$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer File: FF8022FCD112C507FDC1D72A4931605EF74BC817.cer (raw, json) Hash identifier: +a4E5ZySmkL7uky6xgpc49fZVULVJgi1Q7WBSq0XwJM= Subject key identifier: FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3807E0F7035CAB4A8CB167A3EEE2D2435CD28116 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.mft caRepository: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 11:42:43 +0000 Certificate not after: Thu 03 Apr 2025 11:47:43 +0000 Subordinate resources: AS: 53062 IP: 45.7.128.0/22 IP: 168.90.168.0/22 IP: 170.150.236.0/22 IP: 177.36.176.0/20 IP: 177.75.160.0/20 IP: 177.155.128.0/20 IP: 186.211.96.0/20 IP: 187.85.144.0/20 IP: 2804:3b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 03:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:07:e0:f7:03:5c:ab:4a:8c:b1:67:a3:ee:e2:d2:43:5c:d2:81:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 11:42:43 2024 GMT Not After : Apr 3 11:47:43 2025 GMT Subject: CN=FF8022FCD112C507FDC1D72A4931605EF74BC817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:fb:95:df:28:8b:48:26:bd:71:c4:6f:8c: 43:f8:3e:20:65:3a:ab:0f:5b:6f:f9:32:6b:60:d7: 74:03:24:01:92:d5:2d:cd:0f:5f:86:54:cd:2d:f1: e2:f7:b3:09:45:18:07:87:79:a3:50:93:43:74:99: d3:4c:ec:4c:13:96:6f:9b:99:22:29:b2:dd:a5:09: 56:d4:4c:20:92:40:0a:2f:c2:74:bc:d9:4e:16:2d: e4:1d:28:7d:2c:8d:04:b6:8e:54:16:eb:d8:db:f0: 7a:73:6a:9f:ea:af:8c:a3:f0:09:e1:1b:99:fa:5d: 01:5d:d2:52:46:f8:34:92:01:a9:bb:a4:c5:08:46: a8:6e:1a:3c:42:b6:4f:4c:b0:6b:42:8e:b6:ee:59: c3:f5:29:0e:8c:0d:1d:d2:fb:ef:38:7c:fe:f0:1c: d9:a4:be:59:6f:57:b5:09:c8:62:31:a9:24:6e:d1: 84:28:b7:a4:13:2a:da:30:59:fa:67:b6:ec:2a:86: 23:f6:9a:0c:1f:33:64:36:97:51:2d:34:65:53:55: 9f:40:95:ee:be:1d:7a:99:12:5a:18:a1:2f:09:78: a8:7c:0a:95:7f:48:b7:aa:7f:b9:4a:88:ed:a4:3b: ae:b2:d7:86:31:bd:1d:79:8b:0c:96:d6:ff:4c:10: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.128.0/22 168.90.168.0/22 170.150.236.0/22 177.36.176.0/20 177.75.160.0/20 177.155.128.0/20 186.211.96.0/20 187.85.144.0/20 IPv6: 2804:3b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53062 Signature Algorithm: sha256WithRSAEncryption 98:1b:74:f5:09:bd:f9:3f:5a:a5:f1:e4:db:ca:dc:90:79:ca: 44:c9:e9:1d:3b:66:b2:17:1d:d7:90:1b:d5:19:40:71:6d:41: 47:f5:df:a7:d7:d2:36:66:a9:68:9d:35:71:f7:ce:a9:a2:2b: 