$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer File: AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer (raw, json) Hash identifier: WXs3JJj30CXN0WxC7RYS+8yammD8uIgtzsKOzQGoj0A= Subject key identifier: AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 655E71F4C24965103E0EE9BE0D52A78E51D5B3F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft caRepository: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 14:29:12 +0000 Certificate not after: Thu 03 Apr 2025 14:34:12 +0000 Subordinate resources: AS: 263374 IP: 191.37.224.0/21 IP: 2804:1528::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5e:71:f4:c2:49:65:10:3e:0e:e9:be:0d:52:a7:8e:51:d5:b3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 14:29:12 2024 GMT Not After : Apr 3 14:34:12 2025 GMT Subject: CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ca:fb:81:54:2b:a8:b0:00:f6:3b:58:8e:f7: 41:5a:c9:a8:b3:dc:70:ba:1a:55:92:b1:52:be:8b: 58:7b:5d:23:4f:b5:22:2b:e0:c6:79:5f:21:c8:06: e2:80:e1:f3:b6:ff:03:1c:e1:aa:34:67:55:d1:9c: 18:0e:38:20:de:c6:e8:b6:bf:3c:02:e9:31:ee:7b: 32:25:21:f6:07:30:48:e5:2f:b5:8b:6e:79:a8:52: b3:e0:a2:d9:83:fb:c7:af:41:a7:83:e7:c7:6e:26: d8:72:61:96:ca:71:01:69:38:d1:ab:f3:ab:51:ed: 3d:33:25:6c:36:30:57:d9:e5:78:e0:5c:0e:1b:f2: 3b:62:47:87:71:1f:5c:56:ee:e2:5d:b5:68:90:a2: a7:67:bf:72:ff:9b:ee:ff:92:d6:55:39:cf:00:49: 50:20:25:a1:b5:38:1f:82:bc:9b:a4:54:d6:0a:40: 9d:5b:24:dc:34:8d:22:ab:f7:ad:9f:b4:55:7c:4c: f5:45:a7:6e:d0:a3:55:86:cd:68:04:57:3a:54:47: 40:56:da:c4:d9:d0:b9:91:35:aa:f2:f4:8d:f0:aa: 04:8d:e4:b4:5d:b6:c4:3f:7b:ac:ef:be:57:82:fb: f7:22:2c:ec:85:6e:61:7b:8b:f4:eb:a8:71:53:98: 54:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.37.224.0/21 IPv6: 2804:1528::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263374 Signature Algorithm: sha256WithRSAEncryption 11:34:c1:39:75:a7:c9:3a:16:5c:a5:55:7c:54:4f:f4:97:cd: cc:21:2d:86:85:68:81:7d:bb:af:08:20:9f:89:53:9c:61:17: 2a:2d:7a:7c:80:35:e1:29:c2:ab:af:53:40:db:12:6e:16:1e: 44:7c:62:81:3a:a5:58:05:c4:40:8b:d3:c3:48:bb:bf:2b:5c: e9:3e:5d:3c:7c:2b:35:fa:a7:f8:78:7e:e2:8c:a5:83:0e:58: e3:e5:07:b5:85:da:7d:23:de:64:c9:4c:8c:3d:2a:fa:16:f8: d5:b6:b2:b7:77:9a:f4:e8:5a:f2:4c:83:36:15:3b:ce:a9:b8: 74:a4:85:23:81:d9:b5:11:de:73:83:e7:d0:64:d1:41:0e:40: 3c:57:0d:30:d7:0d:b3:9e:b6:ad:c7:a8:5d:3b:4a:98:02:3c: cc:f6:3b:ea:50:41:6b:5e:fe:d9:ed:0b:d1:c5:14:81:e1:99: 1d:24:87:04:ee:eb:55:61:16:8d:1f:e9:46:c4:ce:54:f5:fe: e9:29:b2:31:77:ae:cb:32:f0:46:5f:5c:6d:fb:08:09:80:a7: 61:b9:f5:10:62:7c:f1:27:05:33:78:97:57:78:ad:6b:3d:bf: d5:3d:b1:0b:80:09:7f:bd:33:9a:9b:91:b3:4e:c2:d4:34:69: a3:60:14:74 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZV5x9MJJZRA+Dum+DVKnjlHVs/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNDI5MTJaFw0yNTA0MDMxNDM0MTJaMDMxMTAvBgNV BAMTKEFBMjlCQUU1NEYzOTg2ODYzOEM1MEExQkI5NUUyM0E3NzYzQzM4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZyvuBVCuosAD2O1iO90Fayaiz 3HC6GlWSsVK+i1h7XSNPtSIr4MZ5XyHIBuKA4fO2/wMc4ao0Z1XRnBgOOCDexui2 vzwC6THuezIlIfYHMEjlL7WLbnmoUrPgotmD+8evQaeD58duJthyYZbKcQFpONGr 86tR7T0zJWw2MFfZ5XjgXA4b8jtiR4dxH1xW7uJdtWiQoqdnv3L/m+7/ktZVOc8A SVAgJaG1OB+CvJukVNYKQJ1bJNw0jSKr962ftFV8TPVFp27Qo1WGzWgEVzpUR0BW 2sTZ0LmRNary9I3wqgSN5LRdtsQ/e6zvvleC+/ciLOyFbmF7i/TrqHFTmFRRAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqKbrlTzmGhjjF Chu5XiOndjw4pDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0FU ZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVMS1MvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dB VGVQQ0IyU1ZIcE12ZVJ0UnhQMlFSa3czV3Z1MXNYNHdvRzVCdnpFTEtTLzEvQUEy OUJBRTU0RjM5ODY4NjM4QzUwQTFCQjk1RTIzQTc3NjNDMzhBNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDvyXgMA0EAgACMAcDBQAoBBUoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQEzjANBgkqhkiG9w0BAQsFAAOCAQEAETTBOXWnyToWXKVV fFRP9JfNzCEthoVogX27rwggn4lTnGEXKi16fIA14SnCq69TQNsSbhYeRHxigTql WAXEQIvTw0i7vytc6T5dPHwrNfqn+Hh+4oylgw5Y4+UHtYXafSPeZMlMjD0q+hb4 1bayt3ea9Oha8kyDNhU7zqm4dKSFI4HZtRHec4Pn0GTRQQ5APFcNMNcNs562rceo XTtKmAI8zPY76lBBa17+2e0L0cUUgeGZHSSHBO7rVWEWjR/pRsTOVPX+6SmyMXeu yzLwRl9cbfsICYCnYbn1EGJ88ScFM3iXV3itaz2/1T2xC4AJf70zmpuRs07C1DRp o2AUdA== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:33 2024 by rpki-client on console-fra.rpki-client.org