$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer File: ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer (raw, json) Hash identifier: QpCZD7Kr8fmOay6RUC5etGHN3UOyn/g5DNlRnOpdcLc= Subject key identifier: AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 542033509C9F16707A83A0C7A5431C8D2AB64136 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft caRepository: rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 19:07:57 +0000 Certificate not after: Wed 02 Apr 2025 19:12:57 +0000 Subordinate resources: AS: 267183 IP: 45.231.20.0/22 IP: 2804:496c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 02:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:20:33:50:9c:9f:16:70:7a:83:a0:c7:a5:43:1c:8d:2a:b6:41:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 19:07:57 2024 GMT Not After : Apr 2 19:12:57 2025 GMT Subject: CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:1d:da:c0:20:ef:c0:73:e6:18:66:10:bd: 6b:92:4b:70:59:fe:94:25:8f:64:04:78:7e:09:ad: c6:80:6e:98:f4:99:ae:bf:f5:46:54:41:d8:85:f2: 0c:60:af:93:8b:af:e9:87:6a:44:dc:24:60:1b:6a: 88:cd:b6:c5:ac:ab:f0:0c:8e:2c:60:da:52:84:e8: 96:ed:31:6a:b5:4d:20:d6:40:66:95:ff:53:9b:e3: 14:0c:ca:f4:8e:78:e0:c1:ce:9a:b3:b4:44:28:be: 01:4d:37:bf:4a:f9:f3:31:ef:57:2a:c4:31:72:40: 04:b4:46:ab:6c:57:07:f6:c8:f6:8e:d4:d0:5e:86: 2c:0c:5b:5e:42:be:96:fc:d0:c5:0b:10:65:99:6b: 93:e0:30:e8:ab:74:32:fb:71:94:bc:3e:5e:1a:80: e1:7c:71:7d:c2:b0:0d:4c:22:9a:af:6d:9a:6b:93: 5c:82:36:83:3e:5e:3c:f2:81:a6:02:5c:91:1a:11: b9:61:96:36:8d:29:f3:23:87:5a:13:a8:99:89:1e: dc:da:b3:94:33:fc:7b:ee:79:5e:26:07:e4:eb:6c: 86:be:f0:a3:4d:f1:83:df:e2:b4:74:d7:f1:04:e5: de:3e:bb:25:0e:62:cd:87:43:60:14:11:ac:fe:67: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.231.20.0/22 IPv6: 2804:496c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267183 Signature Algorithm: sha256WithRSAEncryption 90:54:7a:14:8e:97:f6:dd:09:3b:8b:4c:15:a7:b4:79:c6:78: 0a:b5:cf:92:e7:c7:75:41:91:f0:48:05:5a:56:2f:71:59:af: 0d:b4:05:34:bb:ae:61:0c:9c:70:0e:0c:92:95:29:21:a7:e9: 45:01:1c:c9:de:6d:49:32:9e:33:68:99:b8:b6:a1:20:5f:5c: 7a:11:24:00:8f:02:e1:ec:af:46:0c:e6:90:93:89:b5:7f:a1: c3:f2:b8:5f:ce:43:c9:38:88:19:ef:6f:0b:64:8c:aa:8f:e7: 61:4d:25:13:16:f9:f2:a2:ed:db:d4:bb:33:52:21:41:55:9e: 1f:d2:f9:55:3f:9f:bb:18:a7:82:79:04:e4:00:30:ed:25:1d: cd:b5:d1:98:5f:c8:b5:84:c2:c6:7f:07:c2:1b:1e:e2:fc:17: 5d:71:9f:da:25:5d:51:90:bc:d3:fc:e0:35:e0:1f:cf:a3:ea: 89:35:b9:36:55:76:15:45:bb:db:5e:ea:f1:e7:f5:2e:91:d8: 26:a3:79:1b:e0:ed:03:de:67:8c:90:e6:12:89:64:c7:09:19: e5:99:71:7c:f9:f1:76:4c:9e:09:eb:31:33:b0:b1:72:81:b8: a1:24:d5:2f:0f:ba:1e:50:cb:ce:32:70:04:a9:45:61:1a:bc: 31:01:7c:37 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUVCAzUJyfFnB6g6DHpUMcjSq2QTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxOTA3NTdaFw0yNTA0MDIxOTEyNTdaMDMxMTAvBgNV BAMTKEFERDE4RDRCOUQ0RUI1QjhFNTUyMEMwRTAwMzJDMjJFREIwNUY0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2x3awCDvwHPmGGYQvWuSS3BZ /pQlj2QEeH4JrcaAbpj0ma6/9UZUQdiF8gxgr5OLr+mHakTcJGAbaojNtsWsq/AM jixg2lKE6JbtMWq1TSDWQGaV/1Ob4xQMyvSOeODBzpqztEQovgFNN79K+fMx71cq xDFyQAS0RqtsVwf2yPaO1NBehiwMW15Cvpb80MULEGWZa5PgMOirdDL7cZS8Pl4a gOF8cX3CsA1MIpqvbZprk1yCNoM+XjzygaYCXJEaEblhljaNKfMjh1oTqJmJHtza s5Qz/HvueV4mB+TrbIa+8KNN8YPf4rR01/EE5d4+uyUOYs2HQ2AUEaz+Zz/tAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSt0Y1LnU61uOVS DA4AMsIu2wX0ETAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXdN TXBFVW5kZDFrVzNtRUdIUTg3cVEzeWZEQWNXUGpuMXpQa0dvczF1eHUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXdN TXBFVW5kZDFrVzNtRUdIUTg3cVEzeWZEQWNXUGpuMXpQa0dvczF1eHUvMS9BREQx OEQ0QjlENEVCNUI4RTU1MjBDMEUwMDMyQzIyRURCMDVGNDExLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt5xQwDQQCAAIwBwMFACgESWwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBOvMA0GCSqGSIb3DQEBCwUAA4IBAQCQVHoUjpf23Qk7i0wV p7R5xngKtc+S58d1QZHwSAVaVi9xWa8NtAU0u65hDJxwDgySlSkhp+lFARzJ3m1J Mp4zaJm4tqEgX1x6ESQAjwLh7K9GDOaQk4m1f6HD8rhfzkPJOIgZ728LZIyqj+dh TSUTFvnyou3b1LszUiFBVZ4f0vlVP5+7GKeCeQTkADDtJR3NtdGYX8i1hMLGfwfC Gx7i/BddcZ/aJV1RkLzT/OA14B/Po+qJNbk2VXYVRbvbXurx5/Uukdgmo3kb4O0D 3meMkOYSiWTHCRnlmXF8+fF2TJ4J6zEzsLFygbihJNUvD7oeUMvOMnAEqUVhGrwx AXw3 -----END CERTIFICATE-----Generated at Mon Jul 1 02:27:49 2024 by rpki-client on console-ams.rpki-client.org