4c:00:a2:5f:bf:09:7e:32:9e:fa:8b:4c:72:6a:0e:2f:30:94: 99:c5:d8:71:23:cc:3e:d7:cd:4a:f1:fd:a4:c6:3a:68:ef:9b: ea:e5:1f:1a:6d:ec:25:7a:9e:6e:55:9c:61:c6:d1:df:3b:c4: e9:c4:eb:8c:18:70:25:d6:6a:03:ec:8c:f2:26:46:5c:bc:9b: 24:33:62:c7:02:c8:4b:df:e0:50:d3:b8:af:b7:6b:e7:b4:c5: f7:2f:87:ef:0d:66:04:bc:80:73:51:aa:00:3a:ca:8b:a8:b5: 9e:9d:5b:61:23:67:ff:76:ea:e7:3a:97:08:52:cf:1e:b1:72: 2e:31:21:66:eb:05:bb:ea:4f:80:a1:81:8b:c7:c4:ec:5a:a0: 6f:0f:8f:48:22:47:0e:fb:b6:cd:6a:2a:21:89:c1:47:24:d1: 5a:8c:f7:9a:1d:c9:66:6e:9f:47:50:48:11:51:05:f2:8b:c3: 06:66:e7:4e:92:af:c4:6f:6f:be:27:42:45:1f:0a:28:4a:68: 86:a0:20:ed -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUOAfg9wNcq0qMsWej7uLSQ1zSgRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMTQyNDNaFw0yNTA0MDMxMTQ3NDNaMDMxMTAvBgNV BAMTKEZGODAyMkZDRDExMkM1MDdGREMxRDcyQTQ5MzE2MDVFRjc0QkM4MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WfuV3yiLSCa9ccRvjEP4PiBl OqsPW2/5Mmtg13QDJAGS1S3ND1+GVM0t8eL3swlFGAeHeaNQk0N0mdNM7EwTlm+b mSIpst2lCVbUTCCSQAovwnS82U4WLeQdKH0sjQS2jlQW69jb8Hpzap/qr4yj8Anh G5n6XQFd0lJG+DSSAam7pMUIRqhuGjxCtk9MsGtCjrbuWcP1KQ6MDR3S++84fP7w HNmkvllvV7UJyGIxqSRu0YQot6QTKtowWfpntuwqhiP2mgwfM2Q2l1EtNGVTVZ9A le6+HXqZEloYoS8JeKh8CpV/SLeqf7lKiO2kO66y14YxvR15iwyW1v9MEPgjAgMB AAGjggNiMIIDXjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/gCL80RLFB/3B 1ypJMWBe90vIFzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWhn RFdBQVo3NGpZaDE5TFU2djdBUnFTeE5WNGp2ZEVpREZXOTI5d3V2cC80LzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWhn RFdBQVo3NGpZaDE5TFU2djdBUnFTeE5WNGp2ZEVpREZXOTI5d3V2cC80L0ZGODAy MkZDRDExMkM1MDdGREMxRDcyQTQ5MzE2MDVFRjc0QkM4MTcubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBYBggrBgEFBQcBBwEB /wRJMEcwNgQCAAEwMAMEAi0HgAMEAqhaqAMEAqqW7AMEBLEksAMEBLFLoAMEBLGb gAMEBLrTYAMEBLtVkDANBAIAAjAHAwUAKAQDsDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMAz0YwDQYJKoZIhvcNAQELBQADggEBAJgbdPUJvfk/WqXx5NvK3JB5ykTJ 6R07ZrIXHdeQG9UZQHFtQUf136fX0jZmqWidNXH3zqmiK0wAol+/CX4ynvqLTHJq Di8wlJnF2HEjzD7XzUrx/aTGOmjvm+rlHxpt7CV6nm5VnGHG0d87xOnE64wYcCXW agPsjPImRly8myQzYscCyEvf4FDTuK+3a+e0xfcvh+8NZgS8gHNRqgA6youotZ6d W2EjZ/926uc6lwhSzx6xci4xIWbrBbvqT4ChgYvHxOxaoG8Pj0giRw77ts1qKiGJ wUck0VqM95odyWZun0dQSBFRBfKLwwZm506Sr8Rvb74nQkUfCihKaIagIO0= -----END CERTIFICATE-----Generated at Tue Jun 18 04:47:30 2024 by rpki-client on console-ams.rpki-client.org