$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3.cer File: 2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3.cer (raw, json) Hash identifier: v9yTv4FuGznZcyQ9hc4+KUXdtcaybBvzwvUegLxIUxA= Subject key identifier: 2D:18:FF:D1:0A:63:F8:AA:B6:6C:7D:B5:69:F0:EE:28:CE:D5:26:F3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3BA737915444A0F92F9236CD58FC13F1C053F2D1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3.mft caRepository: rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 01:38:56 +0000 Certificate not after: Thu 03 Apr 2025 01:43:56 +0000 Subordinate resources: AS: 266044 IP: 45.4.32.0/22 IP: 2804:39b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a7:37:91:54:44:a0:f9:2f:92:36:cd:58:fc:13:f1:c0:53:f2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 01:38:56 2024 GMT Not After : Apr 3 01:43:56 2025 GMT Subject: CN=2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:d7:3b:c1:54:88:f8:9d:73:71:9a:5f:18: e0:28:0c:d9:ad:d2:16:dd:76:e6:ca:22:12:af:49: ee:8e:43:e6:c4:48:ef:d1:23:4b:8f:ce:af:2b:e7: 0f:1a:01:ba:a2:e9:9f:92:1c:99:7e:71:9f:77:8b: 19:59:9a:29:16:37:6d:67:63:e1:28:02:e2:3c:0f: b3:bd:fb:6b:f0:4b:0f:cb:3e:59:5a:52:6f:29:cd: 68:98:3c:95:c6:60:98:14:6e:e9:b9:1b:ae:22:20: 27:d9:a2:c7:46:f3:e8:54:9c:0b:78:d5:e1:8b:e0: 41:b6:c0:7f:86:43:48:ee:93:36:b4:2a:06:22:3e: f9:f9:9b:2b:21:bf:f4:ce:35:72:c2:e5:a9:34:39: 88:88:fe:21:01:da:cd:9b:d0:84:79:fc:37:e7:4a: ff:38:eb:d3:ff:cf:47:9e:1d:0c:00:c5:06:92:25: e7:a9:ec:c2:d1:49:a9:22:41:8e:01:86:4e:c6:21: 55:bb:8a:10:89:cd:e6:6d:57:24:1d:06:13:7c:c8: f9:87:8f:b9:ec:a1:5f:16:1f:ec:99:71:9e:a9:ff: 22:d9:a5:6c:c1:3d:e7:55:8c:d7:ca:90:50:55:2a: ab:dc:cf:23:44:ce:7b:fb:3d:f0:b2:40:27:08:13: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:18:FF:D1:0A:63:F8:AA:B6:6C:7D:B5:69:F0:EE:28:CE:D5:26:F3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.32.0/22 IPv6: 2804:39b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266044 Signature Algorithm: sha256WithRSAEncryption 65:b9:7d:53:e3:bb:b9:53:12:b6:84:9f:a1:17:8a:3d:91:e1: cc:5c:e6:99:20:1b:66:ec:7b:f5:88:c1:2a:3a:f2:a3:32:c5: f1:cd:79:70:56:35:27:f6:be:90:10:62:40:ab:08:ec:66:a4: d1:e5:31:96:1f:a1:7f:6d:10:e9:c8:fd:ad:fa:e6:01:4e:70: 89:e5:1e:db:00:10:98:3e:77:8e:38:39:c9:ca:ff:19:b3:b3: 38:68:3a:0c:5e:13:79:72:35:5b:b1:fc:22:3e:4d:75:c3:f9: 74:cf:76:d3:c4:5b:bc:82:70:4c:e1:66:2a:17:76:aa:28:b5: a5:6a:02:d4:aa:ae:b6:cd:13:5c:47:fe:4a:70:52:c9:4f:36: d9:e4:5f:e8:90:05:a5:5c:b7:73:b3:cc:2c:d3:f2:4a:ac:89: 2d:64:d9:9b:90:58:26:7c:8d:48:f3:a3:ec:25:22:e5:7c:12: c5:f7:e9:f4:b3:c9:06:c3:3d:d9:b5:c8:d9:ff:d1:2c:df:0a: f2:c2:a6:bb:dd:a8:c7:07:ff:b5:78:f6:ad:f9:cd:d0:39:2f: 6b:86:2f:98:6c:c6:0b:ca:e2:92:fd:90:3d:c5:b6:7e:e1:d6: be:f4:1f:35:56:54:ee:af:34:fb:61:8a:43:e5:15:35:88:76: 5c:e4:37:a8 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUO6c3kVREoPkvkjbNWPwT8cBT8tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMTM4NTZaFw0yNTA0MDMwMTQzNTZaMDMxMTAvBgNV BAMTKDJEMThGRkQxMEE2M0Y4QUFCNjZDN0RCNTY5RjBFRTI4Q0VENTI2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYatc7wVSI+J1zcZpfGOAoDNmt 0hbddubKIhKvSe6OQ+bESO/RI0uPzq8r5w8aAbqi6Z+SHJl+cZ93ixlZmikWN21n Y+EoAuI8D7O9+2vwSw/LPllaUm8pzWiYPJXGYJgUbum5G64iICfZosdG8+hUnAt4 1eGL4EG2wH+GQ0jukza0KgYiPvn5myshv/TONXLC5ak0OYiI/iEB2s2b0IR5/Dfn Sv8469P/z0eeHQwAxQaSJeep7MLRSakiQY4Bhk7GIVW7ihCJzeZtVyQdBhN8yPmH j7nsoV8WH+yZcZ6p/yLZpWzBPedVjNfKkFBVKqvczyNEznv7PfCyQCcIE3htAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtGP/RCmP4qrZs fbVp8O4oztUm8zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1dE YVhtMzZEZUFOa3cyMlpyNFdUdjU2cU5yd21NaW82ZVVrQk1pZlVtN2IvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdX RGFYbTM2RGVBTmt3MjJacjRXVHY1NnFOcndtTWlvNmVVa0JNaWZVbTdiLzEvMkQx OEZGRDEwQTYzRjhBQUI2NkM3REI1NjlGMEVFMjhDRUQ1MjZGMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLQQgMA0EAgACMAcDBQAoBDmwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPPDANBgkqhkiG9w0BAQsFAAOCAQEAZbl9U+O7uVMStoSf oReKPZHhzFzmmSAbZux79YjBKjryozLF8c15cFY1J/a+kBBiQKsI7Gak0eUxlh+h f20Q6cj9rfrmAU5wieUe2wAQmD53jjg5ycr/GbOzOGg6DF4TeXI1W7H8Ij5NdcP5 dM9208RbvIJwTOFmKhd2qii1pWoC1Kquts0TXEf+SnBSyU822eRf6JAFpVy3c7PM LNPySqyJLWTZm5BYJnyNSPOj7CUi5XwSxffp9LPJBsM92bXI2f/RLN8K8sKmu92o xwf/tXj2rfnN0Dkva4YvmGzGC8rikv2QPcW2fuHWvvQfNVZU7q80+2GKQ+UVNYh2 XOQ3qA== -----END CERTIFICATE-----Generated at Sat Jun 1 23:00:57 2024 by rpki-client on console-ams.rpki-client.org