$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer File: 1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer (raw, json) Hash identifier: bipRYlX0pN5LDj9h5uOWHdhIDoZFtyTQYLDMt941ucc= Subject key identifier: 1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4D466F837FE15E11FAE2CD701581E63F48F76F73 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.mft caRepository: rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:56:19 +0000 Certificate not after: Thu 03 Apr 2025 03:01:19 +0000 Subordinate resources: AS: 268109 IP: 45.168.128.0/22 IP: 2804:5824::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 23:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:46:6f:83:7f:e1:5e:11:fa:e2:cd:70:15:81:e6:3f:48:f7:6f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:56:19 2024 GMT Not After : Apr 3 03:01:19 2025 GMT Subject: CN=1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:5b:23:96:97:0e:5a:ba:26:7d:1b:29:82: 25:6f:67:e4:df:40:a9:ad:e9:ad:a4:16:3e:d0:85: c7:e6:c0:f1:f7:74:92:e1:ae:20:19:ea:16:0e:d0: 19:89:a6:75:08:41:03:40:dc:8c:db:1a:65:ff:fe: f3:f4:ca:60:c4:35:d4:ff:94:86:28:c7:4b:e2:8b: 46:f7:93:4e:46:b1:70:c0:2b:02:bf:f4:bf:79:79: fb:4c:0c:57:11:d4:61:3d:a0:b6:b7:ee:c1:d8:e8: 49:e9:fd:0f:bc:47:53:70:d4:46:c7:e6:a2:a7:e6: 1c:f8:1b:cf:14:0b:a7:83:7c:6c:23:a1:5c:c2:96: 78:54:8f:ec:c4:9f:ce:96:a4:6d:44:5b:bf:19:c9: 2d:74:fe:3a:5e:ff:e2:49:de:83:5e:b8:14:4d:20: b4:c7:7a:d4:e2:e7:4d:68:ec:5c:d0:0f:44:5a:24: 6e:4b:dc:f3:47:14:1b:64:de:a5:f8:6c:35:be:ec: 68:7b:29:c7:75:f0:6a:f8:80:07:55:01:3a:23:e7: 5d:01:36:a1:4b:3d:6e:cf:f2:39:1e:0b:15:c6:29: 6a:9a:d5:cf:71:7f:3a:96:63:30:61:99:3d:71:e7: 13:d3:9a:68:31:49:54:18:f9:12:42:76:a7:f4:87: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.128.0/22 IPv6: 2804:5824::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268109 Signature Algorithm: sha256WithRSAEncryption 05:46:e5:d7:c4:07:e6:68:6f:04:eb:3f:00:18:64:39:0b:fa: 50:f8:0a:20:c5:59:03:e2:84:59:c7:5d:f5:3d:a7:95:94:aa: d2:0e:02:72:19:2d:b0:69:9e:43:54:40:3c:66:a7:ef:37:78: 8b:fb:b6:66:78:f9:8d:f7:bf:32:aa:b9:17:28:50:63:49:8b: 55:07:8c:3f:6a:58:40:e8:93:b4:3b:89:f5:f4:33:44:f2:4e: de:a6:3c:da:e1:4c:5d:17:11:29:33:e8:e5:f0:ab:31:3b:6a: be:ce:a9:68:b6:d3:55:b5:7a:ca:24:3a:25:3f:62:c7:99:d0: a7:27:04:48:6b:9e:54:d4:1c:02:75:a0:bd:80:06:04:51:f7: f3:17:94:32:ce:08:a7:0e:21:ca:8e:73:fd:b3:e8:d5:a6:7d: e2:59:e9:43:12:9c:12:8b:a9:67:2c:04:0f:57:00:70:16:a1: 17:0c:21:c9:51:0b:08:36:e4:e2:bc:11:66:9f:63:56:de:7e: c8:b9:91:99:01:a3:34:8e:18:56:cf:39:cf:bd:d0:98:8b:be: 45:53:0b:ca:80:52:63:ed:cf:33:21:b9:16:9b:cd:9f:70:cb: 80:6d:30:05:8d:85:6b:b2:4d:49:86:2f:4e:c8:63:e8:42:7e: cf:08:8e:a4 -----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgIUTUZvg3/hXhH64s1wFYHmP0j3b3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjU2MTlaFw0yNTA0MDMwMzAxMTlaMDMxMTAvBgNV BAMTKDFCMjg0OTUwOTU0OTg5OEQyRkM4NUY0MUEyRDFGRTdCM0M1RjhEOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3FsjlpcOWromfRspgiVvZ+Tf QKmt6a2kFj7QhcfmwPH3dJLhriAZ6hYO0BmJpnUIQQNA3IzbGmX//vP0ymDENdT/ lIYox0vii0b3k05GsXDAKwK/9L95eftMDFcR1GE9oLa37sHY6Enp/Q+8R1Nw1EbH 5qKn5hz4G88UC6eDfGwjoVzClnhUj+zEn86WpG1EW78ZyS10/jpe/+JJ3oNeuBRN ILTHetTi501o7FzQD0RaJG5L3PNHFBtk3qX4bDW+7Gh7Kcd18Gr4gAdVAToj510B NqFLPW7P8jkeCxXGKWqa1c9xfzqWYzBhmT1x5xPTmmgxSVQY+RJCdqf0h+LpAgMB AAGjggM3MIIDMzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbKElQlUmJjS/I X0Gi0f57PF+NjzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUE1B U1ZyYzhBeW15czQ3M3dxRUF4dWdTUEVaSGtSQXY1cm1MTkM2Wm9BUy8yMIGJBggr BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9QTUFT VnJjOEF5bXlzNDczd3FFQXh1Z1NQRVpIa1JBdjVybUxOQzZab0FTLzIvMUIyODQ5 NTA5NTQ5ODk4RDJGQzg1RjQxQTJEMUZFN0IzQzVGOEQ4Ri5tZnQwPwYIKwYBBQUH MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCLaiAMA0EAgACMAcDBQAoBFgkMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwQXTTANBgkqhkiG9w0BAQsFAAOCAQEABUbl18QH5mhvBOs/ABhk OQv6UPgKIMVZA+KEWcdd9T2nlZSq0g4CchktsGmeQ1RAPGan7zd4i/u2Znj5jfe/ Mqq5FyhQY0mLVQeMP2pYQOiTtDuJ9fQzRPJO3qY82uFMXRcRKTPo5fCrMTtqvs6p aLbTVbV6yiQ6JT9ix5nQpycESGueVNQcAnWgvYAGBFH38xeUMs4Ipw4hyo5z/bPo 1aZ94lnpQxKcEoupZywED1cAcBahFwwhyVELCDbk4rwRZp9jVt5+yLmRmQGjNI4Y Vs85z73QmIu+RVMLyoBSY+3PMyG5FpvNn3DLgG0wBY2Fa7JNSYYvTshj6EJ+zwiO pA== -----END CERTIFICATE-----Generated at Sat Sep 28 23:02:21 2024 by rpki-client on console-fra.rpki-client.org