$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer File: B20E3C8281FB009A48EDFE56131C930D739F11C4.cer (raw, json) Hash identifier: 2x+gBaaB57k51k5y6yXYToN7Zcfxdap1Q5fR0BL5NnE= Subject key identifier: B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A8F9891BC6A819A8DF51F8F44361F3CE53B55 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft caRepository: rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 01:42:28 +0000 Certificate not after: Thu 03 Apr 2025 01:47:28 +0000 Subordinate resources: AS: 263972 IP: 138.255.128.0/22 IP: 2804:28a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8f:98:91:bc:6a:81:9a:8d:f5:1f:8f:44:36:1f:3c:e5:3b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 01:42:28 2024 GMT Not After : Apr 3 01:47:28 2025 GMT Subject: CN=B20E3C8281FB009A48EDFE56131C930D739F11C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3b:fa:ea:8c:03:7a:13:58:c4:23:71:0e:df: 2a:15:f5:56:2b:7d:60:60:3c:22:d6:77:73:80:f0: 9b:9e:04:7a:b3:8f:36:9c:d2:d7:9e:60:7d:3e:bc: fc:7b:55:8c:58:36:42:c6:b0:c9:b9:2b:21:1c:05: 27:a6:db:0f:27:68:0d:19:1f:11:4a:b6:1c:f7:a9: e3:1b:a8:d0:91:34:77:70:25:17:ce:97:46:82:49: 7f:69:41:a8:75:71:86:00:06:ca:87:29:6f:72:80: 50:3d:db:d3:a1:b8:86:05:7b:cc:46:5f:7c:69:e1: 8a:68:5a:58:7e:cf:ea:e2:ca:90:cd:ae:2e:d8:cd: ec:cc:99:a2:3d:29:b7:5c:10:be:65:ef:0e:93:e9: 38:30:5d:9d:50:07:18:53:4c:78:32:ca:67:ea:91: e4:bc:e6:d4:69:d2:29:b5:4c:67:b8:ce:db:6d:5a: a5:0c:36:06:1d:93:28:6e:7c:0c:24:f2:eb:a2:e0: fe:23:12:ef:f6:c1:73:4a:e9:7a:46:ed:97:07:86: 30:62:47:64:f5:90:04:4b:ae:d2:ae:ba:4f:11:32: fe:00:3a:c7:3d:9c:f7:38:18:e9:f6:21:5a:0a:a3: 27:5c:d0:61:74:fa:0e:93:b7:1b:1f:30:75:d6:f1: 83:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.128.0/22 IPv6: 2804:28a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263972 Signature Algorithm: sha256WithRSAEncryption 30:a2:05:d6:58:c8:b3:96:92:43:bc:bb:fa:b5:ba:99:9e:1c: 1e:3c:da:36:1c:a5:4d:3b:32:ee:b5:75:8f:ca:af:37:27:0b: b2:86:ab:36:16:53:79:c1:39:10:a1:eb:1e:00:f8:ef:d3:54: fc:8a:1b:27:ca:5d:1d:fd:92:ed:25:aa:04:d2:ee:78:8a:93: 5b:d5:7e:93:28:6b:72:68:47:f7:cc:c3:42:86:ac:7a:b2:09: 66:5b:aa:aa:74:ba:3f:0f:b7:80:3f:cc:66:3d:bf:0f:47:64: ee:31:2c:1b:f5:5b:52:9b:43:30:f6:e0:c2:17:07:cf:b7:70: c2:68:a1:14:cc:d2:29:9e:e5:52:3d:aa:06:a7:a9:28:f1:dc: 80:0b:b3:1b:ea:e6:b4:03:bf:03:a7:6c:1f:23:b4:78:9d:8b: a2:c8:04:64:e8:40:8a:6d:c3:7a:44:f5:17:5b:79:e7:a8:c0: 1d:b2:91:bb:09:76:fc:0e:cc:c4:9d:6e:6d:44:1f:ef:34:5c: 90:c9:44:86:01:f6:f6:d9:0e:97:e1:05:42:ed:83:19:97:de: 52:96:da:4a:c6:d1:9c:d5:50:fc:56:6f:6f:77:3a:c4:43:94: 01:b9:95:2a:55:98:a2:c3:5f:e5:3d:5a:e8:ae:a6:e9:c6:b4: e5:25:b8:a6 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgITSo+YkbxqgZqN9R+PRDYfPOU7VTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3 Q0E4QTRCMB4XDTI0MDQwNDAxNDIyOFoXDTI1MDQwMzAxNDcyOFowMzExMC8GA1UE AxMoQjIwRTNDODI4MUZCMDA5QTQ4RURGRTU2MTMxQzkzMEQ3MzlGMTFDNDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALU7+uqMA3oTWMQjcQ7fKhX1Vit9 YGA8ItZ3c4Dwm54EerOPNpzS155gfT68/HtVjFg2QsawybkrIRwFJ6bbDydoDRkf EUq2HPep4xuo0JE0d3AlF86XRoJJf2lBqHVxhgAGyocpb3KAUD3b06G4hgV7zEZf fGnhimhaWH7P6uLKkM2uLtjN7MyZoj0pt1wQvmXvDpPpODBdnVAHGFNMeDLKZ+qR 5Lzm1GnSKbVMZ7jO221apQw2Bh2TKG58DCTy66Lg/iMS7/bBc0rpekbtlweGMGJH ZPWQBEuu0q66TxEy/gA6xz2c9zgY6fYhWgqjJ1zQYXT6DpO3Gx8wddbxg5ECAwEA AaOCAzowggM2MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFLIOPIKB+wCaSO3+ VhMckw1znxHEMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBQAYIKwYBBQUHAQsEggEyMIIBLjBeBggr BgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82SGhn eEE5cGRBbXFFQ2FWaWNNTjI2SmJRU1dXcUpKVWJNUDlzUFJ2TXNtZy8xLzCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkho Z3hBOXBkQW1xRUNhVmljTU4yNkpiUVNXV3FKSlViTVA5c1BSdk1zbWcvMS9CMjBF M0M4MjgxRkIwMDlBNDhFREZFNTYxMzFDOTMwRDczOUYxMUM0Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKK/4AwDQQCAAIwBwMFACgEKKQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAckMA0GCSqGSIb3DQEBCwUAA4IBAQAwogXWWMizlpJDvLv6 tbqZnhwePNo2HKVNOzLutXWPyq83Jwuyhqs2FlN5wTkQoeseAPjv01T8ihsnyl0d /ZLtJaoE0u54ipNb1X6TKGtyaEf3zMNChqx6sglmW6qqdLo/D7eAP8xmPb8PR2Tu MSwb9VtSm0Mw9uDCFwfPt3DCaKEUzNIpnuVSPaoGp6ko8dyAC7Mb6ua0A78Dp2wf I7R4nYuiyARk6ECKbcN6RPUXW3nnqMAdspG7CXb8DszEnW5tRB/vNFyQyUSGAfb2 2Q6X4QVC7YMZl95SltpKxtGc1VD8Vm9vdzrEQ5QBuZUqVZiiw1/lPVrorqbpxrTl Jbim -----END CERTIFICATE-----Generated at Sat Nov 23 07:44:20 2024 by rpki-client on console-ams.rpki-client.org