$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer File: AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer (raw, json) Hash identifier: GILN8E46lkUkKlqaXa/sCJiluC/Nt5NfYz9pkNmUsaM= Subject key identifier: AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4285DC2119BD9D2952F0B1335740BC2A98BF3A34 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft caRepository: rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 06:25:14 +0000 Certificate not after: Thu 03 Apr 2025 06:30:14 +0000 Subordinate resources: AS: 267517 IP: 201.182.120.0/22 IP: 2804:42a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 02:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:85:dc:21:19:bd:9d:29:52:f0:b1:33:57:40:bc:2a:98:bf:3a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 06:25:14 2024 GMT Not After : Apr 3 06:30:14 2025 GMT Subject: CN=AAF5B81D61057C224A29F86F6C466A2DE486BFFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:2c:d5:e3:25:4a:71:c4:63:f3:30:d1:0e: ca:4d:9c:db:a2:17:45:7a:63:d0:24:14:30:61:61: df:ed:d0:0b:df:7b:b4:a4:f2:f3:13:4d:e6:83:f3: d9:b1:58:ee:d1:bb:1d:19:a5:93:02:1d:5b:4d:bc: 61:64:f3:ea:82:b8:f5:53:da:55:a9:a2:27:e5:8c: 79:6d:e3:44:46:4f:fb:57:4b:57:09:ee:f4:65:0a: f7:73:6f:ec:13:6f:b8:a4:94:a7:5e:14:d7:d2:89: 91:f5:aa:dd:fe:51:7c:9b:dc:35:23:86:5a:69:60: 43:0e:ef:ab:81:93:a9:ce:d5:1b:af:7c:fe:24:33: a1:1d:4f:22:76:ab:2d:76:ff:3f:3f:57:4f:4f:c0: 59:51:43:65:8d:42:5a:7a:3e:98:e5:90:6b:f7:34: 65:e8:19:46:56:a8:4a:63:9c:07:4c:ff:7d:0c:88: 5e:9c:77:b3:6e:1e:e4:64:06:38:95:bd:5e:67:3f: 0f:95:5a:4a:0f:7f:e3:2d:ca:b9:e3:5e:fa:76:c6: f3:c6:8f:04:b1:ba:56:6a:8f:6a:3d:e1:6c:e9:e4: cd:1d:a1:42:41:62:44:9b:c1:e2:2b:ac:6e:84:ec: e7:b4:23:87:b0:41:c9:4d:35:31:ca:22:91:47:90: 07:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.182.120.0/22 IPv6: 2804:42a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267517 Signature Algorithm: sha256WithRSAEncryption 09:d7:45:80:5d:21:c5:55:f6:07:58:f7:f2:83:34:93:5a:75: e2:db:4c:b4:30:4a:4f:6d:0e:fb:03:31:fe:6a:44:14:c1:b0: d5:ea:15:38:a6:ab:9d:bb:0e:38:40:8a:b0:16:30:06:b0:37: bd:a3:1f:fc:6f:a0:b3:20:d6:4c:54:d3:5c:94:98:07:fe:ca: 6a:97:a0:7e:58:32:b2:1f:1a:7f:52:5a:6b:db:6e:a8:48:20: 5a:ec:74:41:5d:6f:a8:14:a3:98:55:bb:49:25:12:18:06:f4: 79:6a:bd:d4:f3:bc:c4:fb:32:0a:87:3e:90:49:f3:87:73:22: d4:c6:37:ce:e2:bd:5c:e4:77:30:a6:ab:f7:08:0c:c5:5d:70: 7d:0e:c7:84:13:33:3d:47:cb:66:76:b0:79:23:48:08:9d:07: 97:40:55:9f:20:74:dc:78:d2:89:37:98:67:cd:13:b2:96:d5: 92:ff:8b:31:6d:e8:e5:11:4e:a3:51:5c:99:a2:36:70:9c:53: cd:53:b3:f6:ed:7f:60:fe:42:17:11:49:3d:ee:de:3c:69:56: 5e:ad:49:0b:30:63:5e:ed:55:09:de:2e:8a:57:1e:6b:63:aa: 3d:1d:70:9c:3a:4d:f3:8b:82:ab:11:9c:05:c7:27:a8:33:be: 9f:f4:46:76 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQoXcIRm9nSlS8LEzV0C8Kpi/OjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNjI1MTRaFw0yNTA0MDMwNjMwMTRaMDMxMTAvBgNV BAMTKEFBRjVCODFENjEwNTdDMjI0QTI5Rjg2RjZDNDY2QTJERTQ4NkJGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgICzV4yVKccRj8zDRDspNnNui F0V6Y9AkFDBhYd/t0Avfe7Sk8vMTTeaD89mxWO7Rux0ZpZMCHVtNvGFk8+qCuPVT 2lWpoifljHlt40RGT/tXS1cJ7vRlCvdzb+wTb7iklKdeFNfSiZH1qt3+UXyb3DUj hlppYEMO76uBk6nO1RuvfP4kM6EdTyJ2qy12/z8/V09PwFlRQ2WNQlp6PpjlkGv3 NGXoGUZWqEpjnAdM/30MiF6cd7NuHuRkBjiVvV5nPw+VWkoPf+MtyrnjXvp2xvPG jwSxulZqj2o94Wzp5M0doUJBYkSbweIrrG6E7Oe0I4ewQclNNTHKIpFHkAcLAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSq9bgdYQV8Ikop +G9sRmot5Ia//TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmFU bkplbnVScENmVjNIQjFGV2NkRkdDZVh3V3Q2ZDlmYnJwMjVKNXVMYUcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJh VG5KZW51UnBDZlYzSEIxRldjZEZHQ2VYd1d0NmQ5ZmJycDI1SjV1TGFHLzEvQUFG NUI4MUQ2MTA1N0MyMjRBMjlGODZGNkM0NjZBMkRFNDg2QkZGRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCybZ4MA0EAgACMAcDBQAoBEKoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQU/TANBgkqhkiG9w0BAQsFAAOCAQEACddFgF0hxVX2B1j3 8oM0k1p14ttMtDBKT20O+wMx/mpEFMGw1eoVOKarnbsOOECKsBYwBrA3vaMf/G+g syDWTFTTXJSYB/7Kapegflgysh8af1Jaa9tuqEggWux0QV1vqBSjmFW7SSUSGAb0 eWq91PO8xPsyCoc+kEnzh3Mi1MY3zuK9XOR3MKar9wgMxV1wfQ7HhBMzPUfLZnaw eSNICJ0Hl0BVnyB03HjSiTeYZ80TspbVkv+LMW3o5RFOo1FcmaI2cJxTzVOz9u1/ YP5CFxFJPe7ePGlWXq1JCzBjXu1VCd4uilcea2OqPR1wnDpN84uCqxGcBccnqDO+ n/RGdg== -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:39 2024 by rpki-client on console-fra.rpki-client.org