:a4:ab:ed: 39:4e:bd:02:9d:20:40:ac:23:ee:d0:14:71:90:4b:e7:6c:1d: 4e:b7:a5:0b:62:db:8b:bc:6d:cd:97:75:e8:c9:04:70:c6:52: c7:a9:12:23:de:01:ae:a5:31:41:df:b3:56:74:c4:32:ca:1b: 09:72:44:b3:e2:fd:1d:90:36:7b:72:e4:75:42:94:5c:c8:46: eb:b5:8b:e9 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIa7VTLl0OU8eY76hU4sYcI/cXIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MjQxMzIyMTBaFw0yNTA1MjMxMzI3MTBaMDMxMTAvBgNV BAMTKEU3QUM2QkM4RDE5Q0QzNThEQTA3RDcwODNDRTY0QjM3QUQ5NUQyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo19hywvYRnohyM3+dDqDBE5oE 2AIZg5IgScrD45W920scK+kKXONS1kRXVYlq4IXdWb0Oj88p2hhxvqhaNdDPLARs MGL2H2lZC0pw8d6pbfaQt8Hsym2mifHFmVLZoUzu/4gnLXxSdkxIcBY3+S83fxrS jv5KJHr57qIqffTc9YiDXcAZZ4syJtVA+9xSN/lrguBHVe+kHlvm25rFAfoXMnw9 Sqml0vzTlM3IyuAWIZqhIz4hrbwE38AWxglhSoLDgrN2kRZOj9zuexV8U/OPkBGx kYtuB9j/QlAhi0SWlmvoOaR10Yl/3IMvvpuaj0jocW/LE/eBjmJTPXNyTOslAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTnrGvI0ZzTWNoH 1wg85ks3rZXSjDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkNF dkVCd05hOHBzNkNhb0hWYmozSGJjdzYyaVFlejJUTnJ1N3M2OHZLR1AvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZD RXZFQndOYThwczZDYW9IVmJqM0hiY3c2MmlRZXoyVE5ydTdzNjh2S0dQLzAvRTdB QzZCQzhEMTlDRDM1OERBMDdENzA4M0NFNjRCMzdBRDk1RDI4Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQAqMKzAwQCqvWsMA0EAgACMAcDBQAoBI8YMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQsOzANBgkqhkiG9w0BAQsFAAOCAQEApLL2mkNv 3HjoQJmdGuF1uYyPTF5Nfxx1NC9H1dRqMHB0/oAtx1QItsmVuT66ttF/Zi74nJD5 3otU/IIQwuwVRBsQOebayt55dtjEXzjAhMlRPHWoYdOO6f08q94BZY/RHd5q9mFX h8V2moIachmDc1Wkj4ZOic29y+gbnuiwQBRQu4oQ8WrQCh+EGKLXPsRbyV26pdN6 hN/PWnDKGzUmyuPZMKGu6c3G2Z70d3vqtRrgpKvtOU69Ap0gQKwj7tAUcZBL52wd TrelC2Lbi7xtzZd16MkEcMZSx6kSI94BrqUxQd+zVnTEMsobCXJEs+L9HZA2e3Lk dUKUXMhG67WL6Q== -----END CERTIFICATE-----Generated at Mon Jul 1 11:00:52 2024 by rpki-client on console-fra.rpki-client.org