$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer File: 23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer (raw, json) Hash identifier: AquOlugA49wZfck5U58Vx7GCFBRnHmvxCjK+xNMDzMg= Subject key identifier: 23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4B0DC5B59EDB97729E1764A04BD99EA6CEACFC69 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.mft caRepository: rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 19:07:00 +0000 Certificate not after: Wed 02 Apr 2025 19:12:00 +0000 Subordinate resources: AS: 265055 IP: 170.231.120.0/22 IP: 2804:3218::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 12:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0d:c5:b5:9e:db:97:72:9e:17:64:a0:4b:d9:9e:a6:ce:ac:fc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 19:07:00 2024 GMT Not After : Apr 2 19:12:00 2025 GMT Subject: CN=23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:27:f3:1b:9c:6f:fc:86:65:05:1b:50:29: e0:73:bd:7e:82:06:f4:eb:81:15:b5:ac:5f:c1:4b: 4f:54:d2:ba:cd:1c:5b:7d:36:4a:bf:73:dd:cc:bd: 59:2f:a7:33:2e:48:89:99:80:a1:72:ac:89:90:7e: 45:6d:73:07:e1:44:cd:6a:36:07:d1:ec:63:1f:54: fd:fb:57:b7:70:8e:7e:81:8b:67:01:0b:75:95:ed: 89:89:b8:9b:2e:06:4f:ce:2e:c4:26:6b:d2:be:6b: 5d:b4:b2:40:b9:ef:2a:11:c8:e0:b7:89:35:ec:b6: f9:57:30:72:ac:2d:a0:37:9f:2d:5b:4e:f9:38:6e: c8:df:82:d3:d7:b5:7a:24:fe:fd:8a:f1:68:70:28: b8:60:88:fe:0c:3d:3f:2a:c5:28:73:fa:52:9d:7a: e6:ca:08:28:47:28:5f:cc:4e:ec:b7:57:7b:2b:2a: 7f:cb:2e:f1:68:82:0c:5e:49:76:61:db:ae:93:5f: d9:db:c4:36:72:9c:80:b1:7d:80:d9:f8:70:57:20: 27:36:20:81:5e:9d:7e:b4:9c:55:08:18:89:ed:61: 82:8b:8e:1f:68:29:08:69:da:0f:28:39:15:f4:3f: 03:6f:97:42:62:45:16:c8:ba:03:4c:53:bd:4b:b3: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.120.0/22 IPv6: 2804:3218::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265055 Signature Algorithm: sha256WithRSAEncryption 9f:ac:a2:8e:60:ed:ee:89:a9:2f:2a:9f:b2:d1:93:0f:0f:82: c7:c9:0f:09:82:d1:11:0e:75:c5:aa:59:0d:2b:0a:a3:c2:8c: 3a:55:df:a1:74:b8:2d:14:96:7b:97:46:78:6f:98:42:3f:8e: 09:f7:9a:10:1b:03:f8:d5:5c:9d:91:df:d2:ef:f6:2b:d5:3d: cc:3c:e8:5d:be:c7:07:ad:ff:13:dc:ee:33:24:4a:51:77:a2: 38:e7:8b:26:14:89:84:51:38:e7:0e:7f:c7:cc:1c:a3:ba:96: 56:65:c0:aa:66:27:1d:07:7c:32:c4:55:d9:d1:c2:64:dd:fb: 4d:89:74:c9:0a:53:80:a5:e0:a5:9c:33:15:aa:1c:e8:92:b5: be:7a:3e:3c:e9:55:8c:fb:79:bb:a4:3e:80:e2:0b:48:89:58: 00:fa:60:0c:12:5d:12:86:71:b4:d3:f4:2a:ce:91:d6:74:ea: 29:f2:ad:64:c2:1f:27:c3:22:61:14:7c:96:0f:56:c8:a3:cb: 4f:40:66:0c:50:bf:68:26:dd:23:e0:f3:16:f8:fc:db:d6:51: f4:7e:bb:8d:43:01:81:1c:e0:89:6f:a0:2f:53:24:5b:ce:f1: 3f:ea:6f:86:ee:c1:68:e8:a0:49:6a:01:4d:81:d2:fd:8a:a2: b4:20:ab:d9 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUSw3FtZ7bl3KeF2SgS9meps6s/GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxOTA3MDBaFw0yNTA0MDIxOTEyMDBaMDMxMTAvBgNV BAMTKDIzQTc0OTVDQ0YyMDBCMUZDRThCRkZEOUEzNTg4REM3Mzg2RkREMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdCfzG5xv/IZlBRtQKeBzvX6C BvTrgRW1rF/BS09U0rrNHFt9Nkq/c93MvVkvpzMuSImZgKFyrImQfkVtcwfhRM1q NgfR7GMfVP37V7dwjn6Bi2cBC3WV7YmJuJsuBk/OLsQma9K+a120skC57yoRyOC3 iTXstvlXMHKsLaA3ny1bTvk4bsjfgtPXtXok/v2K8WhwKLhgiP4MPT8qxShz+lKd eubKCChHKF/MTuy3V3srKn/LLvFoggxeSXZh266TX9nbxDZynICxfYDZ+HBXICc2 IIFenX60nFUIGIntYYKLjh9oKQhp2g8oORX0PwNvl0JiRRbIugNMU71LsxvFAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjp0lczyALH86L /9mjWI3HOG/dFTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkpM aEpmZTZoa05FSkF4YTZ6OXRNa3ROUHNCdWlZbkVyTHhmaGFjNWZzaFUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkpM aEpmZTZoa05FSkF4YTZ6OXRNa3ROUHNCdWlZbkVyTHhmaGFjNWZzaFUvMS8yM0E3 NDk1Q0NGMjAwQjFGQ0U4QkZGRDlBMzU4OERDNzM4NkZERDE1Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKq53gwDQQCAAIwBwMFACgEMhgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAtfMA0GCSqGSIb3DQEBCwUAA4IBAQCfrKKOYO3uiakvKp+y 0ZMPD4LHyQ8JgtERDnXFqlkNKwqjwow6Vd+hdLgtFJZ7l0Z4b5hCP44J95oQGwP4 1Vydkd/S7/Yr1T3MPOhdvscHrf8T3O4zJEpRd6I454smFImEUTjnDn/HzByjupZW ZcCqZicdB3wyxFXZ0cJk3ftNiXTJClOApeClnDMVqhzokrW+ej486VWM+3m7pD6A 4gtIiVgA+mAMEl0ShnG00/QqzpHWdOop8q1kwh8nwyJhFHyWD1bIo8tPQGYMUL9o Jt0j4PMW+Pzb1lH0fruNQwGBHOCJb6AvUyRbzvE/6m+G7sFo6KBJagFNgdL9iqK0 IKvZ -----END CERTIFICATE-----Generated at Tue Jun 18 14:02:00 2024 by rpki-client on console-ams.rpki-client.org