$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer File: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer (raw, json) Hash identifier: Frkm1orVHnEips9yIInlEAsPdKP+wXf/pEBky1qoASg= Subject key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0FCC67A6211ECBCCA51F7B27643874298AE75BAB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft caRepository: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 21:44:39 +0000 Certificate not after: Thu 03 Apr 2025 21:49:39 +0000 Subordinate resources: AS: 268295 IP: 45.237.236.0/22 IP: 2804:4ef8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:cc:67:a6:21:1e:cb:cc:a5:1f:7b:27:64:38:74:29:8a:e7:5b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 21:44:39 2024 GMT Not After : Apr 3 21:49:39 2025 GMT Subject: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:86:e9:5e:63:74:81:d4:24:9e:09:8a:fb:1c: 39:a2:d7:b8:72:83:89:3d:2d:b5:69:43:15:24:72: 61:65:1a:d1:16:09:0c:b0:6d:c8:9d:6c:57:76:ab: 06:73:c5:66:f1:7c:91:70:67:4e:c1:c0:f2:22:32: 9f:99:92:fa:e1:86:b4:3e:fd:eb:35:08:3f:6b:99: 88:84:b1:90:52:98:e0:28:ee:16:88:3c:32:1e:bb: ca:73:ac:21:11:83:54:f2:96:0c:3f:ab:7e:35:22: d2:04:a8:59:e1:81:72:87:f6:2f:4c:c9:d1:f4:78: 58:38:3a:0a:ae:2b:49:67:d8:96:bd:55:0f:b9:65: 8e:e7:40:fa:d5:65:81:ef:73:b1:31:16:b6:d9:8b: 1e:e0:aa:3b:f4:47:f1:d3:3c:55:01:b0:c5:86:2b: 75:b4:73:48:a1:ab:d4:4b:6b:d7:3f:cb:49:20:c5: 14:e9:b0:02:77:f6:e0:d4:4a:1a:b1:8a:b2:b8:cb: 0d:8b:93:3c:08:89:dd:02:c1:3a:ee:9c:d1:1e:7c: 67:6d:bb:b5:1b:99:a8:7f:de:0a:52:ea:5d:fc:d1: 34:4b:e3:a3:05:fd:06:f9:9e:14:4b:3e:bb:9a:37: e3:52:03:aa:c1:03:05:a5:57:12:bb:8f:f1:4f:d9: b5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.236.0/22 IPv6: 2804:4ef8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268295 Signature Algorithm: sha256WithRSAEncryption 76:7a:55:fd:10:d7:4e:a1:ec:36:3e:dd:cb:9d:86:f5:4c:af: b9:f0:f2:2a:a7:2e:98:9f:b4:23:34:3e:bb:d6:e8:50:3f:2f: 2e:65:d4:4f:4e:28:ff:5d:07:5d:b5:80:3e:cf:ff:3e:7f:92: 52:bf:e1:42:9a:45:b2:00:1b:c8:b5:e0:3d:65:a0:31:95:54: 01:28:a0:43:e4:61:0d:e3:73:ac:1b:0e:86:e7:52:8f:55:e6: fa:c7:c8:bd:36:c3:5a:ed:ba:98:21:61:3d:3d:58:2a:78:27: d1:1b:30:8d:82:e9:57:af:7e:fa:1f:5c:e2:59:f4:c9:92:8c: 20:a4:3b:b9:83:af:9e:c7:5a:12:22:9d:39:6b:7e:50:a2:d4: c7:51:87:3f:7a:ed:d0:47:fe:2f:73:a2:20:1e:30:b6:d5:de: 69:71:5f:f5:3c:2b:23:42:54:26:54:6f:fe:2c:dc:d4:3d:ee: 8d:1b:9f:a4:78:fc:bb:f1:6e:cf:68:ea:65:b6:65:55:15:a6: ab:11:8d:2a:0b:37:4b:e2:87:6d:f4:b7:dc:0a:fd:f3:bb:17: 34:a2:79:55:d4:fb:5a:42:45:30:75:8b:ad:ba:1b:0a:74:7f: 24:61:c3:69:d6:55:ff:a5:ca:ca:ae:4f:b9:99:37:4e:a6:79: b4:ae:b5:50 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUD8xnpiEey8ylH3snZDh0KYrnW6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQyMTQ0MzlaFw0yNTA0MDMyMTQ5MzlaMDMxMTAvBgNV BAMTKDFCQTM2MDlEOTY2REQ4QjIyRTVGRDU2NjdFNEJBQ0FDRUZGOEQxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRhuleY3SB1CSeCYr7HDmi17hy g4k9LbVpQxUkcmFlGtEWCQywbcidbFd2qwZzxWbxfJFwZ07BwPIiMp+ZkvrhhrQ+ /es1CD9rmYiEsZBSmOAo7haIPDIeu8pzrCERg1Tylgw/q341ItIEqFnhgXKH9i9M ydH0eFg4OgquK0ln2Ja9VQ+5ZY7nQPrVZYHvc7ExFrbZix7gqjv0R/HTPFUBsMWG K3W0c0ihq9RLa9c/y0kgxRTpsAJ39uDUShqxirK4yw2LkzwIid0CwTrunNEefGdt u7Ubmah/3gpS6l380TRL46MF/Qb5nhRLPruaN+NSA6rBAwWlVxK7j/FP2bUXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbo2Cdlm3Ysi5f 1WZ+S6ys7/jR8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkRH ejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJE R3oxYzVBVjNZU3dHTnB1UkVGZHAxNkQ2NFhuZjR4cjRNcUVOTEdxSHJvLzEvMUJB MzYwOUQ5NjZERDhCMjJFNUZENTY2N0U0QkFDQUNFRkY4RDFGMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe3sMA0EAgACMAcDBQAoBE74MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYBzANBgkqhkiG9w0BAQsFAAOCAQEAdnpV/RDXTqHsNj7d y52G9UyvufDyKqcumJ+0IzQ+u9boUD8vLmXUT04o/10HXbWAPs//Pn+SUr/hQppF sgAbyLXgPWWgMZVUASigQ+RhDeNzrBsOhudSj1Xm+sfIvTbDWu26mCFhPT1YKngn 0RswjYLpV69++h9c4ln0yZKMIKQ7uYOvnsdaEiKdOWt+UKLUx1GHP3rt0Ef+L3Oi IB4wttXeaXFf9TwrI0JUJlRv/izc1D3ujRufpHj8u/Fuz2jqZbZlVRWmqxGNKgs3 S+KHbfS33Ar987sXNKJ5VdT7WkJFMHWLrbobCnR/JGHDadZV/6XKyq5PuZk3TqZ5 tK61UA== -----END CERTIFICATE-----Generated at Sun Jun 2 00:29:07 2024 by rpki-client on console-ams.rpki-client.org