$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer File: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer (raw, json) Hash identifier: AoMmXbCM3neUdDaWGwcgkOIu95O1FCwzrirHCRLlRps= Subject key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1CEE25EDA19F4093D1DC2DA48DEEC0CF0DB9C730 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft caRepository: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 20:48:30 +0000 Certificate not after: Thu 03 Apr 2025 20:53:30 +0000 Subordinate resources: AS: 267589 IP: 45.70.148.0/22 IP: 2804:43c8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 18:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ee:25:ed:a1:9f:40:93:d1:dc:2d:a4:8d:ee:c0:cf:0d:b9:c7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 20:48:30 2024 GMT Not After : Apr 3 20:53:30 2025 GMT Subject: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:4a:36:45:91:f6:63:63:3e:72:cd:a1:a9: da:55:9e:92:19:86:7b:3e:75:fa:2f:55:87:ca:f3: 26:31:73:9a:06:82:0b:95:e0:fa:1d:ef:0b:ba:4d: ee:c7:b2:8d:53:75:d4:26:1e:30:3c:1e:c0:08:6b: 23:74:07:91:39:b8:03:fd:2b:e1:d6:8b:78:e4:21: e3:75:f5:13:11:0d:52:05:2f:59:f9:29:fe:a1:1f: 73:6c:fb:bb:fb:f9:02:fc:93:ce:18:35:88:4e:18: 8b:9c:36:aa:7f:f7:e2:2b:fe:bf:85:36:7c:1d:a5: bc:15:fe:7a:32:de:26:74:ba:9e:82:fd:de:59:4c: 0b:31:64:51:38:b7:02:f7:51:36:14:82:cc:cf:5e: 73:3e:97:28:34:8b:67:4c:a0:bb:9d:a7:fa:59:05: c6:6a:48:26:77:61:40:ad:08:5f:bd:00:f3:46:c3: 67:e7:3c:59:bb:15:69:27:71:a5:50:5c:37:6c:5e: 2b:1a:65:57:2e:d5:a6:e4:d4:7f:70:ce:04:8a:b8: 9d:f4:e7:75:99:86:9e:84:d3:a8:38:37:70:36:42: f4:ef:bd:99:76:c6:a9:17:d4:c8:eb:6c:e3:df:a1: f6:26:60:f3:4a:b2:56:8e:57:bd:4c:6d:f6:7b:ea: 97:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.148.0/22 IPv6: 2804:43c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267589 Signature Algorithm: sha256WithRSAEncryption 13:a5:ad:ff:3f:9b:26:ea:df:fe:22:8b:c7:31:c4:b1:47:f0: b5:ad:69:52:42:1b:3a:7e:91:8c:d0:64:bd:4e:8a:c8:ab:15: 95:25:3b:a9:4b:bf:cd:db:67:aa:15:b2:ef:b9:04:f5:f7:f1: 3e:0e:eb:7d:52:3a:c4:1e:5b:94:e1:3b:b6:a8:5e:22:b9:ad: 68:ad:fd:04:9b:17:3a:c1:f4:5d:ac:8f:d7:46:c8:06:c8:e1: b8:06:ac:c0:47:64:a4:cc:e4:76:b2:03:1a:17:5b:7b:2c:c4: 61:6a:bf:6d:f6:45:49:65:a8:a2:0d:21:c7:bc:93:2e:d9:2c: 9b:1a:26:e2:75:4d:ce:ca:77:9c:bf:ef:a6:b3:ce:72:d4:cb: 74:ff:89:c0:ed:c1:ee:09:a3:68:a2:34:7b:d0:92:39:ba:ba: 3a:81:2a:b0:c6:3c:53:88:54:f0:ad:f0:fe:5a:89:8a:82:7d: 8f:aa:9b:b4:95:c4:39:56:5b:d5:b8:8e:fc:0e:91:70:71:c6: ac:8d:2d:cb:8a:96:b3:3b:de:f2:2b:4b:29:8e:6c:f5:4b:2d: 7d:ac:78:d6:00:c6:65:4e:81:86:fd:b9:74:a3:4e:b5:66:09: 6d:71:09:1c:a3:12:24:53:e5:7e:52:31:12:c6:53:29:a9:17: 9b:8b:14:d0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHO4l7aGfQJPR3C2kje7Azw25xzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQyMDQ4MzBaFw0yNTA0MDMyMDUzMzBaMDMxMTAvBgNV BAMTKEFGQ0E4N0U0QUQwMzVCNUU0Q0EwRURBMUM0QzA0MkM2OUJGRTkxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpM0o2RZH2Y2M+cs2hqdpVnpIZ hns+dfovVYfK8yYxc5oGgguV4Pod7wu6Te7Hso1TddQmHjA8HsAIayN0B5E5uAP9 K+HWi3jkIeN19RMRDVIFL1n5Kf6hH3Ns+7v7+QL8k84YNYhOGIucNqp/9+Ir/r+F NnwdpbwV/noy3iZ0up6C/d5ZTAsxZFE4twL3UTYUgszPXnM+lyg0i2dMoLudp/pZ BcZqSCZ3YUCtCF+9APNGw2fnPFm7FWkncaVQXDdsXisaZVcu1abk1H9wzgSKuJ30 53WZhp6E06g4N3A2QvTvvZl2xqkX1MjrbOPfofYmYPNKslaOV71MbfZ76pevAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvyofkrQNbXkyg 7aHEwELGm/6R7DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0tw d0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFCeGcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdL cHdLSmpHeTZSOTVFRlBhN2lRZDZQSkp5dnBRUUM5aHhTMnJadGkxQnhnLzEvQUZD QTg3RTRBRDAzNUI1RTRDQTBFREExQzRDMDQyQzY5QkZFOTFFQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUaUMA0EAgACMAcDBQAoBEPIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVRTANBgkqhkiG9w0BAQsFAAOCAQEAE6Wt/z+bJurf/iKL xzHEsUfwta1pUkIbOn6RjNBkvU6KyKsVlSU7qUu/zdtnqhWy77kE9ffxPg7rfVI6 xB5blOE7tqheIrmtaK39BJsXOsH0XayP10bIBsjhuAaswEdkpMzkdrIDGhdbeyzE YWq/bfZFSWWoog0hx7yTLtksmxom4nVNzsp3nL/vprPOctTLdP+JwO3B7gmjaKI0 e9CSObq6OoEqsMY8U4hU8K3w/lqJioJ9j6qbtJXEOVZb1biO/A6RcHHGrI0ty4qW szve8itLKY5s9Ustfax41gDGZU6Bhv25dKNOtWYJbXEJHKMSJFPlflIxEsZTKakX m4sU0A== -----END CERTIFICATE-----Generated at Tue Jun 18 17:34:21 2024 by rpki-client on console-ams.rpki-client.org