$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/01848C66A25335A0075484FBC32617363F3B8550.cer File: 01848C66A25335A0075484FBC32617363F3B8550.cer (raw, json) Hash identifier: c7cqs4QOEpj3Pi4FaWkDb0sKOklMdTH4lp19Njnag6g= Subject key identifier: 01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 25028BE9745106B22C78D33220FA3D20E5A96163 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft caRepository: rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Apr 2024 17:25:59 +0000 Certificate not after: Mon 21 Apr 2025 17:30:59 +0000 Subordinate resources: AS: 264461 IP: 132.255.28.0/22 IP: 201.182.32.0/22 IP: 2804:2008::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:02:8b:e9:74:51:06:b2:2c:78:d3:32:20:fa:3d:20:e5:a9:61:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 17:25:59 2024 GMT Not After : Apr 21 17:30:59 2025 GMT Subject: CN=01848C66A25335A0075484FBC32617363F3B8550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:eb:0d:73:fb:7e:70:17:15:31:43:c4:12: 35:6f:2a:f7:24:f5:94:9e:5f:e0:9d:e5:3e:82:f1: d6:8a:85:4f:85:87:d1:71:55:31:66:42:77:7c:9c: c7:87:63:1c:3b:84:bf:5b:22:a1:17:e5:25:2c:c6: 53:2e:72:68:9e:04:69:f7:e4:49:1e:c6:e5:ca:40: 78:73:c5:91:da:94:de:45:e6:6d:68:a9:18:2b:1c: 69:08:14:b8:a3:7a:5e:39:59:9b:8c:2e:ca:7d:92: 2b:21:42:5b:b0:4c:94:21:8f:39:2d:1c:2c:63:1f: 0f:8b:8e:78:1a:73:9b:ac:c4:18:ad:9f:4d:af:b2: 78:9c:24:ff:28:a5:7c:7a:10:8a:ee:88:2a:73:37: 85:c0:97:87:53:be:bb:7f:cd:0e:95:b0:70:cc:29: 31:3d:63:76:d7:7f:72:b4:cd:44:74:99:d7:b7:5c: 48:78:22:16:08:77:60:d3:b7:38:31:e0:f0:ec:10: cc:47:24:bf:3a:24:50:a6:f3:09:b5:61:3d:08:81: ae:bc:5a:0f:fb:97:88:c4:7e:98:ac:7a:0a:01:aa: 12:ce:3a:34:0d:f4:db:8f:2b:fd:d4:27:fe:e6:ec: be:c4:be:b3:cd:78:c5:06:13:a2:9a:c9:2f:1c:5f: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.28.0/22 201.182.32.0/22 IPv6: 2804:2008::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264461 Signature Algorithm: sha256WithRSAEncryption 4f:f5:96:2f:da:e9:00:94:81:1d:17:4b:9f:7b:fe:aa:58:77: a0:fc:e7:30:53:dc:00:58:d8:90:22:62:08:18:f2:15:36:ac: 5a:f7:b7:8c:5a:7f:bb:c2:71:02:23:58:cf:86:86:e4:19:c3: 66:a1:36:34:95:a2:14:fb:e8:89:fd:9d:c0:44:18:23:b7:d6: 2b:6b:ac:a9:9b:f1:35:a3:25:98:89:19:43:cc:e7:d2:5d:f3: 7c:d0:52:1b:7b:e9:26:4c:86:0f:38:8d:4b:e0:1e:18:86:91: 79:4c:9c:e6:f5:bd:f1:98:6b:a7:8b:ff:06:5a:48:3c:17:a8: fa:a9:e8:b7:84:a5:4a:07:9c:16:f6:e3:19:ae:32:36:4d:65: 3d:cb:d9:76:55:1f:44:de:45:23:8d:e5:77:ad:99:11:6e:47: 5c:73:e3:15:40:26:bf:55:66:26:d3:6d:85:f3:bf:14:37:fb: 33:58:7a:b3:48:1c:cb:d1:f8:85:c7:f6:4d:32:e2:ba:59:c5: 73:8f:93:c8:73:ef:2e:c1:f2:68:0a:d3:98:22:57:aa:bd:80: 2e:be:8c:ea:d9:92:59:10:1a:a6:d8:03:2b:25:90:80:85:7c: e0:ba:47:90:41:75:57:84:9d:5f:5a:8b:f3:70:91:6e:dd:11: 44:93:01:a0 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUJQKL6XRRBrIseNMyIPo9IOWpYWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjIxNzI1NTlaFw0yNTA0MjExNzMwNTlaMDMxMTAvBgNV BAMTKDAxODQ4QzY2QTI1MzM1QTAwNzU0ODRGQkMzMjYxNzM2M0YzQjg1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODesNc/t+cBcVMUPEEjVvKvck 9ZSeX+Cd5T6C8daKhU+Fh9FxVTFmQnd8nMeHYxw7hL9bIqEX5SUsxlMucmieBGn3 5EkexuXKQHhzxZHalN5F5m1oqRgrHGkIFLijel45WZuMLsp9kishQluwTJQhjzkt HCxjHw+Ljngac5usxBitn02vsnicJP8opXx6EIruiCpzN4XAl4dTvrt/zQ6VsHDM KTE9Y3bXf3K0zUR0mde3XEh4IhYId2DTtzgx4PDsEMxHJL86JFCm8wm1YT0Iga68 Wg/7l4jEfpisegoBqhLOOjQN9NuPK/3UJ/7m7L7EvrPNeMUGE6KayS8cXxuvAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBhIxmolM1oAdU hPvDJhc2PzuFUDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm9l Q2VWQmM0N2FVZjh3ZVFBQ1VrMlpvTm5hWFBjcVhKa1NpVGo2QmZ4d2svMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jv ZUNlVkJjNDdhVWY4d2VRQUNVazJab05uYVhQY3FYSmtTaVRqNkJmeHdrLzAvMDE4 NDhDNjZBMjUzMzVBMDA3NTQ4NEZCQzMyNjE3MzYzRjNCODU1MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQChP8cAwQCybYgMA0EAgACMAcDBQAoBCAIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJDTANBgkqhkiG9w0BAQsFAAOCAQEAT/WWL9rp AJSBHRdLn3v+qlh3oPznMFPcAFjYkCJiCBjyFTasWve3jFp/u8JxAiNYz4aG5BnD ZqE2NJWiFPvoif2dwEQYI7fWK2usqZvxNaMlmIkZQ8zn0l3zfNBSG3vpJkyGDziN S+AeGIaReUyc5vW98Zhrp4v/BlpIPBeo+qnot4SlSgecFvbjGa4yNk1lPcvZdlUf RN5FI43ld62ZEW5HXHPjFUAmv1VmJtNthfO/FDf7M1h6s0gcy9H4hcf2TTLiulnF c4+TyHPvLsHyaArTmCJXqr2ALr6M6tmSWRAaptgDKyWQgIV84LpHkEF1V4SdX1qL 83CRbt0RRJMBoA== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:33 2024 by rpki-client on console-ams.rpki-client.org