$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.cer File: 4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.cer (raw, json) Hash identifier: DRs2hBtT5jFe0pLF80MkCfnKK2XecBhDjf6t4UvTNrM= Subject key identifier: 41:78:BB:74:E2:8D:29:CB:C8:D1:23:A4:F3:CE:26:B1:60:CC:5C:82 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A41EEB382B0F2CC64F1243C8BBC0E5E4B591DB8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.mft caRepository: rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 01:47:33 +0000 Certificate not after: Thu 03 Apr 2025 01:52:33 +0000 Subordinate resources: AS: 264202 IP: 138.97.216.0/22 IP: 170.233.44.0/22 IP: 2804:241c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:41:ee:b3:82:b0:f2:cc:64:f1:24:3c:8b:bc:0e:5e:4b:59:1d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 01:47:33 2024 GMT Not After : Apr 3 01:52:33 2025 GMT Subject: CN=4178BB74E28D29CBC8D123A4F3CE26B160CC5C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:2b:c1:a5:7b:6e:e6:88:fa:62:dc:7d:3b: 6a:fd:4f:46:2a:cc:1c:cc:f6:7a:d6:6d:c2:d3:23: 64:71:f5:a3:47:0d:44:94:a7:52:8b:a2:24:7e:96: 72:f5:c0:cf:41:12:e2:8a:25:e1:6b:6d:e3:4b:35: be:08:e4:0e:d1:ba:38:49:27:d9:c9:69:fc:ad:14: 15:a2:14:7f:2c:12:f6:10:fb:be:d5:63:c6:a6:7e: 67:ef:1c:72:6a:8f:9a:12:58:5c:df:da:0f:b6:ff: 18:8b:64:06:80:5c:6e:49:ea:4a:8b:67:22:5c:47: eb:57:45:39:76:18:93:3e:89:e4:5f:a1:d1:e3:1d: 1c:f5:53:c6:94:48:5a:52:a7:b0:a5:fe:3d:19:3b: 4c:97:0e:b5:57:5b:c0:96:ad:60:37:b8:55:02:2f: d2:63:97:29:bf:a9:ad:50:65:8b:07:41:2d:30:41: 42:ea:31:5c:88:78:34:ef:86:f6:37:e9:92:32:7b: f4:bd:c7:7d:48:8c:7f:2a:f6:d4:5d:60:4b:91:17: 25:05:b3:ad:e5:7a:20:a6:07:14:6c:b5:81:fb:ee: 4f:e2:90:b4:32:d7:17:c7:e5:0a:4a:54:e8:55:91: 2a:fb:b8:de:af:8a:e1:22:45:e1:1f:ce:e4:08:d8: b8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:78:BB:74:E2:8D:29:CB:C8:D1:23:A4:F3:CE:26:B1:60:CC:5C:82 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.216.0/22 170.233.44.0/22 IPv6: 2804:241c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264202 Signature Algorithm: sha256WithRSAEncryption 78:55:8a:2c:ea:95:d2:b5:15:e1:da:30:64:83:2f:77:79:21: 26:bc:ca:9d:d3:00:33:ca:a9:14:52:a5:73:93:91:a9:ec:b4: 4f:33:89:df:49:29:ea:f9:27:b2:a8:a0:1b:87:7e:91:ee:27: 2f:5c:3f:80:74:cd:6e:e1:95:0b:26:1f:4c:9c:f2:9a:87:4e: 77:fe:de:f6:47:64:a2:51:08:98:0f:55:a2:94:88:97:4d:3e: da:bd:80:50:19:1d:6e:f1:57:cd:68:d7:9b:cf:f6:7d:8f:82: 4a:df:f3:ed:9d:31:a9:e8:d5:94:b6:6c:93:00:6b:f4:d1:b3: cf:3e:4f:5a:cd:34:ab:d2:28:99:48:5a:2f:62:04:1d:4a:d0: 23:9d:28:f1:dc:60:15:d0:13:63:19:00:c0:42:fc:19:dd:16: aa:dd:90:d1:11:0d:20:86:28:5e:74:70:76:a5:49:86:2f:4f: 76:c7:6e:fd:48:33:62:94:1b:e1:79:96:ee:d7:62:f8:bd:54: e5:75:8d:df:3b:e4:fe:52:06:7a:e4:66:ae:71:aa:fc:2c:e1: c9:c2:15:90:a5:d5:e1:5f:6f:08:7b:96:5e:55:3a:70:84:1a: 72:14:0b:d0:38:ee:4d:9e:1a:93:40:7b:17:34:11:f9:5b:4c: 04:4f:1d:55 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUSkHus4Kw8sxk8SQ8i7wOXktZHbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMTQ3MzNaFw0yNTA0MDMwMTUyMzNaMDMxMTAvBgNV BAMTKDQxNzhCQjc0RTI4RDI5Q0JDOEQxMjNBNEYzQ0UyNkIxNjBDQzVDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cSvBpXtu5oj6Ytx9O2r9T0Yq zBzM9nrWbcLTI2Rx9aNHDUSUp1KLoiR+lnL1wM9BEuKKJeFrbeNLNb4I5A7RujhJ J9nJafytFBWiFH8sEvYQ+77VY8amfmfvHHJqj5oSWFzf2g+2/xiLZAaAXG5J6kqL ZyJcR+tXRTl2GJM+ieRfodHjHRz1U8aUSFpSp7Cl/j0ZO0yXDrVXW8CWrWA3uFUC L9Jjlym/qa1QZYsHQS0wQULqMVyIeDTvhvY36ZIye/S9x31IjH8q9tRdYEuRFyUF s63leiCmBxRstYH77k/ikLQy1xfH5QpKVOhVkSr7uN6viuEiReEfzuQI2LiZAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRBeLt04o0py8jR I6TzziaxYMxcgjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlpi c3lNZkJGQmJBUHdEWTROczV5YXhueDRjV0dNZTY5VU5XTlNlMkt1MWEvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlpi c3lNZkJGQmJBUHdEWTROczV5YXhueDRjV0dNZTY5VU5XTlNlMkt1MWEvMi80MTc4 QkI3NEUyOEQyOUNCQzhEMTIzQTRGM0NFMjZCMTYwQ0M1QzgyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKKYdgDBAKq6SwwDQQCAAIwBwMFACgEJBwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAgKMA0GCSqGSIb3DQEBCwUAA4IBAQB4VYos6pXS tRXh2jBkgy93eSEmvMqd0wAzyqkUUqVzk5Gp7LRPM4nfSSnq+SeyqKAbh36R7icv XD+AdM1u4ZULJh9MnPKah053/t72R2SiUQiYD1WilIiXTT7avYBQGR1u8VfNaNeb z/Z9j4JK3/PtnTGp6NWUtmyTAGv00bPPPk9azTSr0iiZSFovYgQdStAjnSjx3GAV 0BNjGQDAQvwZ3Raq3ZDREQ0ghihedHB2pUmGL092x279SDNilBvheZbu12L4vVTl dY3fO+T+UgZ65Gaucar8LOHJwhWQpdXhX28Ie5ZeVTpwhBpyFAvQOO5NnhqTQHsX NBH5W0wETx1V -----END CERTIFICATE-----Generated at Sun Jun 2 00:29:10 2024 by rpki-client on console-ams.rpki-client.org