$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer File: 2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer (raw, json) Hash identifier: G5hutAgFRYY4K0L2gybb3v0axjogPnQOoxyoJkvdioc= Subject key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7DD5863A6F303F7C681C460ECD6881FF8D221EF4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft caRepository: rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 08:17:04 +0000 Certificate not after: Thu 03 Apr 2025 08:22:04 +0000 Subordinate resources: AS: 264996 IP: 45.179.128.0/22 IP: 170.84.84.0/22 IP: 2804:3124::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 03:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d5:86:3a:6f:30:3f:7c:68:1c:46:0e:cd:68:81:ff:8d:22:1e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 08:17:04 2024 GMT Not After : Apr 3 08:22:04 2025 GMT Subject: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:59:ea:fe:da:f2:59:40:95:33:bc:79:10: 93:10:83:9b:42:a4:22:b9:68:d0:f1:80:7a:e4:b3: a1:4c:b7:b9:69:83:26:4e:a8:4d:8a:32:da:c4:8e: 19:e6:36:29:70:bb:28:a6:e0:68:9d:1c:20:24:cf: c5:e0:82:55:74:03:e8:c5:ec:16:c1:d8:bd:c5:0f: 62:dd:f9:ca:b6:7a:64:57:2b:f7:94:a4:07:e0:41: 57:a4:70:b1:d5:46:eb:30:f2:6c:37:9a:f6:3b:a2: c8:ce:0a:d4:b8:6b:5d:fb:09:70:02:a8:46:13:b8: bb:09:77:c1:21:34:26:04:9f:f6:0c:30:7f:d8:56: 69:a7:a5:96:ef:38:50:84:13:8b:be:ed:7b:7d:4c: ef:39:e3:f1:0c:c8:dc:43:e1:fb:d3:19:ae:d1:54: 98:3e:f1:00:77:14:1d:d4:a9:8f:de:6d:d3:0a:29: 39:62:08:aa:88:7c:52:5f:9a:f5:a5:b1:8e:fa:32: 62:b2:19:d9:d6:94:ba:82:30:89:00:bf:7a:8f:54: d6:3b:75:da:e1:be:d7:5f:06:d0:0c:be:36:52:24: 28:45:9e:e0:60:ab:bc:85:77:a8:df:ac:fd:da:89: 86:7b:e4:44:13:30:43:71:6a:cf:69:1e:17:9a:ca: 8d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.179.128.0/22 170.84.84.0/22 IPv6: 2804:3124::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264996 Signature Algorithm: sha256WithRSAEncryption 18:ed:e4:8b:d4:dd:cb:ef:d3:c3:c2:e1:0c:d6:c8:aa:fa:a2: 34:06:85:a0:46:41:87:bc:c3:64:8a:af:4b:0c:fc:fc:7e:c8: 1d:1d:ac:90:c6:cf:04:30:24:f1:e3:ab:bc:4c:bf:6e:e6:d8: 69:d6:a1:fd:1e:e7:50:a8:a6:8a:1a:eb:a8:93:2b:df:8e:3c: ae:f0:b1:d0:ab:7e:3e:9e:a2:3b:7f:2d:3a:e3:af:cc:1e:61: 92:bc:b2:ef:fe:6a:8c:44:51:98:d9:cc:40:8a:c9:4a:12:e5: 69:6e:e1:65:05:60:6f:fe:de:5f:87:63:1c:32:3d:11:09:cf: 79:95:85:d9:87:a0:50:97:0c:c4:47:4d:a9:a2:c4:b2:4a:08: 8c:18:9b:61:68:2c:e0:26:a7:9f:b3:65:0c:e6:b3:b3:6a:cc: 7a:65:5a:3e:40:40:9f:55:52:23:db:92:be:48:8a:a5:38:66: da:63:35:b3:48:ae:a2:0f:fb:75:8d:cd:3c:b7:e0:6e:1e:3e: 8c:17:a3:a6:26:1c:99:15:1f:bc:c5:ca:45:d9:97:94:56:f6: 4e:cc:06:3e:de:4c:01:31:0d:f7:09:57:e5:38:3c:8a:4b:c2: ae:8a:c1:bc:40:ee:55:a1:b7:f8:d4:c7:44:9c:50:53:79:a2: f6:ac:c5:1d -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUfdWGOm8wP3xoHEYOzWiB/40iHvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwODE3MDRaFw0yNTA0MDMwODIyMDRaMDMxMTAvBgNV BAMTKDJGM0YxMkU5NDQ3MTlGMjRBOEQxQTRCM0M3OTgwRjcwQTZEOTlENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVplnq/tryWUCVM7x5EJMQg5tC pCK5aNDxgHrks6FMt7lpgyZOqE2KMtrEjhnmNilwuyim4GidHCAkz8XgglV0A+jF 7BbB2L3FD2Ld+cq2emRXK/eUpAfgQVekcLHVRusw8mw3mvY7osjOCtS4a137CXAC qEYTuLsJd8EhNCYEn/YMMH/YVmmnpZbvOFCEE4u+7Xt9TO854/EMyNxD4fvTGa7R VJg+8QB3FB3UqY/ebdMKKTliCKqIfFJfmvWlsY76MmKyGdnWlLqCMIkAv3qPVNY7 ddrhvtdfBtAMvjZSJChFnuBgq7yFd6jfrP3aiYZ75EQTMENxas9pHheayo2/AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvPxLpRHGfJKjR pLPHmA9wptmdaTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3N2 am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5ZXQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3N2 am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5ZXQvMS8yRjNG MTJFOTQ0NzE5RjI0QThEMUE0QjNDNzk4MEY3MEE2RDk5RDY5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAIts4ADBAKqVFQwDQQCAAIwBwMFACgEMSQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAskMA0GCSqGSIb3DQEBCwUAA4IBAQAY7eSL1N3L 79PDwuEM1siq+qI0BoWgRkGHvMNkiq9LDPz8fsgdHayQxs8EMCTx46u8TL9u5thp 1qH9HudQqKaKGuuokyvfjjyu8LHQq34+nqI7fy0646/MHmGSvLLv/mqMRFGY2cxA islKEuVpbuFlBWBv/t5fh2McMj0RCc95lYXZh6BQlwzER02posSySgiMGJthaCzg Jqefs2UM5rOzasx6ZVo+QECfVVIj25K+SIqlOGbaYzWzSK6iD/t1jc08t+BuHj6M F6OmJhyZFR+8xcpF2ZeUVvZOzAY+3kwBMQ33CVflODyKS8KuisG8QO5Vobf41MdE nFBTeaL2rMUd -----END CERTIFICATE-----Generated at Sun Jun 2 03:38:56 2024 by rpki-client on console-ams.rpki-client.org