$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6D2338E623D37A5D1B272DFD5C50D3DB9AA6AF0B.cer File: 6D2338E623D37A5D1B272DFD5C50D3DB9AA6AF0B.cer (raw, json) Hash identifier: 1RSRnFEZazpgrVaqhzur4XQBuTbgPk6zh3YzCByA7fg= Subject key identifier: 6D:23:38:E6:23:D3:7A:5D:1B:27:2D:FD:5C:50:D3:DB:9A:A6:AF:0B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4AA29D1A05C236FBE7856A3F6F2024CBD927858B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/1/6D2338E623D37A5D1B272DFD5C50D3DB9AA6AF0B.mft caRepository: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:17 +0000 Certificate not after: Wed 02 Apr 2025 18:31:17 +0000 Subordinate resources: AS: 264517 IP: 132.255.172.0/22 IP: 138.117.164.0/22 IP: 2804:20dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a2:9d:1a:05:c2:36:fb:e7:85:6a:3f:6f:20:24:cb:d9:27:85:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:17 2024 GMT Not After : Apr 2 18:31:17 2025 GMT Subject: CN=6D2338E623D37A5D1B272DFD5C50D3DB9AA6AF0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:6a:60:a2:dc:cf:99:61:f1:8b:8d:b4:8f: 9e:72:79:44:d1:f0:3a:20:71:f6:04:c1:1e:9d:ad: 22:e9:f2:be:40:79:46:aa:a5:c2:2b:7a:f2:0f:ed: 36:38:ad:8d:a2:32:d4:ba:39:b6:1e:0d:2b:27:a3: 42:e0:42:23:7f:fb:ad:de:1a:71:b9:dd:e4:7a:72: 2b:15:9a:e6:25:3a:6b:14:53:2e:b8:57:ae:0a:20: 64:a5:24:32:5a:bc:b2:93:5a:dc:a9:af:1e:ee:05: 6c:b9:a8:30:a4:c4:a0:2c:6d:3c:a3:86:c6:bf:d1: 5e:61:4e:e3:ed:22:d4:01:90:e4:5c:c5:fb:eb:a5: 5a:1c:e8:43:90:88:ca:0b:35:4e:bc:04:f5:f7:e4: 3e:e2:ff:80:94:a4:06:af:2a:fd:da:f3:30:ef:b5: dc:6e:8b:c2:e8:5b:08:7b:e0:55:24:f2:46:af:0c: 34:54:ba:9d:bf:70:bf:2e:2c:d7:08:15:18:6a:be: 37:65:2c:28:47:c8:e9:31:5f:58:c1:76:00:17:e1: 06:f6:c0:47:c8:b6:4a:6c:37:bb:7c:7b:7c:ba:4c: be:fd:8a:12:55:af:5b:d9:96:7a:51:2d:6f:9a:51: c8:a0:34:89:2a:23:8c:94:aa:0e:93:f9:77:e0:ca: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:23:38:E6:23:D3:7A:5D:1B:27:2D:FD:5C:50:D3:DB:9A:A6:AF:0B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/1/6D2338E623D37A5D1B272DFD5C50D3DB9AA6AF0B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.172.0/22 138.117.164.0/22 IPv6: 2804:20dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264517 Signature Algorithm: sha256WithRSAEncryption 5f:c5:5b:87:73:21:fa:5b:ac:01:ad:00:7f:9d:4b:86:1e:8d: 0c:63:d2:18:4a:b8:84:10:5a:ab:30:92:03:43:82:82:3d:99: 27:f9:34:4b:17:3c:43:88:17:c0:b8:53:f8:9c:1c:78:ca:48: 68:5e:66:4b:59:6f:c1:b0:2f:40:1b:b2:1c:82:08:a5:e1:f1: d9:2c:de:81:14:1b:8e:b1:0c:3c:a9:8d:e7:ab:64:e2:f1:36: 87:67:71:fe:bc:7b:3e:a5:00:32:19:be:ff:13:c3:74:54:79: b6:73:a0:3b:29:f8:80:58:e4:c6:6b:bb:e5:e0:7d:f1:71:10: fc:e4:5a:fb:28:96:69:e8:f1:da:a4:26:ee:18:67:b9:1d:88: 2c:69:6a:19:99:b5:14:08:c5:07:9f:28:a0:9d:6a:1f:9a:31: 5b:06:3a:b9:e6:6a:f0:dd:33:54:8c:e1:75:8f:12:28:17:6e: d8:e3:99:ac:41:1a:40:5a:0c:96:8a:e8:a9:87:ce:14:8b:27: 51:91:1d:88:c1:ad:33:3c:f6:5d:53:3a:d3:91:a0:db:97:05: d8:cb:8c:05:8f:de:75:ff:ec:39:95:08:e3:1e:f9:06:74:21: 62:a4:38:f9:c3:21:14:61:c3:89:c3:75:3c:38:d6:ca:15:14: dd:21:53:6d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUSqKdGgXCNvvnhWo/byAky9knhYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2MTdaFw0yNTA0MDIxODMxMTdaMDMxMTAvBgNV BAMTKDZEMjMzOEU2MjNEMzdBNUQxQjI3MkRGRDVDNTBEM0RCOUFBNkFGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDWpgotzPmWHxi420j55yeUTR 8DogcfYEwR6drSLp8r5AeUaqpcIrevIP7TY4rY2iMtS6ObYeDSsno0LgQiN/+63e GnG53eR6cisVmuYlOmsUUy64V64KIGSlJDJavLKTWtyprx7uBWy5qDCkxKAsbTyj hsa/0V5hTuPtItQBkORcxfvrpVoc6EOQiMoLNU68BPX35D7i/4CUpAavKv3a8zDv tdxui8LoWwh74FUk8kavDDRUup2/cL8uLNcIFRhqvjdlLChHyOkxX1jBdgAX4Qb2 wEfItkpsN7t8e3y6TL79ihJVr1vZlnpRLW+aUcigNIkqI4yUqg6T+Xfgyn0/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRtIzjmI9N6XRsn Lf1cUNPbmqavCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEdu d1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhlUkwvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRH bndYMm1BZ3RZWTNZb3JhZHNGbW9TVlg0bmpmem81ZFRxaG84bWc4ZVJMLzEvNkQy MzM4RTYyM0QzN0E1RDFCMjcyREZENUM1MEQzREI5QUE2QUYwQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQChP+sAwQCinWkMA0EAgACMAcDBQAoBCDcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJRTANBgkqhkiG9w0BAQsFAAOCAQEAX8Vbh3Mh +lusAa0Af51Lhh6NDGPSGEq4hBBaqzCSA0OCgj2ZJ/k0Sxc8Q4gXwLhT+JwceMpI aF5mS1lvwbAvQBuyHIIIpeHx2SzegRQbjrEMPKmN56tk4vE2h2dx/rx7PqUAMhm+ /xPDdFR5tnOgOyn4gFjkxmu75eB98XEQ/ORa+yiWaejx2qQm7hhnuR2ILGlqGZm1 FAjFB58ooJ1qH5oxWwY6ueZq8N0zVIzhdY8SKBdu2OOZrEEaQFoMloroqYfOFIsn UZEdiMGtMzz2XVM605Gg25cF2MuMBY/edf/sOZUI4x75BnQhYqQ4+cMhFGHDicN1 PDjWyhUU3SFTbQ== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:30 2024 by rpki-client on console-fra.rpki-client.org