$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer File: 4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer (raw, json) Hash identifier: cz3DVVuDMjx3epYSUaQhTTJ7kewqseMwLf4PIcmkxNo= Subject key identifier: 4C:94:A4:2C:CC:F2:81:C6:12:C2:A0:02:CC:0D:EB:45:70:D4:6E:DC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3705E0F5B826A358771340A20D9FA2A348E54188 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.mft caRepository: rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 03:08:02 +0000 Certificate not after: Thu 03 Apr 2025 03:13:02 +0000 Subordinate resources: AS: 265111 AS: 273353 IP: 170.254.192.0/22 IP: 2804:3304::/32 IP: 2804:8d60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:05:e0:f5:b8:26:a3:58:77:13:40:a2:0d:9f:a2:a3:48:e5:41:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 03:08:02 2024 GMT Not After : Apr 3 03:13:02 2025 GMT Subject: CN=4C94A42CCCF281C612C2A002CC0DEB4570D46EDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:9b:0f:4d:c8:2b:cb:c9:57:10:07:1b:ab: d7:9e:78:61:d0:d0:d7:b8:28:f9:c4:d6:1b:7d:cd: ab:0c:cc:74:9b:61:44:04:97:54:13:57:55:d0:53: f2:04:4a:9e:fd:8e:d0:41:a5:e7:80:80:37:e1:74: 87:6f:18:b9:22:9b:b1:60:ae:10:5e:ca:c6:a8:56: 00:24:df:a1:bb:0d:f6:ed:64:87:f5:2c:d9:d3:46: 01:a0:f2:24:96:67:d7:b5:68:bd:54:b5:d3:e9:fd: bb:f8:2d:f0:14:51:40:82:b3:e1:3f:81:f3:9f:0b: 35:ec:a2:3a:0e:74:dc:fc:19:ae:93:b1:f5:5a:45: 1e:be:b8:cc:98:75:e8:2a:06:4e:1c:a6:0b:5c:91: 9a:c1:e8:d0:11:52:f2:d0:7a:f1:c4:3a:64:8a:b8: 5a:d3:4b:ab:56:a5:ba:1b:0c:44:ac:44:43:be:e6: dd:4e:70:cd:f7:30:dc:8e:9a:fd:56:3a:81:89:7c: 92:62:56:55:b7:6e:ca:39:95:13:46:06:91:1a:1a: db:b5:7b:e2:25:3e:fd:4c:05:ea:c0:86:f3:a6:15: 77:65:47:80:82:cf:00:32:4c:5a:36:0e:38:2e:90: c8:5d:09:ca:4a:5f:18:16:70:12:de:a5:9b:d9:f2: 94:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:94:A4:2C:CC:F2:81:C6:12:C2:A0:02:CC:0D:EB:45:70:D4:6E:DC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.192.0/22 IPv6: 2804:3304::/32 2804:8d60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265111 273353 Signature Algorithm: sha256WithRSAEncryption 60:60:6a:57:93:03:04:16:2c:e2:83:9e:ad:03:ec:20:51:87: 5b:fa:d8:0e:f8:a3:58:c1:2c:f1:ea:a3:b7:e5:e3:b5:7d:32: 7d:30:11:f9:86:5c:80:0c:83:04:0a:67:2a:cf:13:dd:a3:12: 4c:33:18:3b:2d:1b:68:f8:6a:43:aa:68:c8:e5:bd:a1:74:63: f5:23:1d:d4:31:7e:7c:20:4a:00:96:2d:40:ea:21:a1:84:96: 5f:68:7a:7c:70:b7:0f:08:99:88:fc:c6:39:f0:1d:2d:ae:f8: ad:cb:9b:0b:f9:09:02:53:1b:5f:dd:bb:37:ff:2e:56:f4:f4: 0b:d2:df:a4:4c:c4:0d:3d:01:3e:a0:a8:0e:10:33:5b:82:d1: bb:6f:b6:58:2b:30:7f:ed:8d:f5:d6:0c:85:75:d7:d8:b7:c0: 18:60:b9:d9:1a:26:17:57:3b:76:79:c8:70:9b:00:9d:11:14: 62:dc:ff:a8:6f:e7:9e:f8:53:d0:7e:02:d4:79:51:2e:ce:42: 14:ef:2f:54:c6:9e:7a:0b:b3:0c:d7:a9:5c:f4:94:f5:55:b1: 42:98:ff:ad:cc:27:b4:54:40:fb:04:32:b3:c8:92:d6:93:4d: 65:a6:72:a9:db:07:d6:57:80:f9:9b:18:12:b5:46:d3:59:28: 1b:20:36:6e -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUNwXg9bgmo1h3E0CiDZ+io0jlQYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMzA4MDJaFw0yNTA0MDMwMzEzMDJaMDMxMTAvBgNV BAMTKDRDOTRBNDJDQ0NGMjgxQzYxMkMyQTAwMkNDMERFQjQ1NzBENDZFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AJsPTcgry8lXEAcbq9eeeGHQ 0Ne4KPnE1ht9zasMzHSbYUQEl1QTV1XQU/IESp79jtBBpeeAgDfhdIdvGLkim7Fg rhBeysaoVgAk36G7DfbtZIf1LNnTRgGg8iSWZ9e1aL1UtdPp/bv4LfAUUUCCs+E/ gfOfCzXsojoOdNz8Ga6TsfVaRR6+uMyYdegqBk4cpgtckZrB6NARUvLQevHEOmSK uFrTS6tWpbobDESsREO+5t1OcM33MNyOmv1WOoGJfJJiVlW3bso5lRNGBpEaGtu1 e+IlPv1MBerAhvOmFXdlR4CCzwAyTFo2DjgukMhdCcpKXxgWcBLepZvZ8pTRAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMlKQszPKBxhLC oALMDetFcNRu3DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0V4 S2N5ek5SRnN3azdxN0cxc3RwTDZMQ21LRDlyUlc1eUtlR29nSDZyMjYvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dF eEtjeXpOUkZzd2s3cTdHMXN0cEw2TENtS0Q5clJXNXlLZUdvZ0g2cjI2LzEvNEM5 NEE0MkNDQ0YyODFDNjEyQzJBMDAyQ0MwREVCNDU3MEQ0NkVEQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEH AQH/BCYwJDAMBAIAATAGAwQCqv7AMBQEAgACMA4DBQAoBDMEAwUAKASNYDAfBggr BgEFBQcBCAEB/wQQMA6gDDAKAgMEC5cCAwQryTANBgkqhkiG9w0BAQsFAAOCAQEA YGBqV5MDBBYs4oOerQPsIFGHW/rYDvijWMEs8eqjt+XjtX0yfTAR+YZcgAyDBApn Ks8T3aMSTDMYOy0baPhqQ6poyOW9oXRj9SMd1DF+fCBKAJYtQOohoYSWX2h6fHC3 DwiZiPzGOfAdLa74rcubC/kJAlMbX927N/8uVvT0C9LfpEzEDT0BPqCoDhAzW4LR u2+2WCswf+2N9dYMhXXX2LfAGGC52RomF1c7dnnIcJsAnREUYtz/qG/nnvhT0H4C 1HlRLs5CFO8vVMaeeguzDNepXPSU9VWxQpj/rcwntFRA+wQys8iS1pNNZaZyqdsH 1leA+ZsYErVG01koGyA2bg== -----END CERTIFICATE-----Generated at Sat Jun 1 23:01:00 2024 by rpki-client on console-ams.rpki-client.org