$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.cer File: EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.cer (raw, json) Hash identifier: +KrmM+YUJOYEKcWPjpru/PVSnRfQ/73UA7G/1G+TlVA= Subject key identifier: EE:5C:96:CB:0A:BB:BD:6C:86:6C:20:58:3C:9C:BB:E2:F2:1F:4C:A1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 06916E965571BD51553403B0C02E656517B2F7AB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.mft caRepository: rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:48 +0000 Certificate not after: Wed 02 Apr 2025 18:31:48 +0000 Subordinate resources: AS: 272262 IP: 2804:8478::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:91:6e:96:55:71:bd:51:55:34:03:b0:c0:2e:65:65:17:b2:f7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:48 2024 GMT Not After : Apr 2 18:31:48 2025 GMT Subject: CN=EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:79:6a:8c:a7:22:c3:2d:5e:bf:ea:52:3b: 20:ea:0e:0d:fc:28:bb:37:52:a8:6d:0d:2a:a0:1a: c6:b6:50:cd:37:ec:ec:ba:91:56:9b:69:88:3f:aa: 7c:1a:4b:a6:e6:3a:00:90:1b:dd:0f:14:74:23:cc: 28:df:a0:35:32:95:a8:84:e5:98:b6:41:58:2f:7d: 82:88:b9:89:9d:57:a2:85:4c:3f:ca:79:ad:10:a6: 8e:50:11:a5:06:3a:b0:cf:9b:64:c3:f1:b7:3e:4d: d6:83:ad:ec:fb:62:57:e8:80:05:f4:30:65:2d:6c: 89:a9:70:40:c9:30:80:98:62:13:ff:90:55:ef:d7: 29:0f:34:84:7b:98:44:29:8b:5a:69:25:14:1e:ad: af:8d:82:93:af:9c:c6:08:9f:a2:df:73:64:41:e2: 2f:45:9c:c1:0d:c6:7b:0b:56:13:b0:6f:98:01:98: 77:08:4c:13:67:07:d3:10:c4:63:73:27:5c:fc:e7: ca:1c:68:c6:79:d7:8d:f3:93:79:fb:33:02:76:0f: 1f:9d:2c:6e:bc:da:5b:a0:71:4b:dc:b5:68:cb:4a: 8f:77:21:10:3b:f2:0a:8a:f3:c5:ed:b1:dd:dd:7c: 1b:43:be:50:e5:00:86:03:5d:a1:b1:ee:3f:90:f3: ad:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:5C:96:CB:0A:BB:BD:6C:86:6C:20:58:3C:9C:BB:E2:F2:1F:4C:A1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8478::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272262 Signature Algorithm: sha256WithRSAEncryption 5e:cd:f7:f5:e5:f4:61:45:e4:1b:4e:c2:e8:ae:d9:b3:01:bc: 3b:66:b1:17:51:ad:b7:68:54:4d:aa:52:d3:3e:e6:8e:b2:3f: 09:26:db:21:d4:33:dd:f0:2a:a9:1b:ea:63:8a:2c:40:83:ad: 4a:7a:b4:d5:3a:97:41:2e:32:35:0f:99:b5:29:97:3f:8e:d8: 19:6a:e4:0a:4b:a4:1d:0f:b7:ef:ba:26:8d:f5:ed:96:4e:5b: a4:f8:10:51:62:cf:9a:09:9b:4b:07:bd:a6:1b:1b:2c:1f:0d: 8c:80:83:f4:f3:e1:bc:c7:1d:ba:cb:98:42:14:fe:6c:96:8b: 90:26:26:48:ac:33:99:8f:2f:d3:ed:db:0b:b9:72:f6:e0:b9: 27:11:a1:d9:a7:f4:7f:5a:28:72:4a:be:88:32:a0:87:14:4f: 09:da:22:86:20:c1:95:8f:a1:90:3f:67:58:f2:b9:53:76:59: 32:c1:02:d2:d9:88:41:3d:e4:28:1c:74:07:62:e3:ad:26:3d: 75:42:8c:26:46:e7:cb:f6:ae:dc:7f:14:5c:46:ff:3f:bf:10: 50:f1:55:ed:93:63:4f:fd:24:f1:24:19:cf:6a:ae:a4:5e:fd: ff:38:af:06:f3:b4:25:aa:21:c0:76:22:2c:54:93:15:61:5b: 7a:0d:8a:9c -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgIUBpFullVxvVFVNAOwwC5lZRey96swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2NDhaFw0yNTA0MDIxODMxNDhaMDMxMTAvBgNV BAMTKEVFNUM5NkNCMEFCQkJENkM4NjZDMjA1ODNDOUNCQkUyRjIxRjRDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrnlqjKciwy1ev+pSOyDqDg38 KLs3UqhtDSqgGsa2UM037Oy6kVabaYg/qnwaS6bmOgCQG90PFHQjzCjfoDUylaiE 5Zi2QVgvfYKIuYmdV6KFTD/Kea0Qpo5QEaUGOrDPm2TD8bc+TdaDrez7YlfogAX0 MGUtbImpcEDJMICYYhP/kFXv1ykPNIR7mEQpi1ppJRQera+NgpOvnMYIn6Lfc2RB 4i9FnMENxnsLVhOwb5gBmHcITBNnB9MQxGNzJ1z858ocaMZ5143zk3n7MwJ2Dx+d LG682lugcUvctWjLSo93IRA78gqK88Xtsd3dfBtDvlDlAIYDXaGx7j+Q863vAgMB AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTuXJbLCru9bIZs IFg8nLvi8h9MoTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnpu QUxnUnFnNGp1UWRHeFhaOEVFZ0pTbWFIZHFzS1lnY2RBdHplelNwRngvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnpu QUxnUnFnNGp1UWRHeFhaOEVFZ0pTbWFIZHFzS1lnY2RBdHplelNwRngvMS9FRTVD OTZDQjBBQkJCRDZDODY2QzIwNTgzQzlDQkJFMkYyMUY0Q0ExLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBIR4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQn hjANBgkqhkiG9w0BAQsFAAOCAQEAXs339eX0YUXkG07C6K7ZswG8O2axF1Gtt2hU TapS0z7mjrI/CSbbIdQz3fAqqRvqY4osQIOtSnq01TqXQS4yNQ+ZtSmXP47YGWrk CkukHQ+377omjfXtlk5bpPgQUWLPmgmbSwe9phsbLB8NjICD9PPhvMcdusuYQhT+ bJaLkCYmSKwzmY8v0+3bC7ly9uC5JxGh2af0f1oockq+iDKghxRPCdoihiDBlY+h kD9nWPK5U3ZZMsEC0tmIQT3kKBx0B2LjrSY9dUKMJkbny/au3H8UXEb/P78QUPFV 7ZNjT/0k8SQZz2qupF79/zivBvO0JaohwHYiLFSTFWFbeg2KnA== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:09 2024 by rpki-client on console-fra.rpki-client.org