$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C.cer File: 4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C.cer (raw, json) Hash identifier: 0Se2Kl1gTkpTYjEMle8E0Xrjp6Cl1G3HXU/JWryxOmo= Subject key identifier: 4B:4B:10:01:9F:BA:A1:FA:47:63:B4:B8:C3:85:E8:F1:3C:DE:B8:5C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 09DC6340F4B4CE3F1A36ACD738EEF27DE464E6F7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C.mft caRepository: rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 15:41:30 +0000 Certificate not after: Thu 03 Apr 2025 15:46:30 +0000 Subordinate resources: AS: 268085 IP: 45.168.248.0/22 IP: 2804:57c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:dc:63:40:f4:b4:ce:3f:1a:36:ac:d7:38:ee:f2:7d:e4:64:e6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 15:41:30 2024 GMT Not After : Apr 3 15:46:30 2025 GMT Subject: CN=4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a3:61:02:16:32:7a:3d:da:5c:b1:61:1a:08: 11:24:81:4a:d0:cb:43:39:6e:f4:09:16:a9:7a:04: 0d:d8:f9:96:20:d6:21:e8:96:1c:17:75:12:a1:48: e2:63:a5:b9:24:91:20:5e:46:1a:e7:c8:c6:fb:08: a1:91:cf:23:fe:87:f0:f5:89:1f:18:65:91:aa:28: bc:4e:65:c0:8a:72:30:25:10:22:4b:d9:24:76:09: 8c:25:e3:4e:97:e9:8d:38:71:d6:b9:db:61:59:38: 6e:1f:fd:bb:c8:67:76:35:6c:28:ed:44:c3:c6:04: 9b:88:dc:b4:95:1f:bd:59:c3:01:80:ac:bd:4f:1a: 47:72:89:54:8a:9a:d5:5e:15:9b:a3:5e:6f:ff:88: 85:8c:6c:8d:c3:b0:cb:34:a9:ed:f9:a0:62:52:05: 19:a0:12:54:dc:04:6b:66:9c:77:06:52:9f:6e:21: 24:97:33:fb:1a:3e:bf:66:78:08:dc:32:f5:bd:28: 5d:3c:41:82:b3:8a:3b:2d:ae:42:fd:0e:4b:da:19: a6:ab:38:cf:71:13:63:02:a5:c5:ac:82:90:88:06: b1:2e:19:c6:cd:bc:e6:4b:af:c7:4d:5e:ed:bd:ba: e2:a9:70:c7:18:ed:7a:d8:bf:17:f4:05:23:10:7f: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:4B:10:01:9F:BA:A1:FA:47:63:B4:B8:C3:85:E8:F1:3C:DE:B8:5C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.248.0/22 IPv6: 2804:57c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268085 Signature Algorithm: sha256WithRSAEncryption 0d:f0:5c:5f:ba:c8:e6:fb:3a:19:7d:7b:72:b5:75:86:2d:27: 36:83:a9:2c:f7:08:55:f3:65:57:ab:65:6c:8e:b5:9d:da:86: e0:48:d0:3f:de:30:cc:b1:30:8d:f6:79:27:a2:26:db:bb:fc: 16:77:2d:a2:7d:1f:b7:ac:3d:ae:a8:4e:32:ec:7a:47:ef:8b: bc:09:5d:35:26:ec:0d:1e:97:93:9f:7f:d4:74:7a:44:9c:54: d4:9e:2c:fc:e6:c4:b4:01:b5:49:0b:08:ba:30:52:85:4b:6d: f8:7b:3a:67:e2:2a:17:78:69:47:2a:72:3b:06:0c:d2:b1:45: b0:28:a7:c1:25:0d:d8:1c:87:b3:a3:82:31:86:eb:20:84:03: 44:37:50:d5:4a:cd:51:48:f9:c0:63:d4:b0:d3:0d:c6:ef:63: b5:48:4c:2d:35:b4:e1:04:4e:d0:a3:01:43:84:bb:76:0c:33: 4d:29:bd:eb:1f:a9:59:6a:38:75:5e:17:44:6f:7d:48:f3:c9: 80:bd:31:bb:42:c4:08:c9:7b:2a:64:8e:70:72:5a:62:18:e3: 76:23:af:33:f8:58:fb:a3:79:b5:06:96:7b:63:bb:79:55:2f: c6:16:d2:a3:d5:ae:51:3a:fd:cd:d3:4f:b0:46:18:ad:41:e3: 93:73:39:b6 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCdxjQPS0zj8aNqzXOO7yfeRk5vcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNTQxMzBaFw0yNTA0MDMxNTQ2MzBaMDMxMTAvBgNV BAMTKDRCNEIxMDAxOUZCQUExRkE0NzYzQjRCOEMzODVFOEYxM0NERUI4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDko2ECFjJ6PdpcsWEaCBEkgUrQ y0M5bvQJFql6BA3Y+ZYg1iHolhwXdRKhSOJjpbkkkSBeRhrnyMb7CKGRzyP+h/D1 iR8YZZGqKLxOZcCKcjAlECJL2SR2CYwl406X6Y04cda522FZOG4f/bvIZ3Y1bCjt RMPGBJuI3LSVH71ZwwGArL1PGkdyiVSKmtVeFZujXm//iIWMbI3DsMs0qe35oGJS BRmgElTcBGtmnHcGUp9uISSXM/saPr9meAjcMvW9KF08QYKzijstrkL9DkvaGaar OM9xE2MCpcWsgpCIBrEuGcbNvOZLr8dNXu29uuKpcMcY7XrYvxf0BSMQf4uLAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLSxABn7qh+kdj tLjDhejxPN64XDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjVt anNjOXB2ZG1tTldOVE5HQXllVzVHdG5ZWmZMeXI3THpUb2VwMm9LalEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y1 bWpzYzlwdmRtbU5XTlROR0F5ZVc1R3RuWVpmTHlyN0x6VG9lcDJvS2pRLzEvNEI0 QjEwMDE5RkJBQTFGQTQ3NjNCNEI4QzM4NUU4RjEzQ0RFQjg1Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaj4MA0EAgACMAcDBQAoBFfEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXNTANBgkqhkiG9w0BAQsFAAOCAQEADfBcX7rI5vs6GX17 crV1hi0nNoOpLPcIVfNlV6tlbI61ndqG4EjQP94wzLEwjfZ5J6Im27v8Fncton0f t6w9rqhOMux6R++LvAldNSbsDR6Xk59/1HR6RJxU1J4s/ObEtAG1SQsIujBShUtt +Hs6Z+IqF3hpRypyOwYM0rFFsCinwSUN2ByHs6OCMYbrIIQDRDdQ1UrNUUj5wGPU sNMNxu9jtUhMLTW04QRO0KMBQ4S7dgwzTSm96x+pWWo4dV4XRG99SPPJgL0xu0LE CMl7KmSOcHJaYhjjdiOvM/hY+6N5tQaWe2O7eVUvxhbSo9WuUTr9zdNPsEYYrUHj k3M5tg== -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:34 2024 by rpki-client on console-ams.rpki-client.org