$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer File: 8FD43329E3986016373336F4DC71535DDDDAA338.cer (raw, json) Hash identifier: h17kpGoOETojoALIPKQ15TTR80ZS6cj9H8/AsqiLE2o= Subject key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 211854F54EB64FA861F542A958458E0C7EEECD85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.mft caRepository: rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 20:38:50 +0000 Certificate not after: Wed 02 Apr 2025 20:43:50 +0000 Subordinate resources: AS: 268858 IP: 45.174.160.0/22 IP: 2804:5b9c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 12:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:18:54:f5:4e:b6:4f:a8:61:f5:42:a9:58:45:8e:0c:7e:ee:cd:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 20:38:50 2024 GMT Not After : Apr 2 20:43:50 2025 GMT Subject: CN=8FD43329E3986016373336F4DC71535DDDDAA338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:fb:3e:f6:d3:40:39:1b:d7:dc:82:7a:60: 25:bf:c9:b0:77:20:31:02:d8:7d:2b:4a:1a:14:dc: 64:cb:c0:ec:d6:c0:34:c2:10:28:7d:b3:55:9b:2f: bc:cb:f8:8e:86:ad:7b:c7:dd:5d:d1:30:27:00:0b: ea:85:1e:41:17:ae:90:7c:49:2e:85:98:2b:9e:e9: 7e:df:26:0e:c8:d8:78:72:bc:ff:f1:66:50:34:9a: 2d:22:5f:de:e3:66:f6:97:48:2f:90:5c:3b:e3:a6: 59:d1:bb:3f:02:26:58:f3:b3:54:32:43:54:14:a0: d2:db:9d:6a:8a:4c:70:a9:b0:47:0f:da:0e:a3:bb: bf:12:5e:28:d1:93:4e:a9:b6:2a:b8:74:86:e3:71: 3f:ab:c7:37:d3:eb:a0:1e:6a:b4:0b:b6:35:40:b7: 52:f2:3a:ab:6c:03:b8:ba:0e:91:c8:d8:5d:0f:ce: 47:3e:a0:89:b0:b6:47:d2:ff:e5:0a:f0:7d:1c:98: 8f:cc:26:53:ad:20:d3:c6:e4:11:13:92:b6:24:55: 84:30:22:43:77:89:44:9e:b9:7f:97:c7:b8:c9:ab: 01:fd:9a:3f:3b:1b:18:79:9f:d2:3e:fd:dc:21:14: de:b0:05:86:92:36:79:86:12:02:58:e3:f8:f5:fb: b8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.160.0/22 IPv6: 2804:5b9c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268858 Signature Algorithm: sha256WithRSAEncryption 9a:2d:54:4a:32:41:d2:f5:86:ff:77:62:80:00:84:d3:3f:54: fd:cc:88:d1:bd:4d:0c:4f:3c:f8:5b:d9:97:39:c5:e8:1a:19: 05:cb:12:00:6f:89:35:2f:57:01:29:1a:51:96:a5:8e:b9:a4: a8:c5:8e:7a:88:e3:51:cc:ce:80:b8:4a:67:73:07:dd:09:d5: 5f:f8:7b:7f:2d:70:13:0e:5c:95:7d:09:44:e2:78:86:0d:55: 9f:56:a5:1a:a2:a2:f6:c7:f3:9e:e7:89:2e:72:79:e7:38:fe: 25:f9:b6:08:39:10:92:a4:90:b0:51:3d:f4:25:9b:df:0d:a8: 57:95:33:5e:23:fd:a9:6e:fb:08:54:a0:3e:36:5e:07:5d:f9: 33:60:bc:58:5c:93:3f:b8:5d:a3:dd:de:05:02:f6:69:14:df: 6e:a5:b0:8d:fd:d9:98:6a:d8:58:67:bc:b3:9c:71:f5:44:2c: d2:94:4b:63:1d:1b:49:b7:d0:65:df:d5:85:0a:4d:05:bb:12: 99:79:c8:3e:39:88:c0:7c:4d:9a:fe:5f:0a:d8:d9:36:b4:14: 4e:bd:a5:9d:9f:d2:93:c5:ae:b3:3c:69:8c:6c:84:86:ac:9c: 27:93:77:d9:b8:09:a4:aa:54:a8:c1:d2:7f:9e:d4:42:0e:36: 3c:bd:41:a1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIRhU9U62T6hh9UKpWEWODH7uzYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMDM4NTBaFw0yNTA0MDIyMDQzNTBaMDMxMTAvBgNV BAMTKDhGRDQzMzI5RTM5ODYwMTYzNzMzMzZGNERDNzE1MzVEREREQUEzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgDfs+9tNAORvX3IJ6YCW/ybB3 IDEC2H0rShoU3GTLwOzWwDTCECh9s1WbL7zL+I6GrXvH3V3RMCcAC+qFHkEXrpB8 SS6FmCue6X7fJg7I2HhyvP/xZlA0mi0iX97jZvaXSC+QXDvjplnRuz8CJljzs1Qy Q1QUoNLbnWqKTHCpsEcP2g6ju78SXijRk06ptiq4dIbjcT+rxzfT66AearQLtjVA t1LyOqtsA7i6DpHI2F0Pzkc+oImwtkfS/+UK8H0cmI/MJlOtINPG5BETkrYkVYQw IkN3iUSeuX+Xx7jJqwH9mj87Gxh5n9I+/dwhFN6wBYaSNnmGEgJY4/j1+7iXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSP1DMp45hgFjcz NvTccVNd3dqjODAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2Nt M2liQXRCZG5rdDFZRGs5d3p5NmRCNllVYXpmOFJLU2dVTFVQekdhQnkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dj bTNpYkF0QmRua3QxWURrOXd6eTZkQjZZVWF6ZjhSS1NnVUxVUHpHYUJ5LzEvOEZE NDMzMjlFMzk4NjAxNjM3MzMzNkY0REM3MTUzNURERERBQTMzOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa6gMA0EAgACMAcDBQAoBFucMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaOjANBgkqhkiG9w0BAQsFAAOCAQEAmi1USjJB0vWG/3di gACE0z9U/cyI0b1NDE88+FvZlznF6BoZBcsSAG+JNS9XASkaUZaljrmkqMWOeojj UczOgLhKZ3MH3QnVX/h7fy1wEw5clX0JROJ4hg1Vn1alGqKi9sfznueJLnJ55zj+ Jfm2CDkQkqSQsFE99CWb3w2oV5UzXiP9qW77CFSgPjZeB135M2C8WFyTP7hdo93e BQL2aRTfbqWwjf3ZmGrYWGe8s5xx9UQs0pRLYx0bSbfQZd/VhQpNBbsSmXnIPjmI wHxNmv5fCtjZNrQUTr2lnZ/Sk8WuszxpjGyEhqycJ5N32bgJpKpUqMHSf57UQg42 PL1BoQ== -----END CERTIFICATE-----Generated at Mon Jul 1 10:26:56 2024 by rpki-client on console-ams.rpki-client.org