$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.cer File: AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.cer (raw, json) Hash identifier: 3ebrTP4vDmyWB2OcmlVI2g2MxHL/p0zrgLULD5Pc+xo= Subject key identifier: AC:10:72:CC:DE:F9:46:7D:A0:A7:09:A0:2C:47:E3:2C:05:9C:FE:C5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1CF44AE9664B9806DA259E33F2456C05F2E2B0CD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.mft caRepository: rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:37 +0000 Certificate not after: Wed 02 Apr 2025 18:30:37 +0000 Subordinate resources: AS: 268791 IP: 45.172.64.0/22 IP: 2804:5ab8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f4:4a:e9:66:4b:98:06:da:25:9e:33:f2:45:6c:05:f2:e2:b0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:37 2024 GMT Not After : Apr 2 18:30:37 2025 GMT Subject: CN=AC1072CCDEF9467DA0A709A02C47E32C059CFEC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:c2:de:91:de:76:ca:b6:13:42:9c:2d:e5: fc:2b:bc:0f:a8:4b:ad:1f:c7:51:e6:4b:48:7e:b9: 92:c2:91:ad:3d:67:07:78:8d:05:e0:33:f0:bf:c5: e3:c4:52:77:bc:f3:e6:46:73:5f:46:31:e9:c5:f4: 9c:56:38:66:4d:e4:77:d4:e0:8a:69:aa:61:6b:21: 82:a5:32:4f:88:a8:99:f9:e1:b8:a0:1d:bd:c9:1e: ac:39:75:6c:ea:f3:fd:b3:4c:23:49:1e:77:2e:3b: 5b:bd:87:b3:62:7b:85:f3:8b:8a:da:ac:60:20:28: a1:5a:75:e4:e7:03:a2:f1:d6:ac:5c:ea:c2:f3:ce: dc:c3:87:dd:cb:f7:83:f6:99:73:b5:fe:b2:05:ea: 29:94:d7:27:8c:4d:8e:f2:6e:d3:8d:f5:41:71:cb: 73:c8:a8:62:22:08:5a:11:14:22:98:a2:23:90:c4: 32:2f:d7:05:c5:b9:27:0d:66:fc:bf:76:9f:b8:98: 91:ff:0a:e8:78:ea:b4:bf:0c:6a:86:11:c8:19:a8: ef:f8:8e:aa:df:a0:2b:67:d7:c3:a7:a1:02:2f:db: 16:00:de:8b:49:65:d5:ae:d3:04:8c:2d:62:ee:d4: 9c:24:c2:7a:ba:2d:eb:71:8e:ed:08:74:2d:d5:29: 5b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:10:72:CC:DE:F9:46:7D:A0:A7:09:A0:2C:47:E3:2C:05:9C:FE:C5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/1/AC1072CCDEF9467DA0A709A02C47E32C059CFEC5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.64.0/22 IPv6: 2804:5ab8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268791 Signature Algorithm: sha256WithRSAEncryption b1:c7:53:18:99:db:8d:9b:d2:5a:a7:01:2f:da:c6:e7:b6:b2: 8c:90:64:52:a9:bc:85:2e:d2:ae:78:ba:c3:4b:5e:ed:8e:e5: b9:1c:5f:bf:38:8f:c7:59:da:e5:e8:93:5b:91:de:4f:e7:09: 4a:a6:a7:c3:65:f2:0d:76:97:26:b0:fd:39:e0:e0:54:26:4a: ad:b6:3e:8d:67:a2:05:81:1c:8a:28:39:2b:9c:f2:bb:af:b2: 81:a6:aa:92:08:e0:d2:13:74:ee:18:2c:b5:a4:d4:ef:04:c5: 33:d5:d4:ec:0e:c2:68:c7:31:90:f4:e5:a4:45:ce:4e:c3:72: ff:a2:bf:ce:2f:43:c6:95:5c:fb:52:3c:40:6f:16:91:02:ff: c4:bf:5f:84:56:a4:33:b8:85:d8:b2:93:42:b4:d0:79:20:f1: 14:95:78:90:8c:1f:8a:50:c7:d3:dd:36:1c:5e:73:0c:bd:3a: 50:e9:ad:d1:1c:7d:91:d3:6f:99:9d:36:f5:77:ef:1f:84:f7: 1d:f4:08:94:54:8a:e6:9d:c9:8e:6e:7f:a3:0c:98:66:72:7b: 84:d3:64:79:78:dc:6b:54:f3:d7:77:7e:45:ff:bc:c4:ed:9f: 1b:11:10:7b:4e:0e:69:ab:c0:a7:5b:19:0f:a2:49:4d:cb:39: d9:2d:4e:53 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHPRK6WZLmAbaJZ4z8kVsBfLisM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1MzdaFw0yNTA0MDIxODMwMzdaMDMxMTAvBgNV BAMTKEFDMTA3MkNDREVGOTQ2N0RBMEE3MDlBMDJDNDdFMzJDMDU5Q0ZFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jsLekd52yrYTQpwt5fwrvA+o S60fx1HmS0h+uZLCka09Zwd4jQXgM/C/xePEUne88+ZGc19GMenF9JxWOGZN5HfU 4IppqmFrIYKlMk+IqJn54bigHb3JHqw5dWzq8/2zTCNJHncuO1u9h7Nie4Xzi4ra rGAgKKFadeTnA6Lx1qxc6sLzztzDh93L94P2mXO1/rIF6imU1yeMTY7ybtON9UFx y3PIqGIiCFoRFCKYoiOQxDIv1wXFuScNZvy/dp+4mJH/Cuh46rS/DGqGEcgZqO/4 jqrfoCtn18OnoQIv2xYA3otJZdWu0wSMLWLu1Jwkwnq6Letxju0IdC3VKVtnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsEHLM3vlGfaCn CaAsR+MsBZz+xTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2g5 c3dMdWk4cFpoWlNWTXoxbVRaV0NVY2d1NTZEMXBOODY0eUo5NXpISjcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNo OXN3THVpOHBaaFpTVk16MW1UWldDVWNndTU2RDFwTjg2NHlKOTV6SEo3LzEvQUMx MDcyQ0NERUY5NDY3REEwQTcwOUEwMkM0N0UzMkMwNTlDRkVDNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaxAMA0EAgACMAcDBQAoBFq4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZ9zANBgkqhkiG9w0BAQsFAAOCAQEAscdTGJnbjZvSWqcB L9rG57ayjJBkUqm8hS7Srni6w0te7Y7luRxfvziPx1na5eiTW5HeT+cJSqanw2Xy DXaXJrD9OeDgVCZKrbY+jWeiBYEciig5K5zyu6+ygaaqkgjg0hN07hgstaTU7wTF M9XU7A7CaMcxkPTlpEXOTsNy/6K/zi9DxpVc+1I8QG8WkQL/xL9fhFakM7iF2LKT QrTQeSDxFJV4kIwfilDH0902HF5zDL06UOmt0Rx9kdNvmZ029XfvH4T3HfQIlFSK 5p3Jjm5/owyYZnJ7hNNkeXjca1Tz13d+Rf+8xO2fGxEQe04OaavAp1sZD6JJTcs5 2S1OUw== -----END CERTIFICATE-----Generated at Mon Feb 17 08:07:22 2025 by rpki-client