$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.cer File: 3A9605B2DF9025F5056C61296B879441CB6D80F9.cer (raw, json) Hash identifier: FmJ1jPX7MG7TljYc2KTUfJTB7Q7uOijCKZSWbRFA9O8= Subject key identifier: 3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0A4CF247395A0CB124118297A5AC2C6E683FBD4E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.mft caRepository: rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 07:36:33 +0000 Certificate not after: Thu 03 Apr 2025 07:41:33 +0000 Subordinate resources: AS: 268528 IP: 45.162.216.0/22 IP: 2804:5298::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 18:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4c:f2:47:39:5a:0c:b1:24:11:82:97:a5:ac:2c:6e:68:3f:bd:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 07:36:33 2024 GMT Not After : Apr 3 07:41:33 2025 GMT Subject: CN=3A9605B2DF9025F5056C61296B879441CB6D80F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:41:8d:eb:38:68:30:68:65:67:bb:ea:b8: 54:ae:bf:2c:e9:d9:e5:b1:80:9c:60:3c:da:52:c3: cd:06:66:8e:4c:1c:0e:73:b3:c9:ba:ca:a5:99:dd: fc:4e:f5:02:4c:57:35:1c:4b:d1:d2:51:f3:f6:ad: 94:1d:16:ad:42:ba:b6:c6:5c:a5:69:e7:47:0d:b7: 70:ab:79:ca:8a:98:d1:e2:33:91:ce:70:0d:12:75: 4b:c8:ee:0a:e1:6a:43:0d:84:f0:91:de:ee:23:8f: 6e:f1:19:60:7e:16:82:1d:53:db:42:34:c9:81:e5: 21:48:69:de:0f:2f:51:a3:b5:b4:0f:80:e5:e4:11: 1a:62:96:86:3f:d3:31:36:b1:ee:8b:cd:9f:7f:5e: 8e:78:d8:ae:92:55:c9:73:bb:15:85:53:64:b0:b9: 13:be:73:ab:2f:5c:8b:0a:d8:0c:f6:02:d3:30:fe: b3:0f:9d:0f:79:bd:d1:47:f6:17:31:15:3f:67:1f: 78:f2:6e:09:a2:6e:72:8d:af:74:01:88:6b:42:df: e9:a1:79:e3:d1:7f:6d:ce:d8:39:fe:83:a2:0a:09: 84:24:23:79:b6:42:b9:b8:c3:4f:a7:7c:aa:f4:d8: 9b:ad:69:7a:b8:4d:2d:ee:e8:5b:23:a8:06:5c:ce: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.216.0/22 IPv6: 2804:5298::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268528 Signature Algorithm: sha256WithRSAEncryption 8b:77:83:9c:7a:79:15:65:22:a9:fb:7a:89:ef:68:c1:26:24: b4:44:8d:24:9e:de:d5:22:c1:8d:be:02:ef:7a:98:a5:b4:f9: 72:ba:39:6a:87:e7:3b:13:c0:f4:97:7a:56:ae:2b:7f:cb:9c: a7:f2:aa:3c:06:ad:f9:82:0f:aa:87:7c:13:32:ae:5c:f3:67: 28:35:61:41:b0:9a:78:10:2a:9b:fb:99:d2:65:50:9b:b1:db: 63:b0:24:d6:88:37:2c:af:74:aa:9a:cc:d5:70:ef:b5:bc:0d: a7:d3:52:d1:c5:9f:c0:b0:22:83:9c:b1:31:03:e4:fe:f2:fd: 79:f0:66:45:35:e6:a4:3a:ab:e5:9a:2a:98:67:cb:4c:44:05: 7c:1e:9d:4f:6a:12:63:84:11:b6:01:3c:6d:e2:39:d3:05:cf: 2d:6c:0b:7c:2e:40:b4:63:52:9e:f5:f1:fa:4f:bd:6f:ad:d4: 07:65:5c:4b:8c:28:71:d4:c3:02:88:f7:5b:38:0c:c2:40:49: 89:e6:78:46:b4:ce:82:08:e4:66:f0:54:dd:e5:46:a4:79:8a: 84:aa:c2:dd:45:94:18:dc:0b:19:9f:87:b3:e7:6d:ad:8b:20: 52:2f:b0:17:86:b2:c2:11:24:af:a9:4a:3e:6d:af:5c:e5:b0: 6e:90:8b:15 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCkzyRzlaDLEkEYKXpawsbmg/vU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNzM2MzNaFw0yNTA0MDMwNzQxMzNaMDMxMTAvBgNV BAMTKDNBOTYwNUIyREY5MDI1RjUwNTZDNjEyOTZCODc5NDQxQ0I2RDgwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNUGN6zhoMGhlZ7vquFSuvyzp 2eWxgJxgPNpSw80GZo5MHA5zs8m6yqWZ3fxO9QJMVzUcS9HSUfP2rZQdFq1CurbG XKVp50cNt3CrecqKmNHiM5HOcA0SdUvI7grhakMNhPCR3u4jj27xGWB+FoIdU9tC NMmB5SFIad4PL1GjtbQPgOXkERpiloY/0zE2se6LzZ9/Xo542K6SVclzuxWFU2Sw uRO+c6svXIsK2Az2AtMw/rMPnQ95vdFH9hcxFT9nH3jybgmibnKNr3QBiGtC3+mh eePRf23O2Dn+g6IKCYQkI3m2Qrm4w0+nfKr02JutaXq4TS3u6FsjqAZczpt9AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6lgWy35Al9QVs YSlrh5RBy22A+TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQndl elBxQ3RwRlpFN1ZtcVJTeVBRRlBzTHc1Y1NKMm52UGlGMjlSQ0w0OXYvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J3 ZXpQcUN0cEZaRTdWbXFSU3lQUUZQc0x3NWNTSjJudlBpRjI5UkNMNDl2LzEvM0E5 NjA1QjJERjkwMjVGNTA1NkM2MTI5NkI4Nzk0NDFDQjZEODBGOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaLYMA0EAgACMAcDBQAoBFKYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQY8DANBgkqhkiG9w0BAQsFAAOCAQEAi3eDnHp5FWUiqft6 ie9owSYktESNJJ7e1SLBjb4C73qYpbT5cro5aofnOxPA9Jd6Vq4rf8ucp/KqPAat +YIPqod8EzKuXPNnKDVhQbCaeBAqm/uZ0mVQm7HbY7Ak1og3LK90qprM1XDvtbwN p9NS0cWfwLAig5yxMQPk/vL9efBmRTXmpDqr5ZoqmGfLTEQFfB6dT2oSY4QRtgE8 beI50wXPLWwLfC5AtGNSnvXx+k+9b63UB2VcS4wocdTDAoj3WzgMwkBJieZ4RrTO ggjkZvBU3eVGpHmKhKrC3UWUGNwLGZ+Hs+dtrYsgUi+wF4aywhEkr6lKPm2vXOWw bpCLFQ== -----END CERTIFICATE-----Generated at Tue Jun 18 16:14:01 2024 by rpki-client on console-fra.rpki-client.org