$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.cer File: FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.cer (raw, json) Hash identifier: /g0qqrsYcDwNSVi39AYcXUgsVBNapGdMgRZeHYU1sKI= Subject key identifier: FA:11:21:EC:AC:AF:0E:8C:2C:26:95:DA:5A:E6:A8:1C:33:C4:09:7F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 09EDF2C5DD589222F21E048841A416FD3348ECB4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.mft caRepository: rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 May 2024 00:20:22 +0000 Certificate not after: Wed 07 May 2025 00:25:22 +0000 Subordinate resources: AS: 61774 IP: 200.225.136.0/22 IP: 2804:1924::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 18 Jun 2024 18:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ed:f2:c5:dd:58:92:22:f2:1e:04:88:41:a4:16:fd:33:48:ec:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 8 00:20:22 2024 GMT Not After : May 7 00:25:22 2025 GMT Subject: CN=FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:4e:fd:51:77:ed:78:f3:4a:36:82:a2:54: 16:99:87:bd:bd:56:a0:fc:21:31:d2:17:31:17:e0: 83:7e:6f:d1:6a:d3:bd:19:37:90:58:18:a2:b4:37: c1:a3:ae:a8:f9:34:76:72:6b:74:8f:c0:e8:a5:49: ac:87:d0:bb:15:38:f5:8f:00:76:45:11:b4:0e:ea: ac:dd:da:d6:bd:1a:88:4b:40:79:bc:c8:a4:a3:48: 84:61:23:2f:b8:2b:e6:87:28:68:87:8a:67:18:9f: 37:b3:e1:db:f6:a9:28:f8:58:19:36:e1:45:e8:3b: 83:ea:4e:ce:86:84:a7:14:25:11:7b:55:51:76:10: 39:b4:3b:92:ba:6b:1c:ca:f9:c6:07:54:2a:93:6b: 75:60:06:75:95:aa:ee:bf:63:8f:1d:76:01:fb:99: 0d:9c:75:40:cd:2d:a5:ce:46:6c:e1:c5:be:bd:57: 49:5f:31:52:bf:b6:77:90:a2:39:6f:13:fb:03:11: 20:41:7e:df:51:6d:1b:9a:71:29:59:5e:37:35:dc: 07:b9:23:44:4d:ba:04:d7:a8:9f:66:15:9f:9d:f8: bf:54:d3:2c:eb:06:df:30:36:36:9c:d6:db:0f:76: 01:e3:01:e7:38:36:3e:b0:83:4c:d6:f0:e9:8c:c4: c9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:11:21:EC:AC:AF:0E:8C:2C:26:95:DA:5A:E6:A8:1C:33:C4:09:7F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.225.136.0/22 IPv6: 2804:1924::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61774 Signature Algorithm: sha256WithRSAEncryption d9:90:31:29:4a:c9:83:90:a8:1a:45:56:e1:07:89:66:b7:a9: a4:b4:67:6d:c5:8f:ff:aa:e0:4d:99:2c:ea:bc:82:cd:40:92: fe:2a:e1:f6:32:db:15:d6:22:77:f2:a0:cd:b4:4f:e5:47:0b: 07:f4:ac:c5:f9:0a:bb:de:c2:04:8f:96:3f:04:1e:a0:46:9f: 95:34:6f:6b:bf:c7:07:86:d0:42:57:e3:7d:37:c1:0b:8d:49: ad:be:66:de:bb:07:00:88:86:69:37:8c:50:71:61:e7:73:2e: 32:56:a9:c7:03:83:69:9a:30:2c:b2:9e:9e:ac:eb:d9:3b:f0: 29:51:97:0d:72:ea:59:39:f4:b6:97:0b:c3:40:0d:ff:c7:4c: f8:00:23:18:ab:c8:49:4c:da:15:c7:24:af:66:eb:60:8b:dd: 7c:e7:45:3c:53:a9:1d:08:eb:57:a5:d0:23:0e:37:47:e0:b5: 39:3c:3f:72:1b:3e:db:fa:6d:16:8b:e1:40:04:da:f4:5c:77: d0:bb:0e:5f:ab:d9:46:ce:25:bf:50:e2:f7:ce:e4:85:24:12: 70:86:ed:8d:84:ad:79:41:00:57:77:51:f4:dc:70:71:25:64: e8:73:07:4d:83:ae:83:45:6c:cb:ab:6a:c8:ec:30:27:5e:77: 0c:28:3b:ea -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCe3yxd1YkiLyHgSIQaQW/TNI7LQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MDgwMDIwMjJaFw0yNTA1MDcwMDI1MjJaMDMxMTAvBgNV BAMTKEZBMTEyMUVDQUNBRjBFOEMyQzI2OTVEQTVBRTZBODFDMzNDNDA5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2U79UXftePNKNoKiVBaZh729 VqD8ITHSFzEX4IN+b9Fq070ZN5BYGKK0N8Gjrqj5NHZya3SPwOilSayH0LsVOPWP AHZFEbQO6qzd2ta9GohLQHm8yKSjSIRhIy+4K+aHKGiHimcYnzez4dv2qSj4WBk2 4UXoO4PqTs6GhKcUJRF7VVF2EDm0O5K6axzK+cYHVCqTa3VgBnWVqu6/Y48ddgH7 mQ2cdUDNLaXORmzhxb69V0lfMVK/tneQojlvE/sDESBBft9RbRuacSlZXjc13Ae5 I0RNugTXqJ9mFZ+d+L9U0yzrBt8wNjac1tsPdgHjAec4Nj6wg0zW8OmMxMlFAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6ESHsrK8OjCwm ldpa5qgcM8QJfzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWZv cExqVHZacmlYYVI2cEZFUVV3cmNYUHJoblV3Q0VCNmVUSjlxV2c5SGovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlm b3BMalR2WnJpWGFSNnBGRVFVd3JjWFByaG5Vd0NFQjZlVEo5cVdnOUhqLzEvRkEx MTIxRUNBQ0FGMEU4QzJDMjY5NURBNUFFNkE4MUMzM0M0MDk3Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyOGIMA0EAgACMAcDBQAoBBkkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxTjANBgkqhkiG9w0BAQsFAAOCAQEA2ZAxKUrJg5CoGkVW 4QeJZreppLRnbcWP/6rgTZks6ryCzUCS/irh9jLbFdYid/KgzbRP5UcLB/SsxfkK u97CBI+WPwQeoEaflTRva7/HB4bQQlfjfTfBC41Jrb5m3rsHAIiGaTeMUHFh53Mu MlapxwODaZowLLKenqzr2TvwKVGXDXLqWTn0tpcLw0AN/8dM+AAjGKvISUzaFcck r2brYIvdfOdFPFOpHQjrV6XQIw43R+C1OTw/chs+2/ptFovhQATa9Fx30LsOX6vZ Rs4lv1Di987khSQScIbtjYSteUEAV3dR9NxwcSVk6HMHTYOug0Vsy6tqyOwwJ153 DCg76g== -----END CERTIFICATE-----Generated at Mon Jun 17 18:19:33 2024 by rpki-client on console-ams.rpki-client.org