$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer File: F4350D0F7940D2C9E193A27C0A14B651396141D6.cer (raw, json) Hash identifier: R56Tj7ni8fnJmnvlLPpe9K8GvuXJrk1+aJlXpHoFEnA= Subject key identifier: F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 77DBAA427B7CB70CF613048FE5896474D1B89747 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.mft caRepository: rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 19:47:51 +0000 Certificate not after: Thu 03 Apr 2025 19:52:51 +0000 Subordinate resources: AS: 53061 IP: 187.85.128.0/20 IP: 191.241.192.0/19 IP: 2804:117c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:db:aa:42:7b:7c:b7:0c:f6:13:04:8f:e5:89:64:74:d1:b8:97:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 19:47:51 2024 GMT Not After : Apr 3 19:52:51 2025 GMT Subject: CN=F4350D0F7940D2C9E193A27C0A14B651396141D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:39:e9:cf:f1:4b:45:74:d3:08:4a:b0:53: c6:f8:c2:41:a7:54:d4:fd:62:f9:2f:4c:95:1d:68: db:de:71:e6:d2:7b:a7:b6:05:8a:b8:69:62:60:68: ed:11:cb:ec:f0:3a:9f:da:df:36:2b:50:14:d0:7e: c8:49:ce:ba:1b:c1:3c:ad:ab:49:bb:ba:ef:a9:35: 14:bc:82:13:e6:77:14:d8:28:d2:2b:39:81:26:7a: 71:b9:c2:6f:ba:0d:13:5a:db:ce:66:28:59:27:65: 4d:74:bb:15:39:fe:d1:80:57:b6:2c:59:e0:d0:1f: 39:c2:20:33:27:65:af:77:ce:bc:8d:91:3f:44:50: 93:1b:44:1c:26:ec:1d:33:1d:fa:b7:35:e4:d0:04: 23:5b:d6:34:54:0d:34:6c:e8:a8:a5:97:23:22:b2: f8:d7:96:66:03:80:f4:51:e5:b9:dc:62:32:8b:53: 8c:33:f3:1e:cf:19:16:71:32:5a:5d:ae:cc:45:ab: b6:3b:ac:e3:bc:20:b5:c9:cc:50:1f:10:9d:29:84: a9:f7:3e:1d:06:cb:59:95:3a:31:81:ab:e0:11:ef: 57:e0:ab:93:b7:18:f7:ea:ba:c4:86:b9:af:07:23: 15:de:71:0d:64:1d:11:4f:5e:af:29:ec:dd:01:46: f0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.85.128.0/20 191.241.192.0/19 IPv6: 2804:117c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53061 Signature Algorithm: sha256WithRSAEncryption 46:78:ee:48:69:ac:cc:fd:8d:02:81:be:2b:db:a6:4a:5e:fe: 14:b9:48:b3:9f:21:c3:1b:8b:d7:12:9d:c5:50:8a:3b:1c:4a: ed:fa:2e:3c:dd:39:e8:33:d2:ee:05:37:a5:cc:e2:54:de:14: d9:23:b5:0c:c1:3c:04:2e:12:38:28:98:6b:40:74:a5:98:51: ba:96:46:7a:f3:2d:34:aa:a1:8b:61:5a:27:81:65:75:b2:17: 65:84:19:8f:74:be:ae:84:88:19:be:58:9e:b3:99:3a:3f:11: 3f:48:89:94:63:28:0f:8d:65:b0:01:66:d3:f7:e8:5e:03:f7: c9:71:6b:cb:5b:5d:18:65:10:2a:10:e5:75:7f:7e:07:cb:98: fb:a6:f8:5d:49:3a:de:d0:aa:3e:d2:85:c0:a8:3c:12:bc:c9: 89:c4:99:d8:b8:f6:52:df:df:f9:a7:8e:6e:a1:ad:53:03:5c: d3:3f:1f:c6:8b:b6:ac:b4:5a:d8:7d:9e:a9:9a:bb:35:6e:c1: ec:a9:4d:5d:ec:a5:3e:63:46:f2:51:a7:b3:1f:ed:fb:1f:6e: 15:bb:2c:95:fd:f2:a2:e8:00:77:5c:54:87:75:bf:7c:8e:c8: f8:59:b3:52:5a:6b:c5:60:79:58:ec:9d:f3:a3:ff:a3:83:e3: 51:3d:4b:74 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUd9uqQnt8twz2EwSP5YlkdNG4l0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxOTQ3NTFaFw0yNTA0MDMxOTUyNTFaMDMxMTAvBgNV BAMTKEY0MzUwRDBGNzk0MEQyQzlFMTkzQTI3QzBBMTRCNjUxMzk2MTQxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQujnpz/FLRXTTCEqwU8b4wkGn VNT9YvkvTJUdaNvecebSe6e2BYq4aWJgaO0Ry+zwOp/a3zYrUBTQfshJzrobwTyt q0m7uu+pNRS8ghPmdxTYKNIrOYEmenG5wm+6DRNa285mKFknZU10uxU5/tGAV7Ys WeDQHznCIDMnZa93zryNkT9EUJMbRBwm7B0zHfq3NeTQBCNb1jRUDTRs6KillyMi svjXlmYDgPRR5bncYjKLU4wz8x7PGRZxMlpdrsxFq7Y7rOO8ILXJzFAfEJ0phKn3 Ph0Gy1mVOjGBq+AR71fgq5O3GPfqusSGua8HIxXecQ1kHRFPXq8p7N0BRvC7AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT0NQ0PeUDSyeGT onwKFLZROWFB1jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2Ja bldkNlkzNWN0YzNhWGR4V1V4dmZBNTFyVDFDajhENXpIdHVLNzJ0OWMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdi Wm5XZDZZMzVjdGMzYVhkeFdVeHZmQTUxclQxQ2o4RDV6SHR1SzcydDljLzEvRjQz NTBEMEY3OTQwRDJDOUUxOTNBMjdDMEExNEI2NTEzOTYxNDFENi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEu1WAAwQFv/HAMA0EAgACMAcDBQAoBBF8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPRTANBgkqhkiG9w0BAQsFAAOCAQEARnjuSGms zP2NAoG+K9umSl7+FLlIs58hwxuL1xKdxVCKOxxK7fouPN056DPS7gU3pcziVN4U 2SO1DME8BC4SOCiYa0B0pZhRupZGevMtNKqhi2FaJ4FldbIXZYQZj3S+roSIGb5Y nrOZOj8RP0iJlGMoD41lsAFm0/foXgP3yXFry1tdGGUQKhDldX9+B8uY+6b4XUk6 3tCqPtKFwKg8ErzJicSZ2Lj2Ut/f+aeObqGtUwNc0z8fxou2rLRa2H2eqZq7NW7B 7KlNXeylPmNG8lGnsx/t+x9uFbsslf3yougAd1xUh3W/fI7I+FmzUlprxWB5WOyd 86P/o4PjUT1LdA== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:37 2024 by rpki-client on console-fra.rpki-client.org