$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.cer (raw, json) Hash identifier: SGHKFgQqGg5wuBiNi4u8u06A/e0QVvCjANpqetO/9EY= Subject key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5B806F55AB50869FBC8710F2F74C1EE23090EE74 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft caRepository: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 15:22:02 +0000 Certificate not after: Thu 03 Apr 2025 15:27:02 +0000 Subordinate resources: AS: 264233 IP: 138.117.116.0/22 IP: 170.80.100.0/22 IP: 2804:249c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 18:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:80:6f:55:ab:50:86:9f:bc:87:10:f2:f7:4c:1e:e2:30:90:ee:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 15:22:02 2024 GMT Not After : Apr 3 15:27:02 2025 GMT Subject: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:c3:47:98:f5:73:f7:a7:55:78:2f:4f:59: ba:ba:f9:55:ac:e9:e0:11:9f:14:42:60:f6:bf:eb: b8:ad:3e:f1:e1:44:0d:57:00:8d:2c:7c:c6:8a:ab: 76:fb:06:a2:b6:5c:b6:90:0e:71:bc:8b:a7:4a:dc: 05:b4:c0:48:c4:ad:20:44:45:89:1a:43:c4:64:ad: 8d:ed:0a:8e:15:4c:fe:18:37:52:dc:30:7f:53:34: b9:35:a5:fb:76:c7:61:70:b0:89:8c:15:83:30:0c: 63:3c:4f:42:60:b2:5a:54:f3:1f:fe:69:19:bf:e1: 2c:f7:57:6b:2c:87:b1:09:ab:6d:1f:0d:56:ec:39: 86:1a:58:45:ac:b8:f5:e5:d7:69:05:ec:fd:ba:43: ed:6b:16:89:b7:9a:02:73:85:80:5d:3c:1b:35:05: 9f:36:fd:44:16:a7:2c:8d:c8:cc:e1:ea:37:b1:24: 88:d0:e9:4e:f8:97:22:31:f4:36:31:5b:80:04:6d: a9:db:cf:31:ae:22:5a:bf:6a:32:b8:6b:be:fc:cb: be:51:16:ef:f6:2a:12:d6:0c:8b:4f:49:d3:dd:25: 46:57:de:27:99:c5:a4:42:8c:cc:86:c9:fa:12:e9: 6b:f1:18:e2:f1:03:e6:7a:1e:4e:6c:09:0c:29:cb: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.116.0/22 170.80.100.0/22 IPv6: 2804:249c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264233 Signature Algorithm: sha256WithRSAEncryption b1:38:67:37:94:3f:1e:f5:f5:12:74:9c:7a:85:82:4b:81:e4: 5b:52:71:42:db:d2:0c:a2:3e:0b:2f:31:4e:45:7d:05:cc:3f: 46:c5:fd:16:56:d2:88:be:65:ed:27:4e:a7:a9:99:95:94:3e: f1:07:ba:97:56:63:2c:2e:37:39:b8:d5:c1:2c:f7:55:53:90: 29:81:05:11:02:d7:2e:29:9e:62:7f:94:37:e0:b3:f2:3b:0a: da:e7:23:a8:93:27:78:31:c5:1c:36:ee:9d:46:6c:ab:7c:47: 5d:79:35:2b:a2:1c:65:0f:9b:67:eb:3a:62:2a:35:4a:54:7f: a7:31:04:de:3b:3a:fa:53:d2:8d:8a:b1:ca:7a:05:7c:34:35: 20:8e:a9:2c:b2:66:b3:13:36:aa:59:90:9f:59:1b:52:52:7d: 41:5e:76:1b:03:0a:32:fb:52:b7:35:ea:57:2b:85:1c:f6:e8: 3e:c7:7f:72:af:82:b7:54:70:66:c2:9b:81:df:9e:ec:a4:fb: 3a:5d:b0:c3:19:23:ba:b7:34:71:46:ea:64:62:a3:41:7e:30: ca:7c:db:16:da:a8:c7:4e:40:1d:0b:7b:69:20:03:61:d1:ce: ef:35:bb:e6:d0:8c:6d:fd:a4:2f:7f:be:a4:b1:9e:f6:cc:e3: ad:88:dc:ca -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUW4BvVatQhp+8hxDy90we4jCQ7nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNTIyMDJaFw0yNTA0MDMxNTI3MDJaMDMxMTAvBgNV BAMTKDJENTk5MDVDM0ZDQTVCREEzNEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQMNHmPVz96dVeC9PWbq6+VWs 6eARnxRCYPa/67itPvHhRA1XAI0sfMaKq3b7BqK2XLaQDnG8i6dK3AW0wEjErSBE RYkaQ8RkrY3tCo4VTP4YN1LcMH9TNLk1pft2x2FwsImMFYMwDGM8T0JgslpU8x/+ aRm/4Sz3V2ssh7EJq20fDVbsOYYaWEWsuPXl12kF7P26Q+1rFom3mgJzhYBdPBs1 BZ82/UQWpyyNyMzh6jexJIjQ6U74lyIx9DYxW4AEbanbzzGuIlq/ajK4a778y75R Fu/2KhLWDItPSdPdJUZX3ieZxaRCjMyGyfoS6WvxGOLxA+Z6Hk5sCQwpy8p/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtWZBcP8pb2jTX EBsIjYBFHQJsRzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFRT cmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RU U3JhVWRBV1dMaFVZWDl1ZDNjeW55WEg2WmVXY0FWQzh6Y0dvRmhQOUFILzEvMkQ1 OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUxRDAyNkM0Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinV0AwQCqlBkMA0EAgACMAcDBQAoBCScMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIKTANBgkqhkiG9w0BAQsFAAOCAQEAsThnN5Q/ HvX1EnSceoWCS4HkW1JxQtvSDKI+Cy8xTkV9Bcw/RsX9FlbSiL5l7SdOp6mZlZQ+ 8Qe6l1ZjLC43ObjVwSz3VVOQKYEFEQLXLimeYn+UN+Cz8jsK2ucjqJMneDHFHDbu nUZsq3xHXXk1K6IcZQ+bZ+s6Yio1SlR/pzEE3js6+lPSjYqxynoFfDQ1II6pLLJm sxM2qlmQn1kbUlJ9QV52GwMKMvtStzXqVyuFHPboPsd/cq+Ct1RwZsKbgd+e7KT7 Ol2wwxkjurc0cUbqZGKjQX4wynzbFtqox05AHQt7aSADYdHO7zW75tCMbf2kL3++ pLGe9szjrYjcyg== -----END CERTIFICATE-----Generated at Tue Jun 18 16:14:00 2024 by rpki-client on console-fra.rpki-client.org