$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer File: F7C4DEB12240FF8688C32C67939C04C380824025.cer (raw, json) Hash identifier: E4vw3Yyk7eGCK4vXl0DFKIm6OiddxCZDu0YNzJZKQHA= Subject key identifier: F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7B0C94521F334513429F5AB487C6876ED1BB3F1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft caRepository: rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:55 +0000 Certificate not after: Wed 02 Apr 2025 18:31:55 +0000 Subordinate resources: AS: 263530 IP: 143.137.64.0/22 IP: 191.253.68.0/22 IP: 2804:135c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0c:94:52:1f:33:45:13:42:9f:5a:b4:87:c6:87:6e:d1:bb:3f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:55 2024 GMT Not After : Apr 2 18:31:55 2025 GMT Subject: CN=F7C4DEB12240FF8688C32C67939C04C380824025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:ad:7c:b9:6d:e3:c8:b8:85:a5:7a:61:e7: b9:95:ef:54:d7:93:8c:4e:c6:5d:bf:34:e9:5a:fd: d5:57:df:de:2b:4f:3f:41:c0:79:4b:21:a7:94:96: 02:64:91:12:bb:50:37:9f:cd:02:78:ca:83:b1:ca: 12:46:03:cd:a0:de:04:22:af:a0:e9:a4:ef:c7:a4: 64:4c:60:c0:41:20:be:4a:bc:cd:f9:58:ed:dd:3b: 5b:29:51:30:13:fe:1a:d2:4a:14:da:d6:c5:cc:4a: 22:b9:9d:42:f7:c1:d9:6f:7b:11:02:41:c7:43:99: b4:30:2b:e5:13:e7:06:e0:74:e8:6a:c0:f3:c3:fd: 8c:ae:e4:26:72:52:b3:a9:55:59:d1:0e:2c:38:99: 19:6b:6d:54:04:78:34:90:11:34:b5:80:c5:0c:c8: b6:b6:40:13:b5:3d:d5:18:de:d4:8a:40:c3:78:d1: 79:6e:36:ca:fc:f7:cf:0b:ce:0e:c1:0a:fd:bc:70: b9:4e:06:41:f3:cd:e5:8d:27:01:19:66:e9:b7:f1: 7f:54:db:6e:fb:ec:8e:83:38:a8:16:0a:1f:3d:a4: dc:02:02:5a:3c:f7:0c:c4:b4:f5:61:07:c1:52:f7: dd:53:75:da:06:25:5e:17:36:1c:c3:52:47:91:da: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.64.0/22 191.253.68.0/22 IPv6: 2804:135c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263530 Signature Algorithm: sha256WithRSAEncryption db:74:60:bf:42:09:f6:dc:5a:37:7e:66:af:66:c0:a4:fc:fe: 12:65:95:2c:58:c4:ac:a7:74:db:be:81:fe:a6:b7:2c:2d:2b: d0:06:c3:8a:9e:fc:94:0a:06:5c:59:99:e6:c7:cd:c2:97:a1: 7b:c0:78:75:26:02:3a:6b:5a:84:dc:22:3c:a5:43:1e:a6:b8: 69:23:88:79:7d:81:92:2b:9c:69:6d:9a:4a:4e:54:ef:99:df: e2:d6:8a:76:f4:3c:07:f9:fc:c2:d3:84:4d:d5:42:4d:74:bb: 03:74:3c:a3:5f:f0:af:0f:f5:76:49:d7:a2:6f:a3:f4:6e:51: 72:50:61:27:86:a7:a2:9d:60:c2:4e:0d:69:bb:63:6f:16:8a: 64:60:1d:4d:71:1a:2a:dd:45:9f:45:95:5b:da:44:e4:65:a6: ca:d2:2f:92:1a:a7:66:ba:95:2f:ef:9f:57:27:39:85:4d:21: 3b:84:c8:62:9b:20:d3:24:a5:19:cc:e8:a3:b4:f6:0e:73:bd: ac:54:7d:38:53:ba:68:40:4f:3e:e1:f4:a6:ac:b0:3f:71:28: 6d:5c:a3:c0:3f:6d:3d:71:1f:65:4b:67:e6:48:94:16:c1:5b: c4:87:11:22:81:fe:0a:9f:c3:01:96:b2:0c:9c:63:23:fa:62: 61:c6:2a:06 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUewyUUh8zRRNCn1q0h8aHbtG7PxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2NTVaFw0yNTA0MDIxODMxNTVaMDMxMTAvBgNV BAMTKEY3QzRERUIxMjI0MEZGODY4OEMzMkM2NzkzOUMwNEMzODA4MjQwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmX618uW3jyLiFpXph57mV71TX k4xOxl2/NOla/dVX394rTz9BwHlLIaeUlgJkkRK7UDefzQJ4yoOxyhJGA82g3gQi r6DppO/HpGRMYMBBIL5KvM35WO3dO1spUTAT/hrSShTa1sXMSiK5nUL3wdlvexEC QcdDmbQwK+UT5wbgdOhqwPPD/Yyu5CZyUrOpVVnRDiw4mRlrbVQEeDSQETS1gMUM yLa2QBO1PdUY3tSKQMN40XluNsr8988Lzg7BCv28cLlOBkHzzeWNJwEZZum38X9U 22777I6DOKgWCh89pNwCAlo89wzEtPVhB8FS991TddoGJV4XNhzDUkeR2mmfAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT3xN6xIkD/hojD LGeTnATDgIJAJTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGlq NU5EM1VjVlRZNXBYTmQ4QWp4dEg4VlRxcVNtc0JNNlBhNEg4MVJhZU0vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGlq NU5EM1VjVlRZNXBYTmQ4QWp4dEg4VlRxcVNtc0JNNlBhNEg4MVJhZU0vMS9GN0M0 REVCMTIyNDBGRjg2ODhDMzJDNjc5MzlDMDRDMzgwODI0MDI1Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKPiUADBAK//UQwDQQCAAIwBwMFACgEE1wwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAVqMA0GCSqGSIb3DQEBCwUAA4IBAQDbdGC/Qgn2 3Fo3fmavZsCk/P4SZZUsWMSsp3TbvoH+prcsLSvQBsOKnvyUCgZcWZnmx83Cl6F7 wHh1JgI6a1qE3CI8pUMeprhpI4h5fYGSK5xpbZpKTlTvmd/i1op29DwH+fzC04RN 1UJNdLsDdDyjX/CvD/V2Sdeib6P0blFyUGEnhqeinWDCTg1pu2NvFopkYB1NcRoq 3UWfRZVb2kTkZabK0i+SGqdmupUv759XJzmFTSE7hMhimyDTJKUZzOijtPYOc72s VH04U7poQE8+4fSmrLA/cShtXKPAP209cR9lS2fmSJQWwVvEhxEigf4Kn8MBlrIM nGMj+mJhxioG -----END CERTIFICATE-----Generated at Sat Jun 1 23:01:19 2024 by rpki-client on console-ams.rpki-client.org