$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer File: A99D272225729B303C95F28914878741C6AE29BE.cer (raw, json) Hash identifier: 2zAA/Al10uydRqrlSBKlWhsviENNjygeNTULVytnzI4= Subject key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5D051D94BC5D14927C09B6DF4CB2678BB7313DFC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft caRepository: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 24 Apr 2024 14:32:10 +0000 Certificate not after: Wed 23 Apr 2025 14:37:10 +0000 Subordinate resources: AS: 28204 IP: 189.91.48.0/20 IP: 2804:414c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:05:1d:94:bc:5d:14:92:7c:09:b6:df:4c:b2:67:8b:b7:31:3d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 24 14:32:10 2024 GMT Not After : Apr 23 14:37:10 2025 GMT Subject: CN=A99D272225729B303C95F28914878741C6AE29BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:07:07:22:86:9c:0e:04:b1:4f:ad:bb:1d: 57:6a:2e:8a:3a:1b:f8:e4:85:31:91:f7:7a:0e:37: 87:a5:c1:51:a4:20:09:d4:11:c9:b9:c1:e8:c7:b4: fe:80:1f:13:b2:d7:cd:ff:7c:82:9d:3e:9e:a3:e2: 9b:f9:6c:e1:ad:74:1b:27:6e:52:49:65:76:de:4b: 29:ba:0e:88:9a:6a:2e:7a:59:3f:56:89:90:a5:2a: 61:4a:62:06:ec:ad:a9:01:e5:97:70:ad:fc:b3:66: ac:a4:bc:d1:bc:38:79:29:b4:7b:eb:9a:9e:2e:bb: 50:8c:b0:c1:f4:6c:37:0a:bd:72:ba:82:59:b1:35: 13:ee:0b:b3:16:41:c3:3d:4c:d2:cb:66:c7:ec:99: 95:aa:a8:0e:16:5e:06:e4:c4:fb:10:f5:da:16:d0: 0b:6f:cd:b1:a4:0b:27:c9:f0:a8:1e:2a:82:2a:c8: 11:0d:03:c3:59:bd:c5:10:9d:18:2f:71:59:ba:4a: a6:9a:92:30:3b:0b:58:b2:4b:6b:73:5c:a0:94:76: cf:23:45:bb:db:05:5d:4b:b7:cb:f4:1a:77:98:c0: d9:2b:28:33:9e:73:4c:78:87:a6:3a:4e:dd:57:f5: 12:54:f5:25:1c:e4:d5:1d:b6:04:82:4f:2b:29:c5: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.91.48.0/20 IPv6: 2804:414c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28204 Signature Algorithm: sha256WithRSAEncryption 29:d6:39:6a:b3:6f:7c:2e:1c:67:8f:1a:8a:bc:23:2a:96:54: 46:17:48:a3:eb:50:1e:a1:df:c8:c3:b7:f2:7a:f9:ff:82:0b: 6d:a0:36:60:e2:0f:5e:d9:40:19:c7:52:a5:bf:e9:5e:18:a1: c3:48:bc:c3:5d:f0:3f:8a:da:bc:7c:a5:9e:3d:8f:c7:cf:0f: 01:a3:be:c5:8c:b5:96:d8:12:8d:da:58:67:8f:b5:70:0b:08: 9d:17:e8:5f:ee:08:18:65:42:63:ce:d6:38:f9:d2:60:4e:ba: 6c:cf:2b:f9:6c:c6:0a:52:fa:9c:f5:51:b5:66:29:28:af:44: 21:55:53:4f:64:04:5b:00:3f:0e:ec:c4:4b:2e:8e:c9:4c:5f: 4a:d2:6c:bc:9f:65:de:0e:dc:8b:2c:05:1c:c9:21:bb:3e:74: d7:bc:f0:cd:4c:60:12:e4:22:99:6a:b6:c6:58:00:47:78:67: 6b:a6:71:24:ad:9d:61:3c:d7:07:53:ba:f9:92:13:ad:88:2c: d2:01:55:e6:21:ff:22:b7:e9:7f:96:5d:86:6f:03:c6:61:bd: 0d:e4:f1:56:f8:b6:74:48:22:81:8a:d8:89:70:48:32:b8:25: d3:46:23:72:e0:5c:0e:5c:be:32:e1:ec:98:f6:fc:62:e1:ae: 92:ce:ba:74 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUXQUdlLxdFJJ8CbbfTLJni7cxPfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjQxNDMyMTBaFw0yNTA0MjMxNDM3MTBaMDMxMTAvBgNV BAMTKEE5OUQyNzIyMjU3MjlCMzAzQzk1RjI4OTE0ODc4NzQxQzZBRTI5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85QcHIoacDgSxT627HVdqLoo6 G/jkhTGR93oON4elwVGkIAnUEcm5wejHtP6AHxOy183/fIKdPp6j4pv5bOGtdBsn blJJZXbeSym6Doiaai56WT9WiZClKmFKYgbsrakB5ZdwrfyzZqykvNG8OHkptHvr mp4uu1CMsMH0bDcKvXK6glmxNRPuC7MWQcM9TNLLZsfsmZWqqA4WXgbkxPsQ9doW 0AtvzbGkCyfJ8KgeKoIqyBENA8NZvcUQnRgvcVm6SqaakjA7C1iyS2tzXKCUds8j RbvbBV1Lt8v0GneYwNkrKDOec0x4h6Y6Tt1X9RJU9SUc5NUdtgSCTyspxXWTAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpnSciJXKbMDyV 8okUh4dBxq4pvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnRD a2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBNRmgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ0 Q2tod3lUTkh3TEIxWUxuaU1mTU44dFJhazZUUUxZM2t0NkpwV0RQTUZoLzAvQTk5 RDI3MjIyNTcyOUIzMDNDOTVGMjg5MTQ4Nzg3NDFDNkFFMjlCRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEvVswMA0EAgACMAcDBQAoBEFMMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm4sMA0GCSqGSIb3DQEBCwUAA4IBAQAp1jlqs298LhxnjxqK vCMqllRGF0ij61Aeod/Iw7fyevn/ggttoDZg4g9e2UAZx1Klv+leGKHDSLzDXfA/ itq8fKWePY/Hzw8Bo77FjLWW2BKN2lhnj7VwCwidF+hf7ggYZUJjztY4+dJgTrps zyv5bMYKUvqc9VG1Zikor0QhVVNPZARbAD8O7MRLLo7JTF9K0my8n2XeDtyLLAUc ySG7PnTXvPDNTGAS5CKZarbGWABHeGdrpnEkrZ1hPNcHU7r5khOtiCzSAVXmIf8i t+l/ll2GbwPGYb0N5PFW+LZ0SCKBitiJcEgyuCXTRiNy4FwOXL4y4eyY9vxi4a6S zrp0 -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:42 2024 by rpki-client on console-ams.rpki-client.org