$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer File: 17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer (raw, json) Hash identifier: Ew8IzT25bj27zAOTd6gWSroaJfr8l74mSO0EGxeUgJU= Subject key identifier: 17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 47E370172F7E3CA199BCFE28D5088E24967F2C35 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.mft caRepository: rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 08:09:54 +0000 Certificate not after: Thu 03 Apr 2025 08:14:54 +0000 Subordinate resources: AS: 267357 IP: 45.234.104.0/22 IP: 131.196.56.0/22 IP: 2804:4c38::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 18:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e3:70:17:2f:7e:3c:a1:99:bc:fe:28:d5:08:8e:24:96:7f:2c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 08:09:54 2024 GMT Not After : Apr 3 08:14:54 2025 GMT Subject: CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:dd:e4:c0:45:e7:95:63:84:03:3a:48:c2: bd:37:7b:a7:a6:c2:8e:1a:74:cc:1f:a6:e3:e5:88: a3:a3:ff:9e:44:89:5e:24:a9:9e:94:f8:6e:dc:2e: 5d:d4:98:ed:9f:2d:89:ae:a7:13:4c:cd:13:99:98: 71:ce:89:54:5d:11:9d:ed:c6:61:e0:d0:25:0c:c2: 53:b6:fc:e2:7a:c9:7e:e5:96:33:f8:e2:90:9c:71: 95:76:71:33:28:e3:d7:2b:b7:6d:79:6b:9d:ae:f9: 9e:cf:d1:17:68:39:c0:18:b8:a8:c7:5a:dc:b7:81: 1f:4e:3c:36:b6:b9:c4:c1:82:e0:47:47:88:50:74: a2:94:8e:2a:75:eb:46:fe:69:8b:bd:58:6b:ba:2c: 24:b4:1e:59:ab:f8:0c:e7:19:36:65:00:74:60:e0: ce:d5:c8:e1:7b:d3:bf:09:b2:be:25:16:de:04:de: 88:02:99:1b:bb:ec:2b:f2:52:15:55:ae:73:9b:bb: 80:79:3e:bf:e4:15:75:c7:f2:93:9e:59:70:a1:cf: 85:90:df:c4:01:cc:5e:94:c4:5b:c0:ce:63:b3:c2: f0:7a:a7:f6:76:6c:8b:d4:4a:a4:a1:b9:fc:53:f5: cd:04:31:9d:51:22:da:a1:f1:33:90:88:21:ce:33: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.104.0/22 131.196.56.0/22 IPv6: 2804:4c38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267357 Signature Algorithm: sha256WithRSAEncryption d4:3d:90:16:7f:6d:d3:c6:ee:15:d1:10:e8:7b:2a:64:d8:fa: a0:66:3d:48:8b:99:f0:c4:61:43:78:e7:45:f9:31:8c:9e:17: 72:79:7b:f8:7c:49:4e:34:42:ed:11:9d:4d:a7:9b:df:57:83: 47:dd:8a:ee:0f:33:2e:8b:91:a4:15:29:41:fd:dc:a9:d6:12: 0e:8a:09:1b:68:c9:d1:69:db:cf:e4:dc:0e:2f:16:1c:26:e3: 6e:9e:ce:5c:e1:55:f2:22:ea:b2:c8:fa:99:93:fb:8a:cd:32: 2a:e4:6a:b4:6b:50:a3:92:fd:73:d5:22:7e:f5:92:18:bc:3c: 6a:61:8b:7a:fd:80:76:9c:43:6f:3e:96:10:4a:d2:20:9c:6b: c0:dd:1a:85:19:e8:00:d8:c1:8f:41:d4:bc:db:a2:51:8d:ee: f9:31:ba:1b:6f:25:83:c8:59:89:1c:e9:b7:c8:1c:a1:b7:b4: 3b:ba:ab:79:30:5b:c7:dc:2f:5a:90:f7:3e:d4:ff:34:03:6f: 8f:23:0e:c3:3e:78:80:6b:eb:73:1f:a9:51:df:db:14:d5:02: 45:fa:f8:75:40:f4:10:bd:07:ca:d7:76:77:aa:52:82:66:a3: b3:a7:2c:0a:c5:80:7b:e8:6a:ef:f8:46:09:23:89:7a:93:81: a3:a0:73:9b -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUR+NwFy9+PKGZvP4o1QiOJJZ/LDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwODA5NTRaFw0yNTA0MDMwODE0NTRaMDMxMTAvBgNV BAMTKDE3RUQ4MEUzOTVGOEVGREE4MzAxOEFCNTMxQ0YzNkUzMkIzMzc0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYd3kwEXnlWOEAzpIwr03e6em wo4adMwfpuPliKOj/55EiV4kqZ6U+G7cLl3UmO2fLYmupxNMzROZmHHOiVRdEZ3t xmHg0CUMwlO2/OJ6yX7lljP44pCccZV2cTMo49crt215a52u+Z7P0RdoOcAYuKjH Wty3gR9OPDa2ucTBguBHR4hQdKKUjip160b+aYu9WGu6LCS0Hlmr+AznGTZlAHRg 4M7VyOF7078Jsr4lFt4E3ogCmRu77CvyUhVVrnObu4B5Pr/kFXXH8pOeWXChz4WQ 38QBzF6UxFvAzmOzwvB6p/Z2bIvUSqShufxT9c0EMZ1RItqh8TOQiCHOMyLvAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQX7YDjlfjv2oMB irUxzzbjKzN0tDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTZK UnVycnlCVHpVS2dpNVViVU5KUE1Qa0ptckt1TjJxSFBLVWlrWjM4OVUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U2 SlJ1cnJ5QlR6VUtnaTVVYlVOSlBNUGtKbXJLdU4ycUhQS1Vpa1ozODlVLzEvMTdF RDgwRTM5NUY4RUZEQTgzMDE4QUI1MzFDRjM2RTMyQjMzNzRCNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLepoAwQCg8Q4MA0EAgACMAcDBQAoBEw4MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQUXTANBgkqhkiG9w0BAQsFAAOCAQEA1D2QFn9t 08buFdEQ6HsqZNj6oGY9SIuZ8MRhQ3jnRfkxjJ4Xcnl7+HxJTjRC7RGdTaeb31eD R92K7g8zLouRpBUpQf3cqdYSDooJG2jJ0Wnbz+TcDi8WHCbjbp7OXOFV8iLqssj6 mZP7is0yKuRqtGtQo5L9c9UifvWSGLw8amGLev2AdpxDbz6WEErSIJxrwN0ahRno ANjBj0HUvNuiUY3u+TG6G28lg8hZiRzpt8gcobe0O7qreTBbx9wvWpD3PtT/NANv jyMOwz54gGvrcx+pUd/bFNUCRfr4dUD0EL0Hytd2d6pSgmajs6csCsWAe+hq7/hG CSOJepOBo6Bzmw== -----END CERTIFICATE-----Generated at Tue Jun 18 17:34:08 2024 by rpki-client on console-ams.rpki-client.org