$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer File: 3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer (raw, json) Hash identifier: 1aJg02naxM5KmaKrnb+pbDAsuccScNH5Z5z0gt3RV8Q= Subject key identifier: 3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 04A0F128433623B7410C605326B6427A1C002F30 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft caRepository: rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 May 2024 12:57:39 +0000 Certificate not after: Mon 19 May 2025 13:02:39 +0000 Subordinate resources: AS: 271487 IP: 201.94.144.0/22 IP: 2804:7c4c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a0:f1:28:43:36:23:b7:41:0c:60:53:26:b6:42:7a:1c:00:2f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 20 12:57:39 2024 GMT Not After : May 19 13:02:39 2025 GMT Subject: CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:02:df:b5:bd:8a:a7:e9:23:fb:86:ac:20: 69:ff:c8:c1:e5:66:51:68:a3:be:17:42:e1:a1:6c: 9e:0f:19:8e:a8:67:2f:39:2e:9f:55:92:1f:5e:b6: 0b:5c:f9:85:45:c4:7b:dd:9c:74:7c:60:ee:c5:72: d7:dc:e2:df:28:39:54:ad:fb:32:5d:df:91:47:12: 42:70:2d:32:55:68:ee:f2:63:33:df:72:0b:71:17: a2:8b:e4:29:b6:eb:5e:fc:98:6d:92:e7:9b:3a:bd: 1e:cd:1a:63:9c:7b:f8:e4:af:29:d7:b8:03:2e:7e: c5:54:9c:9b:5b:aa:13:d5:e6:d1:68:e9:23:ae:d2: ef:79:44:99:66:41:21:5b:c2:45:cf:35:e6:ea:47: 86:9f:dc:7e:70:76:16:df:be:df:09:12:f4:d1:c4: 58:1c:f6:29:b0:52:d7:8e:c8:4a:66:58:09:d6:04: e7:95:22:f3:14:34:3d:3b:be:46:c0:ce:79:f3:39: 9a:d0:d9:0c:ac:a3:4a:f9:af:f5:a0:86:d6:df:9d: 62:8a:28:0d:ca:0f:df:2b:cb:80:f2:d1:18:1f:4a: c3:dc:e3:72:5e:09:b3:d4:bc:4d:53:cd:ec:90:0f: d0:a9:47:e2:50:a9:de:22:32:5f:c5:a0:7b:2d:63: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.94.144.0/22 IPv6: 2804:7c4c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271487 Signature Algorithm: sha256WithRSAEncryption ae:2d:ce:2b:66:2f:e2:12:ef:66:79:2f:ad:08:37:8a:ca:e3: 25:0e:b2:cc:b7:1f:b5:45:47:6c:11:75:19:fb:d6:d0:e4:92: 32:26:47:13:6b:42:c2:ce:70:59:81:d7:c3:3c:ab:27:bb:82: 1a:7c:41:e4:46:a9:32:86:83:fb:93:8c:1b:fe:51:dc:e8:7d: fb:eb:db:86:77:ac:a4:2c:b2:a4:67:bd:7f:38:41:0a:bb:5e: 40:49:55:06:28:e7:64:01:81:6d:58:f3:92:98:07:ba:25:06: 0a:f1:9f:bd:bf:88:ba:f9:94:7b:d1:a4:b1:d5:3f:66:8e:af: 36:01:b1:fc:b5:3d:29:aa:1d:e7:f0:ff:dd:85:f4:f8:03:9b: 9e:50:26:ca:d0:de:4c:30:57:4a:cf:5d:8f:fd:52:35:e5:03: 6d:aa:8f:9c:13:b2:1a:31:47:2a:8c:d6:55:3b:00:ec:07:3e: 26:23:d4:c6:59:14:ef:a6:fd:ad:10:c6:c7:d8:fe:43:a1:02: b5:de:42:54:29:aa:84:e1:6c:5b:f4:00:48:99:dc:f0:68:97: 9e:ff:a4:23:ed:be:63:69:8c:a0:e4:46:10:06:a3:86:99:99: b6:1d:82:52:3d:fc:0e:7b:34:8b:89:c2:c8:20:6d:e8:3b:7a: 5b:1e:57:91 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBKDxKEM2I7dBDGBTJrZCehwALzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MjAxMjU3MzlaFw0yNTA1MTkxMzAyMzlaMDMxMTAvBgNV BAMTKDNGMEVFNTFFQ0ZDMEQxRDg0QjE0QTFGRDBCMUUxNzc4NDZGMkY4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sQLftb2Kp+kj+4asIGn/yMHl ZlFoo74XQuGhbJ4PGY6oZy85Lp9Vkh9etgtc+YVFxHvdnHR8YO7Fctfc4t8oOVSt +zJd35FHEkJwLTJVaO7yYzPfcgtxF6KL5Cm26178mG2S55s6vR7NGmOce/jkrynX uAMufsVUnJtbqhPV5tFo6SOu0u95RJlmQSFbwkXPNebqR4af3H5wdhbfvt8JEvTR xFgc9imwUteOyEpmWAnWBOeVIvMUND07vkbAznnzOZrQ2Qyso0r5r/WghtbfnWKK KA3KD98ry4Dy0RgfSsPc43JeCbPUvE1TzeyQD9CpR+JQqd4iMl/FoHstY6Z1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/DuUez8DR2EsU of0LHhd4RvL4WjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0xU ZFV0UDRBUGVIWHpwSHAyc1lXbzZ1cjhXU2txSFppTDY1MUc1dHRvVkQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NM VGRVdFA0QVBlSFh6cEhwMnNZV282dXI4V1NrcUhaaUw2NTFHNXR0b1ZELzEvM0Yw RUU1MUVDRkMwRDFEODRCMTRBMUZEMEIxRTE3Nzg0NkYyRjg1QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyV6QMA0EAgACMAcDBQAoBHxMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkfzANBgkqhkiG9w0BAQsFAAOCAQEAri3OK2Yv4hLvZnkv rQg3isrjJQ6yzLcftUVHbBF1GfvW0OSSMiZHE2tCws5wWYHXwzyrJ7uCGnxB5Eap MoaD+5OMG/5R3Oh9++vbhnespCyypGe9fzhBCrteQElVBijnZAGBbVjzkpgHuiUG CvGfvb+IuvmUe9GksdU/Zo6vNgGx/LU9Kaod5/D/3YX0+AObnlAmytDeTDBXSs9d j/1SNeUDbaqPnBOyGjFHKozWVTsA7Ac+JiPUxlkU76b9rRDGx9j+Q6ECtd5CVCmq hOFsW/QASJnc8GiXnv+kI+2+Y2mMoORGEAajhpmZth2CUj38Dns0i4nCyCBt6Dt6 Wx5XkQ== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:51 2024 by rpki-client on console.sobornost.net