$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer File: 2AA457BEF432F83463DE6AD111F6881D89605D25.cer (raw, json) Hash identifier: 55WOKd+7jjP/15B8FyPa+s8Wp0k0CM0W5UCk710P9gM= Subject key identifier: 2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2A3D944B1F87DF1EF76C3B522ACB43A17BD78899 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.mft caRepository: rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 19:01:31 +0000 Certificate not after: Wed 02 Apr 2025 19:06:31 +0000 Subordinate resources: AS: 264409 IP: 131.221.44.0/22 IP: 2804:1e20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 00:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3d:94:4b:1f:87:df:1e:f7:6c:3b:52:2a:cb:43:a1:7b:d7:88:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 19:01:31 2024 GMT Not After : Apr 2 19:06:31 2025 GMT Subject: CN=2AA457BEF432F83463DE6AD111F6881D89605D25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:f1:90:59:38:08:69:0a:e5:1b:d2:50:43: e1:d0:b9:4d:60:de:e1:b7:b6:5d:a8:5f:64:5a:28: 43:ec:6b:c4:ad:42:16:df:c4:c5:db:3e:b4:14:ee: a4:23:8b:66:89:63:3c:ed:ec:6b:76:3a:78:73:d6: f1:5c:f5:58:3e:e0:e8:77:88:63:ae:5d:8e:c7:e8: ec:17:40:98:55:46:40:f4:b7:d1:64:f4:b2:4a:1d: 70:84:f1:c5:83:5e:5e:a3:48:fc:1c:c4:db:a9:61: 46:b1:5e:6c:66:45:0c:d3:37:94:53:fa:c1:30:aa: f5:d4:b2:dd:d9:69:db:05:61:38:5e:aa:08:9a:71: 5d:38:fc:95:f6:d3:06:e4:8e:3f:89:a8:47:a1:07: 0e:4c:2b:73:38:a9:18:c6:ca:76:57:60:0b:ac:e3: e1:79:23:f0:5a:3e:4a:8d:63:01:49:84:9a:12:8d: d7:b1:30:9a:6c:61:ff:a2:d7:49:3c:f4:35:60:62: 03:59:34:62:cf:a4:ad:16:b1:cd:33:df:1f:94:58: a0:cd:00:1b:47:f7:fb:96:ea:f9:1c:91:3b:0d:7c: 46:58:2f:94:ce:4f:c0:ea:e7:b2:17:b8:63:50:eb: a8:2f:73:e8:ea:14:69:e1:a4:51:99:ce:4f:97:d6: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.44.0/22 IPv6: 2804:1e20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264409 Signature Algorithm: sha256WithRSAEncryption 6e:f0:fc:d5:d1:24:21:06:68:59:46:66:42:a9:b5:84:9a:54: b2:f1:cf:93:e7:b1:1f:55:e7:25:6f:a2:c1:e1:82:bf:79:ab: 69:e5:34:fc:93:88:a5:be:2c:9d:d1:14:48:4a:2d:2e:7a:3e: da:8a:8c:8c:51:1b:26:b5:b8:cd:11:f8:d5:a5:b8:bd:79:84: 16:0a:7a:0c:48:e3:b9:49:4d:95:59:1f:4b:6b:39:60:95:d6: b8:69:ec:92:d0:9c:42:1f:40:c8:f3:5a:9a:66:08:7d:2e:96: 82:5f:7f:e9:f0:ef:30:79:0b:2c:ae:82:86:4d:de:17:2a:cf: 5c:8f:e6:69:05:3e:b0:a3:65:7a:a3:ee:b9:8b:0f:01:4b:1b: a5:08:5e:0f:9e:54:ff:52:a3:d8:0d:5b:d3:c2:48:d0:72:8f: bc:67:d6:dc:65:64:f2:4f:5e:c8:38:ce:04:4b:7d:f0:f8:c3: c4:d2:c8:90:25:f7:03:58:cd:47:9e:4b:f3:56:9b:8c:40:e9: 8a:66:76:29:9e:44:2a:10:e4:2c:2d:ba:9f:e8:1d:28:cf:ec: 7d:be:de:23:15:b5:78:4e:bb:2c:ae:11:22:91:b5:94:28:88: 7b:37:31:1d:81:68:ed:c8:ad:1c:e2:67:ed:72:18:26:fa:c5: 56:5c:80:6f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKj2USx+H3x73bDtSKstDoXvXiJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxOTAxMzFaFw0yNTA0MDIxOTA2MzFaMDMxMTAvBgNV BAMTKDJBQTQ1N0JFRjQzMkY4MzQ2M0RFNkFEMTExRjY4ODFEODk2MDVEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRkfGQWTgIaQrlG9JQQ+HQuU1g 3uG3tl2oX2RaKEPsa8StQhbfxMXbPrQU7qQji2aJYzzt7Gt2Onhz1vFc9Vg+4Oh3 iGOuXY7H6OwXQJhVRkD0t9Fk9LJKHXCE8cWDXl6jSPwcxNupYUaxXmxmRQzTN5RT +sEwqvXUst3ZadsFYTheqgiacV04/JX20wbkjj+JqEehBw5MK3M4qRjGynZXYAus 4+F5I/BaPkqNYwFJhJoSjdexMJpsYf+i10k89DVgYgNZNGLPpK0Wsc0z3x+UWKDN ABtH9/uW6vkckTsNfEZYL5TOT8Dq57IXuGNQ66gvc+jqFGnhpFGZzk+X1ig3AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqpFe+9DL4NGPe atER9ogdiWBdJTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzdh aUFhcWh0V0ZxVTFzQWJKaGRBSDV3WjZHdUdieUpOSHk2QjZSdVZpSGgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzc3 YWlBYXFodFdGcVUxc0FiSmhkQUg1d1o2R3VHYnlKTkh5NkI2UnVWaUhoLzEvMkFB NDU3QkVGNDMyRjgzNDYzREU2QUQxMTFGNjg4MUQ4OTYwNUQyNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg90sMA0EAgACMAcDBQAoBB4gMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQI2TANBgkqhkiG9w0BAQsFAAOCAQEAbvD81dEkIQZoWUZm Qqm1hJpUsvHPk+exH1XnJW+iweGCv3mraeU0/JOIpb4sndEUSEotLno+2oqMjFEb JrW4zRH41aW4vXmEFgp6DEjjuUlNlVkfS2s5YJXWuGnsktCcQh9AyPNammYIfS6W gl9/6fDvMHkLLK6Chk3eFyrPXI/maQU+sKNleqPuuYsPAUsbpQheD55U/1Kj2A1b 08JI0HKPvGfW3GVk8k9eyDjOBEt98PjDxNLIkCX3A1jNR55L81abjEDpimZ2KZ5E KhDkLC26n+gdKM/sfb7eIxW1eE67LK4RIpG1lCiIezcxHYFo7citHOJn7XIYJvrF VlyAbw== -----END CERTIFICATE-----Generated at Tue Jun 25 23:04:47 2024 by rpki-client on console-fra.rpki-client.org