$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer File: 645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer (raw, json) Hash identifier: /2pT3M5BkinpwD4W6Uat7rsd5ZJrMCa7EDrE3vmHQbQ= Subject key identifier: 64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 155D2A8C985CB5F047380893482F4102A29352EA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft caRepository: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 30 May 2024 23:17:38 +0000 Certificate not after: Thu 29 May 2025 23:22:38 +0000 Subordinate resources: AS: 28145 IP: 186.192.224.0/20 IP: 187.49.128.0/20 IP: 2804:d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 06:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5d:2a:8c:98:5c:b5:f0:47:38:08:93:48:2f:41:02:a2:93:52:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 30 23:17:38 2024 GMT Not After : May 29 23:22:38 2025 GMT Subject: CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:13:e8:7a:e2:2f:18:c1:a2:fa:0b:a1:dc: 44:91:bc:e9:20:e5:2b:3b:c7:25:9f:89:8c:72:76: 32:cc:dc:b6:28:6a:d9:b2:51:81:4c:49:47:15:41: 87:ce:70:7b:bc:70:f1:1c:54:0b:f7:78:79:ac:c0: 15:ae:c6:e9:72:99:8c:03:a5:26:be:de:04:b6:a0: 1a:95:67:cf:56:f5:10:92:bf:19:a6:d5:6f:29:fb: 94:42:e9:98:2b:47:df:2e:16:81:d3:e5:6a:e4:a7: 79:30:ab:67:7f:2e:d0:df:2d:cb:8a:81:90:21:16: 78:63:f6:56:f9:6b:ab:c1:bf:74:d1:3c:c8:8a:0e: 3e:c5:82:6c:32:3b:a1:6a:63:4e:ae:a1:a8:c4:bd: 02:41:36:8f:a1:5f:2e:c4:21:ef:5e:60:ca:6b:7f: 4d:0d:d8:bc:c5:7f:d7:49:52:a0:b0:d5:3f:12:1d: 01:55:15:02:60:2e:c3:1f:88:c7:59:e7:00:b5:3d: ef:af:31:c0:99:8a:35:bc:3f:19:9a:ce:51:5c:88: df:46:c1:fa:cb:d9:c4:a8:32:a2:1e:b9:02:60:4f: 35:ef:44:8a:df:46:2c:06:40:c3:30:60:6c:36:42: ba:b8:b6:0d:52:bc:e4:a1:f6:fa:55:d1:c3:04:66: 4d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.192.224.0/20 187.49.128.0/20 IPv6: 2804:d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28145 Signature Algorithm: sha256WithRSAEncryption 36:7a:93:81:6c:0c:68:82:cc:7c:ba:0a:7a:2b:d1:e9:8e:f1: 65:82:5f:28:72:c5:a4:ab:f3:bf:8a:24:f8:e7:25:4c:b7:74: 47:b2:69:ae:bf:f9:9c:c7:db:17:b1:9a:3e:45:f9:4c:60:ce: 6b:77:df:ee:b5:37:d6:2f:f7:34:e0:9d:60:4e:1e:d0:7e:92: 4c:2b:46:c4:78:1c:81:f7:a3:cd:bb:8e:17:11:09:a2:20:84: 63:ab:12:c2:a1:00:44:27:e4:cf:2b:de:8b:c9:1d:c5:5f:b2: 19:e6:7d:4f:34:43:bf:b5:31:33:68:74:f3:24:74:f7:24:09: 85:7f:ed:ab:86:3e:79:a9:19:9f:dd:d6:5b:ad:ec:fe:52:d3: f9:57:11:cc:f3:7e:19:1b:6d:ae:54:64:dc:5a:c5:2e:9a:a0: 89:7f:f6:64:c9:f2:46:df:02:f4:90:fd:9d:53:7e:f1:75:32: 6c:40:ab:64:74:81:e3:8e:e5:96:c3:86:c4:78:59:07:01:9f: 0c:1b:db:a6:d2:41:40:fd:27:32:d9:12:47:92:c2:ab:d2:2f: 8f:3a:e6:28:ac:49:98:3c:25:2c:5f:68:c4:26:84:36:2e:5e: 38:24:77:5d:04:27:2c:a4:02:7e:3a:43:15:cd:9d:7a:54:12: 2f:ea:78:ff -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUFV0qjJhctfBHOAiTSC9BAqKTUuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MzAyMzE3MzhaFw0yNTA1MjkyMzIyMzhaMDMxMTAvBgNV BAMTKDY0NUFDMEM5NDhBNUZGNjE4OUQ5RENGRUZBMTM4ODY4NTQ4NUJFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAxPoeuIvGMGi+guh3ESRvOkg 5Ss7xyWfiYxydjLM3LYoatmyUYFMSUcVQYfOcHu8cPEcVAv3eHmswBWuxulymYwD pSa+3gS2oBqVZ89W9RCSvxmm1W8p+5RC6ZgrR98uFoHT5Wrkp3kwq2d/LtDfLcuK gZAhFnhj9lb5a6vBv3TRPMiKDj7FgmwyO6FqY06uoajEvQJBNo+hXy7EIe9eYMpr f00N2LzFf9dJUqCw1T8SHQFVFQJgLsMfiMdZ5wC1Pe+vMcCZijW8PxmazlFciN9G wfrL2cSoMqIeuQJgTzXvRIrfRiwGQMMwYGw2Qrq4tg1SvOSh9vpV0cMEZk39AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkWsDJSKX/YYnZ 3P76E4hoVIW+sTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1dG aG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wxRVUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dX RmhtN2hNaWp1ejNEWmtRMlJ0NDVmbWVuQ1g0MjRiajluTlBaMndMMUVVLzAvNjQ1 QUMwQzk0OEE1RkY2MTg5RDlEQ0ZFRkExMzg4Njg1NDg1QkVCMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEusDgAwQEuzGAMA0EAgACMAcDBQAoBADQMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm3xMA0GCSqGSIb3DQEBCwUAA4IBAQA2epOBbAxo gsx8ugp6K9HpjvFlgl8ocsWkq/O/iiT45yVMt3RHsmmuv/mcx9sXsZo+RflMYM5r d9/utTfWL/c04J1gTh7QfpJMK0bEeByB96PNu44XEQmiIIRjqxLCoQBEJ+TPK96L yR3FX7IZ5n1PNEO/tTEzaHTzJHT3JAmFf+2rhj55qRmf3dZbrez+UtP5VxHM834Z G22uVGTcWsUumqCJf/ZkyfJG3wL0kP2dU37xdTJsQKtkdIHjjuWWw4bEeFkHAZ8M G9um0kFA/Scy2RJHksKr0i+POuYorEmYPCUsX2jEJoQ2Ll44JHddBCcspAJ+OkMV zZ16VBIv6nj/ -----END CERTIFICATE-----Generated at Mon Jul 1 07:15:39 2024 by rpki-client on console-ams.rpki-client.org