$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer File: 663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer (raw, json) Hash identifier: 79sCkezBfg0aoMhbbEuYkoMTaJSv7q0lfQYtY8ewf0c= Subject key identifier: 66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5EA001A0D40D047B870F35E1EF2AA8BE234B9608 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.mft caRepository: rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 09:27:12 +0000 Certificate not after: Thu 03 Apr 2025 09:32:12 +0000 Subordinate resources: AS: 264972 IP: 170.0.128.0/22 IP: 170.247.180.0/22 IP: 2804:30c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a0:01:a0:d4:0d:04:7b:87:0f:35:e1:ef:2a:a8:be:23:4b:96:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 09:27:12 2024 GMT Not After : Apr 3 09:32:12 2025 GMT Subject: CN=663644AD50CB8341863619DDB9543F4B9E6AAA1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:6d:98:96:15:9d:fd:a5:92:7e:3a:45:e6: 5b:39:81:83:70:5a:e7:68:39:37:a6:52:cb:70:cb: 56:96:31:f4:3a:bf:6a:d9:10:40:6d:bd:af:2c:24: 62:08:20:cd:1f:f9:43:1f:b9:09:16:5b:8b:b0:6f: 7f:36:04:16:93:53:d2:3d:e9:45:14:58:5a:25:63: 68:07:b1:38:42:7f:58:62:6e:3b:75:e1:03:34:fe: 55:31:6b:0f:d3:96:2b:11:73:09:33:2c:1a:9f:6e: 5c:cd:32:1b:d4:a7:5a:e9:c1:23:4a:81:e3:ca:34: 39:95:c2:57:d2:78:96:27:23:71:ca:a9:16:f5:dc: fc:e6:31:62:7e:a1:26:d8:0e:3e:15:e3:35:81:15: cd:d9:9b:88:95:f9:a9:aa:b6:26:43:bd:84:8d:82: 66:03:cf:71:16:6c:a0:6d:10:2e:21:27:25:a1:7f: ee:fe:f6:a2:d1:1f:b0:57:27:c0:f2:0d:d4:a1:f9: 60:59:89:6f:47:0b:1a:16:51:6f:21:35:79:79:0f: 3e:b5:dc:f1:96:06:fc:92:c6:5b:9e:aa:6f:14:5f: 61:f6:e7:32:c0:ad:b6:a2:b9:fb:fa:8a:24:d0:08: a0:81:d8:06:37:8e:cd:07:39:8e:95:68:f2:d8:e8: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.0.128.0/22 170.247.180.0/22 IPv6: 2804:30c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264972 Signature Algorithm: sha256WithRSAEncryption 43:a9:31:6d:11:a3:47:83:1b:26:07:54:1c:b0:c3:1b:df:72: 7f:13:66:b9:cd:8f:1d:2f:25:a1:94:e0:5f:a4:04:90:53:4d: 86:48:57:e9:cf:45:7f:18:bb:3c:b4:5b:8c:c9:d1:cb:7d:c0: 9d:f1:09:f3:f6:39:88:2f:eb:09:06:c2:7c:89:74:8c:3f:90: 1a:6d:87:7d:2d:1a:bb:d2:11:b9:fa:e5:fc:35:08:63:a8:bb: 84:ab:af:6f:87:f6:f8:0e:59:07:18:fd:ed:c9:6f:a5:e1:ca: e9:29:f1:05:22:22:18:db:52:97:3e:86:42:5b:ce:3f:1e:92: 4f:b5:cf:04:df:9b:73:7e:b3:af:9a:64:8f:22:35:4c:f0:fc: 73:3a:5d:a6:c3:54:fb:d0:e5:35:08:6c:c2:fe:86:b8:f2:51: ed:95:96:a8:b9:97:0f:87:10:80:a2:11:11:f8:00:58:f1:68: 1d:d1:64:5b:fe:1a:6e:82:57:8f:4b:2d:66:25:4d:40:6a:35: f7:a5:22:28:04:0b:8c:09:02:87:94:4d:d3:31:ef:5b:59:5a: 9b:45:d6:f2:93:2d:73:11:ef:8b:6e:b3:e0:00:7b:ec:65:70: 66:0c:95:c4:bc:b5:ea:7a:e8:d5:c9:99:6c:1b:23:43:00:be: ee:ea:cc:91 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXqABoNQNBHuHDzXh7yqoviNLlggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwOTI3MTJaFw0yNTA0MDMwOTMyMTJaMDMxMTAvBgNV BAMTKDY2MzY0NEFENTBDQjgzNDE4NjM2MTlEREI5NTQzRjRCOUU2QUFBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrKG2YlhWd/aWSfjpF5ls5gYNw WudoOTemUstwy1aWMfQ6v2rZEEBtva8sJGIIIM0f+UMfuQkWW4uwb382BBaTU9I9 6UUUWFolY2gHsThCf1hibjt14QM0/lUxaw/TlisRcwkzLBqfblzNMhvUp1rpwSNK gePKNDmVwlfSeJYnI3HKqRb13PzmMWJ+oSbYDj4V4zWBFc3Zm4iV+amqtiZDvYSN gmYDz3EWbKBtEC4hJyWhf+7+9qLRH7BXJ8DyDdSh+WBZiW9HCxoWUW8hNXl5Dz61 3PGWBvySxlueqm8UX2H25zLArbaiufv6iiTQCKCB2AY3js0HOY6VaPLY6LApAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmNkStUMuDQYY2 Gd25VD9LnmqqHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlYy OWpZZnJZM0hpYTFhVWtvUUVmNWhacGNlTEhDN1J0SnpmMm9VZjlxZTIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JW MjlqWWZyWTNIaWExYVVrb1FFZjVoWnBjZUxIQzdSdEp6ZjJvVWY5cWUyLzEvNjYz NjQ0QUQ1MENCODM0MTg2MzYxOUREQjk1NDNGNEI5RTZBQUExQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqgCAAwQCqve0MA0EAgACMAcDBQAoBDDAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQLDDANBgkqhkiG9w0BAQsFAAOCAQEAQ6kxbRGj R4MbJgdUHLDDG99yfxNmuc2PHS8loZTgX6QEkFNNhkhX6c9Ffxi7PLRbjMnRy33A nfEJ8/Y5iC/rCQbCfIl0jD+QGm2HfS0au9IRufrl/DUIY6i7hKuvb4f2+A5ZBxj9 7clvpeHK6SnxBSIiGNtSlz6GQlvOPx6ST7XPBN+bc36zr5pkjyI1TPD8czpdpsNU +9DlNQhswv6GuPJR7ZWWqLmXD4cQgKIREfgAWPFoHdFkW/4aboJXj0stZiVNQGo1 96UiKAQLjAkCh5RN0zHvW1lam0XW8pMtcxHvi26z4AB77GVwZgyVxLy16nro1cmZ bBsjQwC+7urMkQ== -----END CERTIFICATE-----Generated at Sun Jun 2 00:29:13 2024 by rpki-client on console-ams.rpki-client.org