$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F9FD945661279E684F2D83F08D42ABC68D0123E5.cer File: F9FD945661279E684F2D83F08D42ABC68D0123E5.cer (raw, json) Hash identifier: fwT8J1SNr7CT8GXpOQcc3CP69titbltqH5Jgo7EwRrE= Subject key identifier: F9:FD:94:56:61:27:9E:68:4F:2D:83:F0:8D:42:AB:C6:8D:01:23:E5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7A23A547F5019A40C781148B7D4F50504BBA0506 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/F9FD945661279E684F2D83F08D42ABC68D0123E5.mft caRepository: rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 21:29:47 +0000 Certificate not after: Thu 03 Apr 2025 21:34:47 +0000 Subordinate resources: AS: 264242 IP: 138.117.144.0/22 IP: 2804:24cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 18:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:23:a5:47:f5:01:9a:40:c7:81:14:8b:7d:4f:50:50:4b:ba:05:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 21:29:47 2024 GMT Not After : Apr 3 21:34:47 2025 GMT Subject: CN=F9FD945661279E684F2D83F08D42ABC68D0123E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:47:8c:41:97:af:9f:1a:82:c0:c0:14:81:d0: 8b:f4:de:31:2c:08:f3:25:98:c4:ef:9b:04:cc:9f: 85:7f:fc:ab:78:c8:44:ad:85:4a:9d:92:51:f2:ef: 3e:ab:4d:ad:ba:77:8f:5d:28:47:93:99:c9:c9:c9: 9a:0d:97:06:f6:6f:00:7f:89:82:33:d2:a6:ea:05: 3f:96:72:2c:9c:db:9b:07:a8:6d:eb:e7:7d:d2:68: a7:41:cf:e2:6a:fc:49:5f:d5:25:25:9f:52:43:9a: 73:fc:fe:56:36:13:43:28:09:e0:db:12:bc:da:83: 8e:f3:fa:09:04:6d:7a:7f:f7:b9:2a:fd:93:9a:4b: 02:1c:69:93:c8:d6:53:95:4d:94:0a:84:57:70:51: eb:e5:64:45:c1:2b:7f:16:24:eb:15:67:7f:67:e5: 24:8b:ea:f4:23:97:fe:49:10:be:50:1b:cf:cf:59: 47:ac:3b:bf:c9:f5:70:40:f0:3f:07:82:04:fa:1b: b3:c5:48:6f:4d:a8:6c:60:b4:53:b9:35:2e:e0:9a: c0:57:75:4a:55:86:30:37:0a:1d:7d:b4:74:34:61: 21:ab:75:5a:6e:13:9a:a7:95:9f:27:3b:2f:1a:38: e8:fa:34:22:2d:cc:d9:c5:fc:d9:ed:c3:0d:08:3a: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:FD:94:56:61:27:9E:68:4F:2D:83:F0:8D:42:AB:C6:8D:01:23:E5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/F9FD945661279E684F2D83F08D42ABC68D0123E5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.144.0/22 IPv6: 2804:24cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264242 Signature Algorithm: sha256WithRSAEncryption 19:8e:fd:41:9a:38:b9:a1:27:16:8b:f5:14:78:c5:fb:8d:ea: 5b:27:56:5e:3a:1c:b6:96:ae:2e:62:a8:c5:9f:12:27:35:33: fc:de:4f:f7:21:42:ab:96:22:e9:ae:b4:4e:6b:ce:98:94:96: 1f:c7:d9:6d:a2:74:a5:a7:52:85:83:f9:df:b6:06:5a:b4:1b: 9e:fd:93:fb:ea:77:5b:ef:3a:24:df:c7:36:88:ad:da:5d:06: ed:f1:3b:9d:08:21:e2:d0:48:e5:c6:b9:9b:bd:e6:c6:e3:9d: 09:26:95:1e:a4:2d:9e:59:2f:f5:dd:60:f5:86:2f:af:36:0a: 9a:ba:1e:6b:1e:0e:79:e9:a9:bd:8e:ac:48:22:80:c5:ca:21: c3:92:08:a6:d9:a5:e8:8b:df:10:26:c7:07:e4:3d:45:49:6a: 4b:b1:8d:5d:6a:23:80:ce:b1:3c:11:2a:dc:71:e1:6d:fd:ee: d6:5c:aa:6c:8d:48:cf:77:b5:8b:79:58:23:a5:7d:0a:77:c8: c6:dc:a3:28:bc:47:7b:5e:8b:28:e8:a7:46:74:d8:e4:95:fc: 83:44:a5:e5:0f:30:21:a8:fa:5c:2f:a1:e2:e8:5d:3c:83:42: fa:22:b6:db:3f:54:36:c4:2e:23:ab:e8:89:ca:c7:59:41:60: 9f:e1:89:8d -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUeiOlR/UBmkDHgRSLfU9QUEu6BQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQyMTI5NDdaFw0yNTA0MDMyMTM0NDdaMDMxMTAvBgNV BAMTKEY5RkQ5NDU2NjEyNzlFNjg0RjJEODNGMDhENDJBQkM2OEQwMTIzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoR4xBl6+fGoLAwBSB0Iv03jEs CPMlmMTvmwTMn4V//Kt4yESthUqdklHy7z6rTa26d49dKEeTmcnJyZoNlwb2bwB/ iYIz0qbqBT+Wciyc25sHqG3r533SaKdBz+Jq/Elf1SUln1JDmnP8/lY2E0MoCeDb Erzag47z+gkEbXp/97kq/ZOaSwIcaZPI1lOVTZQKhFdwUevlZEXBK38WJOsVZ39n 5SSL6vQjl/5JEL5QG8/PWUesO7/J9XBA8D8HggT6G7PFSG9NqGxgtFO5NS7gmsBX dUpVhjA3Ch19tHQ0YSGrdVpuE5qnlZ8nOy8aOOj6NCItzNnF/Nntww0IOgNrAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5/ZRWYSeeaE8t g/CNQqvGjQEj5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSm8y SjY3WFNFaHZUS0ZNeVpZczdtZk1ZTGNidE4xdWk2ZFUxRnZFYVk2ei8yLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSm8y SjY3WFNFaHZUS0ZNeVpZczdtZk1ZTGNidE4xdWk2ZFUxRnZFYVk2ei8yL0Y5RkQ5 NDU2NjEyNzlFNjg0RjJEODNGMDhENDJBQkM2OEQwMTIzRTUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAop1kDANBAIAAjAHAwUAKAQkzDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMECDIwDQYJKoZIhvcNAQELBQADggEBABmO/UGaOLmhJxaL9RR4 xfuN6lsnVl46HLaWri5iqMWfEic1M/zeT/chQquWIumutE5rzpiUlh/H2W2idKWn UoWD+d+2Blq0G579k/vqd1vvOiTfxzaIrdpdBu3xO50IIeLQSOXGuZu95sbjnQkm lR6kLZ5ZL/XdYPWGL682Cpq6HmseDnnpqb2OrEgigMXKIcOSCKbZpeiL3xAmxwfk PUVJakuxjV1qI4DOsTwRKtxx4W397tZcqmyNSM93tYt5WCOlfQp3yMbcoyi8R3te iyjop0Z02OSV/INEpeUPMCGo+lwvoeLoXTyDQvoitts/VDbELiOr6InKx1lBYJ/h iY0= -----END CERTIFICATE-----Generated at Tue Jun 18 17:34:32 2024 by rpki-client on console-ams.rpki-client.org