$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer File: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer (raw, json) Hash identifier: F84uFT65ipT0wcuYakjiIF3K3n0jkkA3pdXKqvjyKw4= Subject key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 750E8A58B7A64731E9E96D369FBF15E0377CE60C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft caRepository: rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 12:05:55 +0000 Certificate not after: Thu 03 Apr 2025 12:10:55 +0000 Subordinate resources: AS: 52589 IP: 177.87.44.0/22 IP: 2804:1ad8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0e:8a:58:b7:a6:47:31:e9:e9:6d:36:9f:bf:15:e0:37:7c:e6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 12:05:55 2024 GMT Not After : Apr 3 12:10:55 2025 GMT Subject: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:37:e6:4e:ab:0b:05:8e:3e:31:1f:9c:61: 82:9c:ec:ec:51:3b:cd:ba:32:90:d1:8a:91:6b:5b: b7:0c:ce:54:3e:30:4b:73:0c:40:dd:05:3a:0f:19: e6:fa:63:f3:df:43:95:3a:53:8c:78:49:23:64:30: 82:72:ee:c5:33:04:4a:d5:4c:c4:02:63:86:e4:6d: cd:d5:4f:b9:05:45:3a:b0:d5:65:76:6f:84:6e:ee: e5:47:03:f8:76:7b:1e:d9:31:06:fd:95:ad:eb:53: 9c:7c:38:10:33:7a:5c:13:e9:9e:4e:b4:57:7d:87: fe:29:3c:d1:12:55:7f:09:69:fa:f6:bc:b3:60:7c: 00:a9:64:a4:28:1c:78:33:95:76:30:ca:0d:8a:1f: e6:09:0e:f2:cb:db:e2:df:56:57:9d:4b:3f:12:8d: b3:b4:16:d9:a2:d3:85:9f:b9:eb:76:83:91:ab:b8: bc:f9:50:00:a5:c9:07:db:44:c0:50:a2:48:6e:bd: 90:ba:49:d7:01:1e:f4:c8:34:b0:ed:e0:44:fd:7c: b0:64:8e:c4:c4:4a:2d:fd:ce:e1:12:c8:0b:4d:c8: 1d:08:73:f0:2f:b0:a7:71:f8:20:c7:d4:08:ee:03: 3b:20:f0:a4:f2:bb:b0:1f:ad:7b:4f:d6:5c:29:3e: bd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.87.44.0/22 IPv6: 2804:1ad8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52589 Signature Algorithm: sha256WithRSAEncryption 55:ed:f3:ef:e5:ea:4a:72:86:63:a9:f8:aa:e3:f4:7b:39:e8: 3d:15:5d:ec:c5:16:f8:a2:e6:a6:91:25:f4:2a:1a:04:1c:c9: ca:f9:3b:c5:d3:f8:10:0a:7f:6e:36:f1:dd:9e:44:38:cf:20: 8b:4e:45:fc:1c:3d:27:ad:21:00:d9:f9:3d:21:a6:7c:88:27: b7:56:77:63:c9:8a:a5:05:8f:68:5f:3e:08:1c:cf:f4:ca:12: fc:79:46:4c:ee:a1:f2:5b:40:1f:4f:51:99:44:22:3c:ad:ca: 93:f7:57:b1:63:04:73:38:ac:1f:c3:4b:7d:d9:80:c5:37:2b: 15:5e:5f:63:0f:28:4e:35:66:f2:3b:cc:24:e4:cd:29:0e:61: 17:f4:eb:6d:ce:59:c2:fe:5d:1f:44:47:09:09:90:b2:23:75: 43:d9:16:f0:ac:10:36:11:0b:1c:a9:fc:19:11:07:36:56:22: 85:ea:15:fe:73:b6:4d:76:ae:c0:93:83:21:9f:5b:39:7e:67: e0:e7:76:a0:0b:1f:79:f8:8f:3b:11:ff:09:db:47:52:76:03: 85:52:6c:90:82:b1:da:9b:d4:e4:40:b0:c2:1b:5f:98:62:02: 63:24:60:0c:d6:21:b2:13:e0:b4:39:1e:bf:71:a2:f9:c6:dc: 9d:a8:81:13 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUdQ6KWLemRzHp6W02n78V4Dd85gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMjA1NTVaFw0yNTA0MDMxMjEwNTVaMDMxMTAvBgNV BAMTKDJCNDcwRTVDMjM4OEZENEVFMjdGRDA5M0ExODhEQjUxRDU3Q0FEM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaSTfmTqsLBY4+MR+cYYKc7OxR O826MpDRipFrW7cMzlQ+MEtzDEDdBToPGeb6Y/PfQ5U6U4x4SSNkMIJy7sUzBErV TMQCY4bkbc3VT7kFRTqw1WV2b4Ru7uVHA/h2ex7ZMQb9la3rU5x8OBAzelwT6Z5O tFd9h/4pPNESVX8Jafr2vLNgfACpZKQoHHgzlXYwyg2KH+YJDvLL2+LfVledSz8S jbO0Ftmi04Wfuet2g5GruLz5UAClyQfbRMBQokhuvZC6SdcBHvTINLDt4ET9fLBk jsTESi39zuESyAtNyB0Ic/AvsKdx+CDH1AjuAzsg8KTyu7AfrXtP1lwpPr1HAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrRw5cI4j9TuJ/ 0JOhiNtR1XytOzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Y5 WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpkWDEvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Y5 WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpkWDEvMS8yQjQ3 MEU1QzIzODhGRDRFRTI3RkQwOTNBMTg4REI1MUQ1N0NBRDNCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKxVywwDQQCAAIwBwMFACgEGtgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAM1tMA0GCSqGSIb3DQEBCwUAA4IBAQBV7fPv5epKcoZjqfiq 4/R7Oeg9FV3sxRb4ouamkSX0KhoEHMnK+TvF0/gQCn9uNvHdnkQ4zyCLTkX8HD0n rSEA2fk9IaZ8iCe3VndjyYqlBY9oXz4IHM/0yhL8eUZM7qHyW0AfT1GZRCI8rcqT 91exYwRzOKwfw0t92YDFNysVXl9jDyhONWbyO8wk5M0pDmEX9OttzlnC/l0fREcJ CZCyI3VD2RbwrBA2EQscqfwZEQc2ViKF6hX+c7ZNdq7Ak4Mhn1s5fmfg53agCx95 +I87Ef8J20dSdgOFUmyQgrHam9TkQLDCG1+YYgJjJGAM1iGyE+C0OR6/caL5xtyd qIET -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:58 2024 by rpki-client on console-ams.rpki-client.org