$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer File: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer (raw, json) Hash identifier: m6O+5q0zsq3/LGgz6ha/D0xFgvuI71gi3W/gsyIrxy0= Subject key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5E7C99D327B63627EBE77871C4E473CF47D1AB4A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft caRepository: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:34:03 +0000 Certificate not after: Thu 03 Apr 2025 02:39:03 +0000 Subordinate resources: AS: 268470 IP: 45.161.176.0/22 IP: 2804:51b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 21:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7c:99:d3:27:b6:36:27:eb:e7:78:71:c4:e4:73:cf:47:d1:ab:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:34:03 2024 GMT Not After : Apr 3 02:39:03 2025 GMT Subject: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:0a:00:e7:0b:00:72:a4:94:21:27:84:62: 95:0c:20:88:75:4b:27:b0:7b:6b:6d:3d:04:2b:3c: 9b:93:51:83:4c:91:60:41:40:30:a6:b8:3b:d3:b4: 10:31:65:42:e9:23:f4:d9:02:a8:28:49:cd:35:3b: b3:aa:93:ca:34:11:33:fe:82:2e:1a:88:ad:67:14: 57:21:f6:1a:24:75:90:b2:fc:3f:fa:30:ed:62:e5: 20:96:32:41:8c:fe:71:51:32:d0:48:ac:6c:a7:bf: 5e:d2:e9:fc:68:af:2e:e7:53:89:a5:aa:d2:0a:fc: f1:dd:4a:38:36:3c:a7:80:66:d2:a5:82:fd:54:1f: c9:ef:b4:f8:d7:a7:1c:67:ef:d3:fd:d3:66:b5:81: 5b:1b:3f:c0:3b:da:d1:b2:79:be:ef:4d:6a:a1:a0: b6:62:fd:95:53:5b:da:99:cd:30:3a:c7:53:64:e2: 64:af:c3:e1:41:74:34:e4:56:23:17:fb:37:99:86: 55:4f:df:16:60:f4:d6:b7:25:71:90:09:f0:29:7c: f6:8c:d8:e8:db:2e:c2:42:04:26:83:b1:bd:b6:73: 52:6e:b6:89:f8:39:71:42:5a:b3:2e:70:51:2d:43: 1c:5e:a1:96:dd:15:ab:8c:a2:bb:e9:f6:e6:57:23: c3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.176.0/22 IPv6: 2804:51b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268470 Signature Algorithm: sha256WithRSAEncryption 7b:91:7a:18:24:39:71:fd:f0:82:16:d2:ff:27:44:34:b1:8f: d2:e6:cd:90:21:36:68:ed:35:42:0b:c2:0f:9c:69:07:00:b4: 88:64:50:6a:71:78:de:05:d3:d1:dc:af:f1:02:81:a9:04:b4: c2:2f:e4:dd:71:13:4d:32:a2:40:87:2c:e8:47:c0:78:be:5a: ad:60:cd:48:8d:d5:8d:c7:d9:8f:22:22:c9:df:c1:9a:fb:32: dd:dd:5b:cd:d0:85:bf:b2:15:48:4d:4d:52:33:7e:0b:a7:6b: 5f:b0:b2:00:ad:f6:26:24:c6:05:60:9c:e6:a2:04:ba:99:72: 4a:27:55:d3:3d:9d:f0:05:d8:5b:c2:dc:9d:5c:9a:2b:1d:7f: d7:15:c3:ab:34:51:ef:64:e4:42:45:bb:b7:47:3e:3f:f3:6b: 07:1a:5c:c3:dd:6b:f9:1f:bd:f1:8e:70:79:34:c2:35:bf:3b: 2b:9b:9d:5b:41:3e:7c:f7:36:ba:64:49:e5:7a:ff:6d:ad:5e: f7:94:f6:9a:f5:71:00:7f:2f:05:67:b7:1b:62:d7:b8:09:65: c6:37:78:65:10:04:24:65:f2:9c:bf:f0:e7:0d:33:2f:8c:40: 55:a1:ac:e0:bb:c8:14:4f:c5:a0:c7:d3:b4:c6:ad:ab:fe:ae: 9e:04:af:4f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUXnyZ0ye2Nifr53hxxORzz0fRq0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjM0MDNaFw0yNTA0MDMwMjM5MDNaMDMxMTAvBgNV BAMTKDIzM0MwRjBCNTcxRkRBMUMzMzEzQkY4QUY3RDY4NkM3NEJBRkNCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRAoA5wsAcqSUISeEYpUMIIh1 Syewe2ttPQQrPJuTUYNMkWBBQDCmuDvTtBAxZULpI/TZAqgoSc01O7Oqk8o0ETP+ gi4aiK1nFFch9hokdZCy/D/6MO1i5SCWMkGM/nFRMtBIrGynv17S6fxory7nU4ml qtIK/PHdSjg2PKeAZtKlgv1UH8nvtPjXpxxn79P902a1gVsbP8A72tGyeb7vTWqh oLZi/ZVTW9qZzTA6x1Nk4mSvw+FBdDTkViMX+zeZhlVP3xZg9Na3JXGQCfApfPaM 2OjbLsJCBCaDsb22c1Juton4OXFCWrMucFEtQxxeoZbdFauMorvp9uZXI8PDAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjPA8LVx/aHDMT v4r31obHS6/LQTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXho UTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFBZjMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl4 aFExS3dTcE1UalE4SFRoUm5DODk3bjY0SllCV3BMOFVZaW5hc05hQWYzLzEvMjMz QzBGMEI1NzFGREExQzMzMTNCRjhBRjdENjg2Qzc0QkFGQ0I0MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaGwMA0EAgACMAcDBQAoBFGwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYtjANBgkqhkiG9w0BAQsFAAOCAQEAe5F6GCQ5cf3wghbS /ydENLGP0ubNkCE2aO01QgvCD5xpBwC0iGRQanF43gXT0dyv8QKBqQS0wi/k3XET TTKiQIcs6EfAeL5arWDNSI3VjcfZjyIiyd/Bmvsy3d1bzdCFv7IVSE1NUjN+C6dr X7CyAK32JiTGBWCc5qIEuplySidV0z2d8AXYW8LcnVyaKx1/1xXDqzRR72TkQkW7 t0c+P/NrBxpcw91r+R+98Y5weTTCNb87K5udW0E+fPc2umRJ5Xr/ba1e95T2mvVx AH8vBWe3G2LXuAllxjd4ZRAEJGXynL/w5w0zL4xAVaGs4LvIFE/FoMfTtMatq/6u ngSvTw== -----END CERTIFICATE-----Generated at Sat Sep 28 20:53:21 2024 by rpki-client on console-ams.rpki-client.org