$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer File: 2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer (raw, json) Hash identifier: 28mZVYBMooU7fI0po91WRkzzz9uA1ZVXBekm+RwxMac= Subject key identifier: 2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 12248DA1F2D6C072934C932F3268DDBFD3865A8C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.mft caRepository: rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 18:24:57 +0000 Certificate not after: Thu 03 Apr 2025 18:29:57 +0000 Subordinate resources: AS: 53218 IP: 138.186.204.0/22 IP: 168.181.116.0/22 IP: 186.250.168.0/21 IP: 191.5.220.0/22 IP: 2804:ff4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:24:8d:a1:f2:d6:c0:72:93:4c:93:2f:32:68:dd:bf:d3:86:5a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 18:24:57 2024 GMT Not After : Apr 3 18:29:57 2025 GMT Subject: CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3d:e2:a5:0d:1e:ac:2d:7f:33:52:59:4a:dc: 44:69:05:f7:ff:49:38:29:4c:26:8f:4e:6e:ec:db: bd:91:17:af:0d:c8:75:c0:ec:93:6e:c6:69:93:0f: 51:24:5f:e8:e9:ef:c1:4e:b5:22:90:19:33:b1:55: a1:09:f8:ab:3b:ed:39:32:6c:9b:7a:30:f8:bd:c7: 65:42:4b:fb:8a:e5:62:f3:be:ad:7e:3c:8a:8c:df: ff:75:40:92:ee:e0:c9:0d:48:2e:c3:45:ed:8c:2d: e0:55:33:48:9b:c9:d8:a3:4e:4e:32:26:1d:2b:7f: f7:c3:d5:de:20:ef:0b:cc:88:5d:b2:4c:13:ca:16: 83:ce:88:c3:20:b2:05:1f:90:4f:ec:ef:87:d2:79: 89:f5:56:90:52:c3:45:7d:ab:85:8a:9e:a2:56:5d: e5:97:b4:9d:29:2c:50:e1:52:e2:e4:48:7b:4f:60: 48:24:71:5c:7b:dd:5d:d2:3d:3b:b5:86:e8:3c:5a: 52:3d:66:40:fc:b7:ce:83:ce:ee:d4:58:0d:1f:76: 82:b6:7a:b2:9f:37:e2:90:9a:6b:96:f3:78:32:24: da:1c:ad:92:54:a6:32:2f:d5:bf:65:59:9a:5c:45: 2c:4f:94:aa:f6:88:61:2c:0a:e4:b7:a9:4c:c9:e8: d9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.204.0/22 168.181.116.0/22 186.250.168.0/21 191.5.220.0/22 IPv6: 2804:ff4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53218 Signature Algorithm: sha256WithRSAEncryption 04:e0:b3:80:65:c5:f5:41:9b:d8:8e:74:5c:3f:4b:a1:de:0e: 10:d3:5b:84:d0:d0:56:05:07:de:53:ec:02:c9:67:8b:f1:ec: b3:2e:c8:d7:e8:44:57:be:28:ec:a1:2c:0b:e6:c3:fd:85:9e: 1e:c1:9f:1c:43:d4:42:ba:54:6d:bf:e9:d2:de:e1:a3:08:29: cf:d3:d4:7b:e0:11:e4:8e:67:bf:57:02:7b:91:10:57:61:2c: db:71:f7:16:87:05:f5:28:9a:5d:18:6b:9d:ed:94:0c:6b:38: d9:89:37:8e:16:10:f0:91:60:eb:19:19:5b:a9:b5:e8:e8:3d: 3e:1d:55:7c:67:51:4e:ff:5f:23:58:b1:d6:03:c9:53:d9:c6: 70:93:bf:5c:e1:18:d3:9c:20:c4:d7:f2:cb:6c:71:1e:04:ae: 74:5a:cd:85:12:b0:dc:82:f7:0c:09:50:0a:14:70:b3:ef:9d: ce:bb:34:3a:07:f3:a3:61:60:67:c3:e7:2d:4d:e3:d7:12:51: 08:26:39:d0:10:e8:f5:bb:31:97:8a:34:e2:0d:00:88:9d:d7: 9f:bf:3a:08:20:ea:78:53:db:c9:b7:89:d5:7c:32:71:ff:9f: d3:46:13:b7:bc:75:f1:24:02:e5:09:8f:d2:a1:95:69:1e:f2: df:65:34:52 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUEiSNofLWwHKTTJMvMmjdv9OGWowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxODI0NTdaFw0yNTA0MDMxODI5NTdaMDMxMTAvBgNV BAMTKDJFMjI4OUU0RDkxRkM4RUYzREE0OTQ0QzE4OTJERUMwMjA4OUI5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPeKlDR6sLX8zUllK3ERpBff/ STgpTCaPTm7s272RF68NyHXA7JNuxmmTD1EkX+jp78FOtSKQGTOxVaEJ+Ks77Tky bJt6MPi9x2VCS/uK5WLzvq1+PIqM3/91QJLu4MkNSC7DRe2MLeBVM0ibydijTk4y Jh0rf/fD1d4g7wvMiF2yTBPKFoPOiMMgsgUfkE/s74fSeYn1VpBSw0V9q4WKnqJW XeWXtJ0pLFDhUuLkSHtPYEgkcVx73V3SPTu1hug8WlI9ZkD8t86Dzu7UWA0fdoK2 erKfN+KQmmuW83gyJNocrZJUpjIv1b9lWZpcRSxPlKr2iGEsCuS3qUzJ6Nk1AgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQuIonk2R/I7z2k lEwYkt7AIIm5TTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVk5 aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hVZ3gvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVZ OWhZYmdrbzhBWEZBYm82VFIyM1h0VXVBQ1F3Rzg2VTRnZFNKWTN4VWd4LzEvMkUy Mjg5RTREOTFGQzhFRjNEQTQ5NDRDMTg5MkRFQzAyMDg5Qjk0RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCirrMAwQCqLV0AwQDuvqoAwQCvwXcMA0EAgACMAcD BQAoBA/0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDP4jANBgkqhkiG9w0BAQsF AAOCAQEABOCzgGXF9UGb2I50XD9Lod4OENNbhNDQVgUH3lPsAslni/Hssy7I1+hE V74o7KEsC+bD/YWeHsGfHEPUQrpUbb/p0t7howgpz9PUe+AR5I5nv1cCe5EQV2Es 23H3FocF9SiaXRhrne2UDGs42Yk3jhYQ8JFg6xkZW6m16Og9Ph1VfGdRTv9fI1ix 1gPJU9nGcJO/XOEY05wgxNfyy2xxHgSudFrNhRKw3IL3DAlQChRws++dzrs0Ogfz o2FgZ8PnLU3j1xJRCCY50BDo9bsxl4o04g0AiJ3Xn786CCDqeFPbybeJ1Xwycf+f 00YTt7x18SQC5QmP0qGVaR7y32U0Ug== -----END CERTIFICATE-----Generated at Sat Jun 1 23:00:57 2024 by rpki-client on console-ams.rpki-client.org