$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer File: BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer (raw, json) Hash identifier: ETmlQL2yAxn2oE9quz+4zM3wlOidkCDRtIz4rmKmWWg= Subject key identifier: BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 10522DB378115EB65838EEE148FD1975F6B878F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft caRepository: rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 09:20:19 +0000 Certificate not after: Thu 03 Apr 2025 09:25:19 +0000 Subordinate resources: AS: 268819 IP: 45.173.88.0/22 IP: 2804:5b1c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:52:2d:b3:78:11:5e:b6:58:38:ee:e1:48:fd:19:75:f6:b8:78:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 09:20:19 2024 GMT Not After : Apr 3 09:25:19 2025 GMT Subject: CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0b:f5:64:f4:e3:cb:5c:78:05:77:be:a6:b1: 9a:0d:38:4b:1c:ec:56:9d:db:b3:ce:1f:6f:d7:71: 75:42:f7:83:4c:4a:ae:5f:9c:bf:11:75:e4:ea:b8: a2:10:1d:3c:b7:e9:f5:1a:3a:40:fc:a0:00:17:9f: 74:74:1b:bc:0a:74:2d:04:bc:cd:51:a6:17:81:e8: 6d:f4:b2:af:2d:e9:3d:51:e0:d7:f2:eb:6b:02:95: 87:c1:6b:2d:6c:a1:41:a6:ca:a0:70:8d:b2:f0:54: 00:32:04:61:a0:da:56:8e:63:69:ee:72:82:63:8a: 9a:29:90:4a:5d:a4:4d:c1:b0:da:9f:07:ec:0d:ec: 01:85:07:62:4d:0b:bc:01:7c:d7:1e:80:07:9e:36: b8:4c:dc:fd:9c:28:c9:f1:75:9f:71:93:bb:c2:ad: 49:de:0c:70:48:6f:d2:22:d3:a9:d2:12:2d:49:cb: ca:38:75:9a:00:80:70:74:11:cd:2d:fa:3a:a8:41: 6e:fa:b2:68:af:c5:b3:67:06:be:f0:aa:5e:60:52: 49:cd:5e:a3:32:b3:b5:96:67:df:be:f6:f3:3c:94: 8c:8e:86:46:19:d0:af:33:7f:b5:0c:1f:ed:35:a9: 78:b2:97:f3:50:a3:a5:8d:4e:67:fe:b4:88:30:5e: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.88.0/22 IPv6: 2804:5b1c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268819 Signature Algorithm: sha256WithRSAEncryption 45:24:07:6d:dc:7e:4e:b0:b8:4d:fc:00:34:91:10:c9:c9:67: 66:d6:2c:82:c4:ef:9f:01:1c:6f:f2:91:41:1a:bd:eb:1a:de: 27:3a:c3:fc:94:e1:c8:59:e7:7e:6d:80:27:6d:2a:88:9a:b1: b2:63:c1:18:8f:18:a9:84:52:fd:70:1d:46:d6:1b:f9:35:69: 36:20:50:23:b6:e5:f7:df:ce:48:ec:6d:22:da:cb:03:50:80: 91:24:77:e5:0d:72:96:ce:16:2b:c7:96:f5:8a:3e:66:a1:70: e7:43:37:a6:32:40:d4:69:f4:8b:d4:06:15:00:2e:9b:b4:a8: 85:ae:69:cc:fa:69:22:40:f0:f8:4a:c7:62:26:89:f5:5e:b2: da:fb:c4:25:9b:0f:4d:07:93:da:91:f9:9e:4f:e2:d7:11:e6: 8c:c9:ee:df:34:88:ce:81:7c:a8:07:dd:7c:6a:09:9b:44:18: 76:94:1a:a0:3d:6f:5b:41:f4:cf:8d:c1:97:52:6b:fb:9f:32: 49:2e:c0:20:20:b0:84:6c:a1:ea:80:a7:21:5b:b7:64:b4:a9: 34:3e:a6:28:85:33:96:ef:87:5d:a0:2f:ba:4e:6b:a7:fc:de: 3a:dc:48:75:22:ac:9c:ad:bf:35:ba:a8:ba:a0:3d:09:85:e1: fd:df:62:a5 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUEFIts3gRXrZYOO7hSP0Zdfa4ePEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwOTIwMTlaFw0yNTA0MDMwOTI1MTlaMDMxMTAvBgNV BAMTKEJFQTU5NTk4M0ZDNjhDOEVGOUE1NDZEN0U5QTRBNDhERkUyQTg4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChC/Vk9OPLXHgFd76msZoNOEsc 7Fad27POH2/XcXVC94NMSq5fnL8RdeTquKIQHTy36fUaOkD8oAAXn3R0G7wKdC0E vM1RpheB6G30sq8t6T1R4Nfy62sClYfBay1soUGmyqBwjbLwVAAyBGGg2laOY2nu coJjipopkEpdpE3BsNqfB+wN7AGFB2JNC7wBfNcegAeeNrhM3P2cKMnxdZ9xk7vC rUneDHBIb9Ii06nSEi1Jy8o4dZoAgHB0Ec0t+jqoQW76smivxbNnBr7wql5gUknN XqMys7WWZ9++9vM8lIyOhkYZ0K8zf7UMH+01qXiyl/NQo6WNTmf+tIgwXlvFAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+pZWYP8aMjvml RtfppKSN/iqI0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTNi ZWNFUFBnOGcyVUdaTEZLZG1MblhtZ0EzbTh0NXY5cVRoY1k5VFAzMXkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUz YmVjRVBQZzhnMlVHWkxGS2RtTG5YbWdBM204dDV2OXFUaGNZOVRQMzF5LzEvQkVB NTk1OTgzRkM2OEM4RUY5QTU0NkQ3RTlBNEE0OERGRTJBODhEMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa1YMA0EAgACMAcDBQAoBFscMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaEzANBgkqhkiG9w0BAQsFAAOCAQEARSQHbdx+TrC4TfwA NJEQyclnZtYsgsTvnwEcb/KRQRq96xreJzrD/JThyFnnfm2AJ20qiJqxsmPBGI8Y qYRS/XAdRtYb+TVpNiBQI7bl99/OSOxtItrLA1CAkSR35Q1yls4WK8eW9Yo+ZqFw 50M3pjJA1Gn0i9QGFQAum7Soha5pzPppIkDw+ErHYiaJ9V6y2vvEJZsPTQeT2pH5 nk/i1xHmjMnu3zSIzoF8qAfdfGoJm0QYdpQaoD1vW0H0z43Bl1Jr+58ySS7AICCw hGyh6oCnIVu3ZLSpND6mKIUzlu+HXaAvuk5rp/zeOtxIdSKsnK2/NbqouqA9CYXh /d9ipQ== -----END CERTIFICATE-----Generated at Mon Jun 3 05:37:26 2024 by rpki-client on console-ams.rpki-client.org