$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer File: 45FC107BB0B6654452677B1D69CD570ED537BDB4.cer (raw, json) Hash identifier: hw1NoSNIT6aky3LLwZliwdHC2K/ZhMynYL108SP9CY4= Subject key identifier: 45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4FF45334335EA21E9695DED6C72490FE8F2E5A17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft caRepository: rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 05:07:28 +0000 Certificate not after: Thu 03 Apr 2025 05:12:28 +0000 Subordinate resources: AS: 263069 IP: 168.0.128.0/22 IP: 186.233.56.0/22 IP: 2804:2cdc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f4:53:34:33:5e:a2:1e:96:95:de:d6:c7:24:90:fe:8f:2e:5a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 05:07:28 2024 GMT Not After : Apr 3 05:12:28 2025 GMT Subject: CN=45FC107BB0B6654452677B1D69CD570ED537BDB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0f:bc:0b:fe:74:80:1c:c3:1f:4f:2d:45:c3: 5d:59:df:81:39:60:59:05:02:3b:a6:1e:30:d6:6b: 5d:a7:3c:f6:3b:38:da:70:cb:d5:7a:3b:38:d4:df: ba:eb:75:ac:7e:a9:bc:df:c8:10:bf:e5:97:1c:4b: 76:be:30:25:c6:d6:ea:f8:51:f6:ee:9f:0d:b1:49: 24:cc:1b:ea:92:86:c6:a9:6a:ee:a6:ff:6b:59:46: d0:52:bb:79:91:ce:97:d1:48:0b:28:38:55:55:fc: 5d:69:ec:d2:d7:ae:45:65:9e:e0:71:06:66:56:6b: f1:ce:f3:bd:c2:96:a9:b8:12:59:f5:aa:63:eb:06: 84:bd:7a:3e:2c:71:ce:77:88:16:00:e4:b0:0c:7c: f0:5d:2c:bf:22:a9:b8:cb:9b:95:3b:49:c7:8e:f0: 27:9b:55:a0:d9:00:ac:d8:45:f9:65:3b:59:35:86: 8d:51:56:de:7d:90:70:90:a1:0e:89:56:e3:b8:96: 57:a9:c9:a6:f6:86:4c:48:df:65:10:cd:ae:f9:38: b7:86:79:f7:86:38:bc:92:98:ed:37:60:58:94:f9: 16:8e:8d:e5:ca:62:ea:cb:7a:76:21:31:04:67:d8: ea:95:40:07:61:7a:33:91:b0:07:ae:60:c9:61:df: e2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.128.0/22 186.233.56.0/22 IPv6: 2804:2cdc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263069 Signature Algorithm: sha256WithRSAEncryption da:e6:2b:e2:e4:b7:d0:85:2f:6d:03:c3:2d:84:31:c0:d3:1c: 1a:b2:75:3b:a6:e2:0d:a0:a2:87:b1:7f:6e:80:c0:fb:ce:83: a4:bf:1d:4c:f0:e0:e0:c6:a8:d1:31:1d:00:0e:f4:42:c5:26: 41:b3:48:36:9f:36:77:ef:b7:35:2d:07:7a:f2:99:1d:d0:de: a9:b5:bb:18:61:a2:7b:2f:f3:0f:ee:8a:41:3c:6e:65:df:c4: 47:a3:7d:1f:57:59:a9:70:a6:ac:8a:b0:a0:5c:31:dd:66:25: 6d:46:8c:7c:91:fc:06:5b:2b:44:fe:50:38:6b:06:5e:7f:35: d2:d7:b2:f8:50:36:0b:ed:9a:0c:2c:55:34:53:59:3d:84:54: 8c:33:a6:1c:2f:a1:0e:f3:4c:2e:f8:bc:e2:d7:07:25:fd:9f: 59:4c:f4:0e:37:dc:aa:c6:c9:f3:80:3a:4f:d7:57:f1:1e:93: 95:c6:2b:8a:20:44:c1:04:ae:37:50:fc:e9:7f:2e:9e:d8:a6: 33:f2:2a:ec:54:75:1b:aa:cd:68:71:25:4a:4b:65:0f:58:ee: 4a:ec:67:14:16:4a:da:46:6b:ec:d6:5f:e9:75:ad:7e:f6:2b: f5:91:8a:48:5d:af:d9:1e:1f:d8:c8:6e:1e:4f:fc:73:4b:c4: 37:45:b7:64 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUT/RTNDNeoh6Wld7WxySQ/o8uWhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNTA3MjhaFw0yNTA0MDMwNTEyMjhaMDMxMTAvBgNV BAMTKDQ1RkMxMDdCQjBCNjY1NDQ1MjY3N0IxRDY5Q0Q1NzBFRDUzN0JEQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfD7wL/nSAHMMfTy1Fw11Z34E5 YFkFAjumHjDWa12nPPY7ONpwy9V6OzjU37rrdax+qbzfyBC/5ZccS3a+MCXG1ur4 Ufbunw2xSSTMG+qShsapau6m/2tZRtBSu3mRzpfRSAsoOFVV/F1p7NLXrkVlnuBx BmZWa/HO873Clqm4Eln1qmPrBoS9ej4scc53iBYA5LAMfPBdLL8iqbjLm5U7SceO 8CebVaDZAKzYRfllO1k1ho1RVt59kHCQoQ6JVuO4llepyab2hkxI32UQza75OLeG efeGOLySmO03YFiU+RaOjeXKYurLenYhMQRn2OqVQAdhejORsAeuYMlh3+IbAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRF/BB7sLZlRFJn ex1pzVcO1Te9tDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRldB WWpXMVVNellDNFRwanpONnRXdlMzN0gyYmlwS2Z3VTdLREIzR2daWDEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZX QVlqVzFVTXpZQzRUcGp6TjZ0V3ZTMzdIMmJpcEtmd1U3S0RCM0dnWlgxLzEvNDVG QzEwN0JCMEI2NjU0NDUyNjc3QjFENjlDRDU3MEVENTM3QkRCNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqACAAwQCuuk4MA0EAgACMAcDBQAoBCzcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDnTANBgkqhkiG9w0BAQsFAAOCAQEA2uYr4uS3 0IUvbQPDLYQxwNMcGrJ1O6biDaCih7F/boDA+86DpL8dTPDg4Mao0TEdAA70QsUm QbNINp82d++3NS0HevKZHdDeqbW7GGGiey/zD+6KQTxuZd/ER6N9H1dZqXCmrIqw oFwx3WYlbUaMfJH8BlsrRP5QOGsGXn810tey+FA2C+2aDCxVNFNZPYRUjDOmHC+h DvNMLvi84tcHJf2fWUz0DjfcqsbJ84A6T9dX8R6TlcYriiBEwQSuN1D86X8untim M/Iq7FR1G6rNaHElSktlD1juSuxnFBZK2kZr7NZf6XWtfvYr9ZGKSF2v2R4f2Mhu Hk/8c0vEN0W3ZA== -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:33 2024 by rpki-client on console-ams.rpki-client.org