$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer File: 1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer (raw, json) Hash identifier: f6bRotJao31jIcshmnyuK9DYXKMWGX4eHwe/FIP4Hdc= Subject key identifier: 1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 53B153E421ACBFC0B04DC9ADEF0D9F7A797584BE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft caRepository: rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 23:39:18 +0000 Certificate not after: Wed 02 Apr 2025 23:44:18 +0000 Subordinate resources: AS: 268112 IP: 45.169.120.0/22 IP: 2804:5830::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b1:53:e4:21:ac:bf:c0:b0:4d:c9:ad:ef:0d:9f:7a:79:75:84:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 23:39:18 2024 GMT Not After : Apr 2 23:44:18 2025 GMT Subject: CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:d6:3e:63:25:74:67:7c:93:ed:63:96:b0: 43:db:68:ed:df:c4:ce:f9:25:62:09:61:58:ab:71: 1d:d6:8a:97:34:7c:b5:a7:ab:ac:3a:5e:31:a1:6b: 28:d0:a6:8d:c4:9a:ab:19:64:61:ad:d0:3d:7c:38: 9e:75:2c:0c:19:a0:43:29:08:c3:d2:df:92:ec:bb: 21:03:66:dc:07:7c:f9:06:9a:f8:12:bd:f7:a1:ce: 7b:06:9e:5f:e6:43:55:50:67:e4:3a:42:e2:64:12: d9:1c:a9:3a:8c:13:b1:fc:21:28:a3:8d:4e:06:38: 66:25:0e:2e:68:05:ec:1b:f2:1c:e9:f8:bd:62:2c: 15:78:82:ca:b0:0a:18:3b:14:6f:bb:54:c4:1b:bb: f0:ba:75:5c:3b:27:ea:95:82:71:a1:84:96:4a:4f: ef:40:5d:ad:e4:12:70:da:b7:82:62:af:76:e0:31: 9d:49:28:2a:0d:2d:4a:92:02:8f:8e:a0:19:92:47: 57:9e:1c:63:80:e9:c2:ef:ad:53:b3:25:79:6d:dd: 95:81:0a:94:ee:11:e3:96:44:b1:7e:a1:7c:0d:26: 25:c2:f5:c5:4a:2d:63:1b:c3:02:5b:08:f9:b2:3f: 17:26:3b:63:38:db:c7:af:01:95:6d:55:57:aa:00: 67:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.120.0/22 IPv6: 2804:5830::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268112 Signature Algorithm: sha256WithRSAEncryption 95:d2:b0:67:8e:52:7d:36:d5:f4:10:7b:b6:0e:6a:22:c8:55: 8f:dc:f7:6e:56:52:fb:1a:ff:41:35:6d:bd:22:40:a6:e4:c9: 55:42:70:e7:42:5e:42:57:10:65:b3:9e:77:c9:86:5f:aa:ad: 02:1a:49:91:5c:93:6f:c1:b0:5a:c9:9e:b0:a4:67:0f:e4:52: af:ca:32:ab:9d:cf:26:db:40:70:67:6e:fe:f5:73:33:d5:c5: 05:77:d9:72:4e:51:b2:9d:f2:b4:1d:b2:16:3e:22:d2:9f:cd: 8f:67:75:92:8c:c0:be:6a:50:07:7f:3b:50:d1:32:3e:38:3f: 21:11:85:04:2d:0e:2b:ea:f8:f2:9c:b3:c7:1a:9c:4f:b3:8a: 43:cd:c2:b0:b4:dc:b2:f4:c9:9c:41:d0:03:3c:43:04:48:99: 42:7c:18:c0:9b:fc:8d:ca:9e:f1:b2:e6:d2:f8:00:78:0b:8e: d1:eb:2e:64:a4:7f:87:29:46:a0:3c:2a:9d:2e:fe:13:1b:a3: 82:f0:03:a2:bb:ba:38:fa:84:da:06:8c:c8:ff:3b:a5:a2:9e: 76:5e:cd:64:90:6f:75:12:9c:86:31:2b:9d:ab:1d:bf:c4:fa: a1:e9:2d:52:98:4b:d4:29:22:ce:74:08:7e:23:87:8b:3b:6a: 20:e6:73:39 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUU7FT5CGsv8CwTcmt7w2fenl1hL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMzM5MThaFw0yNTA0MDIyMzQ0MThaMDMxMTAvBgNV BAMTKDFCMTc0N0ZGQ0I1QjM5N0FDNjZEMDBCRjc2QTQwM0FBN0QwQjJEREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qNY+YyV0Z3yT7WOWsEPbaO3f xM75JWIJYVircR3Wipc0fLWnq6w6XjGhayjQpo3EmqsZZGGt0D18OJ51LAwZoEMp CMPS35LsuyEDZtwHfPkGmvgSvfehznsGnl/mQ1VQZ+Q6QuJkEtkcqTqME7H8ISij jU4GOGYlDi5oBewb8hzp+L1iLBV4gsqwChg7FG+7VMQbu/C6dVw7J+qVgnGhhJZK T+9AXa3kEnDat4Jir3bgMZ1JKCoNLUqSAo+OoBmSR1eeHGOA6cLvrVOzJXlt3ZWB CpTuEeOWRLF+oXwNJiXC9cVKLWMbwwJbCPmyPxcmO2M428evAZVtVVeqAGdpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbF0f/y1s5esZt AL92pAOqfQst3DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3pQ WUJtQWdYRDlvakhHaVZRUDgxdTh6NnlkWDZhMXpFSGJaRXVCYkdwRVQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzd6 UFlCbUFnWEQ5b2pIR2lWUVA4MXU4ejZ5ZFg2YTF6RUhiWkV1QmJHcEVULzEvMUIx NzQ3RkZDQjVCMzk3QUM2NkQwMEJGNzZBNDAzQUE3RDBCMkREQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLal4MA0EAgACMAcDBQAoBFgwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXUDANBgkqhkiG9w0BAQsFAAOCAQEAldKwZ45SfTbV9BB7 tg5qIshVj9z3blZS+xr/QTVtvSJApuTJVUJw50JeQlcQZbOed8mGX6qtAhpJkVyT b8GwWsmesKRnD+RSr8oyq53PJttAcGdu/vVzM9XFBXfZck5Rsp3ytB2yFj4i0p/N j2d1kozAvmpQB387UNEyPjg/IRGFBC0OK+r48pyzxxqcT7OKQ83CsLTcsvTJnEHQ AzxDBEiZQnwYwJv8jcqe8bLm0vgAeAuO0esuZKR/hylGoDwqnS7+ExujgvADoru6 OPqE2gaMyP87paKedl7NZJBvdRKchjErnasdv8T6oektUphL1CkiznQIfiOHiztq IOZzOQ== -----END CERTIFICATE-----Generated at Sat Jun 1 23:00:55 2024 by rpki-client on console-ams.rpki-client.org