$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer File: 233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer (raw, json) Hash identifier: PLX2gvzHraqpBKtLnFVZk6TAWwLgC0+EoZCxVr+Dlts= Subject key identifier: 23:32:01:DB:ED:32:F6:A6:87:42:6F:3C:6D:E6:6D:36:90:C5:A5:CA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2E97328E14EC4C5E121E8C90E24A8C6770B585B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.mft caRepository: rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 13:53:46 +0000 Certificate not after: Thu 03 Apr 2025 13:58:46 +0000 Subordinate resources: AS: 267580 IP: 45.70.68.0/22 IP: 2804:43a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 18 Jun 2024 18:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:97:32:8e:14:ec:4c:5e:12:1e:8c:90:e2:4a:8c:67:70:b5:85:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 13:53:46 2024 GMT Not After : Apr 3 13:58:46 2025 GMT Subject: CN=233201DBED32F6A687426F3C6DE66D3690C5A5CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d0:dd:8f:4c:f3:3d:5f:cc:70:57:f8:f2:41: e4:61:16:61:a9:13:ab:e8:d0:01:82:1a:75:ca:e5: 8a:5f:ef:d4:a6:02:fe:c1:bd:88:94:8b:11:8e:44: 5a:c3:37:85:32:33:1a:fa:b6:3b:87:e8:51:6b:1b: e9:a1:7e:be:32:8a:b8:ef:1b:43:3a:02:37:80:97: 1b:ef:42:53:bc:ca:85:4a:23:8b:8b:90:f7:ff:e5: 26:bb:a3:37:56:c3:d1:92:7c:0d:47:fd:f9:86:99: 9f:d3:d2:42:1d:9a:88:67:37:3d:7d:98:d1:c7:52: 62:65:87:9f:34:74:96:23:90:27:d6:88:4c:07:64: 50:f1:57:f3:ce:83:9b:72:a7:a7:63:72:59:f0:f3: a3:76:33:4c:f4:b3:cc:d4:0a:fa:a7:a9:f0:d9:41: d2:03:cc:1c:23:19:17:8a:e3:64:de:99:cc:dd:e6: 0f:0d:18:47:71:9c:2a:3d:4f:69:f0:82:8b:00:3f: cd:54:ac:73:bc:0e:ac:be:ef:3c:a4:fc:91:b8:c0: a3:56:cf:54:16:75:e8:a9:e7:ff:af:10:e7:ec:35: a5:e7:9e:6c:52:cc:9e:f8:a6:6f:1b:6a:af:6d:2c: b1:6d:98:a4:dc:a7:88:1f:46:d5:7e:9f:83:9f:af: 4e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:32:01:DB:ED:32:F6:A6:87:42:6F:3C:6D:E6:6D:36:90:C5:A5:CA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.68.0/22 IPv6: 2804:43a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267580 Signature Algorithm: sha256WithRSAEncryption 1d:7d:5f:ff:06:6d:46:b0:3e:f2:43:90:e6:09:74:87:12:1e: 4a:0f:ef:a7:5e:b5:88:55:22:4e:01:ce:64:75:57:96:c1:d7: 01:88:a3:28:22:d5:76:8d:c3:ea:7b:56:e4:6b:5c:0a:90:75: 45:37:a9:d1:15:50:2e:66:8b:db:f3:45:d8:44:22:fe:6e:94: 27:55:d6:b2:59:3e:c7:1a:6f:25:d6:85:71:07:e4:b8:ae:58: 36:e5:b3:e3:a0:de:57:6a:31:c7:24:e0:00:6b:e7:0d:9a:f9: e8:9f:c8:89:42:1c:9c:b8:42:bf:f9:ac:1b:8d:42:2d:22:7b: a0:9e:87:bc:ec:2f:be:96:67:41:f2:8a:5c:9e:c3:b0:dd:da: 5e:5a:90:bd:08:8f:0a:86:5b:a0:e6:f3:54:97:f6:12:4d:85: 39:1f:bb:28:73:75:24:c4:94:f6:1b:38:71:51:41:ab:60:77: bc:11:a4:17:3d:eb:5f:8a:a3:53:52:77:1a:e5:84:89:39:da: f5:a9:f1:ad:2b:41:c3:ec:18:aa:95:86:2b:df:57:5d:f2:1f: 47:39:ea:fe:49:d7:6b:5a:82:01:c9:77:c7:f1:09:21:f4:fa: b4:7d:b0:70:2c:c7:e5:37:1d:8a:df:77:04:29:7d:43:3b:b2: ec:03:b3:d3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULpcyjhTsTF4SHoyQ4kqMZ3C1hbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMzUzNDZaFw0yNTA0MDMxMzU4NDZaMDMxMTAvBgNV BAMTKDIzMzIwMURCRUQzMkY2QTY4NzQyNkYzQzZERTY2RDM2OTBDNUE1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo0N2PTPM9X8xwV/jyQeRhFmGp E6vo0AGCGnXK5Ypf79SmAv7BvYiUixGORFrDN4UyMxr6tjuH6FFrG+mhfr4yirjv G0M6AjeAlxvvQlO8yoVKI4uLkPf/5Sa7ozdWw9GSfA1H/fmGmZ/T0kIdmohnNz19 mNHHUmJlh580dJYjkCfWiEwHZFDxV/POg5typ6djclnw86N2M0z0s8zUCvqnqfDZ QdIDzBwjGReK42Temczd5g8NGEdxnCo9T2nwgosAP81UrHO8Dqy+7zyk/JG4wKNW z1QWdeip5/+vEOfsNaXnnmxSzJ74pm8baq9tLLFtmKTcp4gfRtV+n4Ofr045AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjMgHb7TL2podC bzxt5m02kMWlyjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTVW c29jQ2hkYUV0NDFma01aS3N2djVqMVZEeWhyWldtejVGV0c3aEdYeXkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U1 VnNvY0NoZGFFdDQxZmtNWktzdnY1ajFWRHloclpXbXo1RldHN2hHWHl5LzEvMjMz MjAxREJFRDMyRjZBNjg3NDI2RjNDNkRFNjZEMzY5MEM1QTVDQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUZEMA0EAgACMAcDBQAoBEOgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVPDANBgkqhkiG9w0BAQsFAAOCAQEAHX1f/wZtRrA+8kOQ 5gl0hxIeSg/vp161iFUiTgHOZHVXlsHXAYijKCLVdo3D6ntW5GtcCpB1RTep0RVQ LmaL2/NF2EQi/m6UJ1XWslk+xxpvJdaFcQfkuK5YNuWz46DeV2oxxyTgAGvnDZr5 6J/IiUIcnLhCv/msG41CLSJ7oJ6HvOwvvpZnQfKKXJ7DsN3aXlqQvQiPCoZboObz VJf2Ek2FOR+7KHN1JMSU9hs4cVFBq2B3vBGkFz3rX4qjU1J3GuWEiTna9anxrStB w+wYqpWGK99XXfIfRznq/knXa1qCAcl3x/EJIfT6tH2wcCzH5Tcdit93BCl9Qzuy 7AOz0w== -----END CERTIFICATE-----Generated at Mon Jun 17 18:19:07 2024 by rpki-client on console-ams.rpki-client.org