$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer File: B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer (raw, json) Hash identifier: aB33LbCqU7y1Kput8rnmjrNVb8rC1cT89aebUThW62k= Subject key identifier: B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5ECD9E927AED8F431A021F6F93E2318E65B259E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft caRepository: rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:27:36 +0000 Certificate not after: Wed 02 Apr 2025 18:32:36 +0000 Subordinate resources: AS: 270994 IP: 138.59.136.0/22 IP: 2804:74a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cd:9e:92:7a:ed:8f:43:1a:02:1f:6f:93:e2:31:8e:65:b2:59:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:27:36 2024 GMT Not After : Apr 2 18:32:36 2025 GMT Subject: CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:af:53:1b:90:6a:30:7d:d5:7b:6b:67:dc: 0a:82:67:fe:e2:e1:ea:e0:00:d2:24:ec:65:35:82: d3:f7:6c:89:de:80:14:bb:63:2d:01:bf:9f:47:a2: 0f:3d:16:97:64:3b:75:b9:95:72:2e:3c:d9:c1:b8: 80:9b:ed:e1:a3:7c:11:f6:01:1f:e6:df:da:5b:6a: 0e:92:f2:33:9d:91:e7:16:74:31:5d:ce:cd:3a:86: 1f:42:cb:ef:86:f0:dd:ef:ee:2c:9c:bf:9a:0a:a2: 38:b7:f4:a6:bd:76:5a:a6:5c:79:09:b7:e7:3d:c8: 32:03:e4:cf:90:25:b3:7a:de:dd:f8:bc:52:9b:e0: 75:1b:db:73:a0:37:e1:3d:6e:73:4c:9b:eb:df:24: fd:cf:55:7a:90:6e:ff:02:6c:d5:6f:63:55:25:99: 6a:ac:a0:5b:34:db:23:c9:8e:ee:e2:48:a8:35:5e: c4:8a:21:4e:33:cc:ca:94:36:6e:c1:a8:54:75:af: 02:db:eb:1c:51:e5:bd:ce:95:0d:23:da:05:ee:23: ef:7b:1d:69:87:16:93:02:c8:41:a6:3e:d0:53:0d: eb:c8:12:46:d7:d3:2a:97:f0:98:76:a7:9a:0c:a2: f5:ef:3e:ce:cd:14:9b:81:8f:e6:25:41:67:89:e4: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.59.136.0/22 IPv6: 2804:74a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270994 Signature Algorithm: sha256WithRSAEncryption 0b:b5:20:cc:aa:f9:5a:ca:63:25:da:66:d5:75:86:a3:43:d1: 0f:8d:57:45:d3:71:11:cf:e3:85:86:23:da:3a:fd:9d:e1:7d: 66:23:2c:5b:e1:e2:57:8f:2b:e6:2c:7a:dc:db:a2:9d:3c:4f: 92:f5:93:e5:d2:d7:a7:31:ce:8d:ff:d0:84:72:6f:a8:ec:05: 9f:8d:4d:30:85:4b:69:8e:3b:bd:b1:0f:e6:52:d7:af:af:b9: 64:8b:c7:aa:61:d9:4d:72:a2:1c:7d:2d:cb:bd:7b:ea:80:6e: b3:d1:fd:1e:ed:ed:e1:61:a8:b3:83:cd:7e:e7:81:46:17:e6: 9b:c4:aa:b4:2a:f1:7f:42:07:d5:44:1a:c5:44:80:74:78:e4: 2a:b2:b1:9e:f0:83:f2:28:dc:23:73:9c:98:21:05:73:61:4d: f7:86:61:41:89:73:a1:35:00:0d:5a:76:f5:79:4b:1a:aa:3c: 8d:00:ce:fb:3e:4f:0d:15:68:e7:55:8e:57:d2:4b:0f:28:a7: bc:57:20:c3:ec:7a:08:2c:25:28:f0:f4:40:2e:1f:dc:5c:54: 44:b7:55:c6:71:c7:bd:e1:28:60:8b:aa:5e:2c:87:b2:4d:3d: 3d:03:7e:d5:3a:2f:80:34:25:6f:46:f9:77:bb:45:ed:1d:27: ef:55:11:62 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUXs2eknrtj0MaAh9vk+IxjmWyWeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI3MzZaFw0yNTA0MDIxODMyMzZaMDMxMTAvBgNV BAMTKEIyRDA0NkQxNEZFN0I3N0Y2MkRFODk2RUJGMEE4MTU0MTNBNTg5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kq9TG5BqMH3Ve2tn3AqCZ/7i 4ergANIk7GU1gtP3bInegBS7Yy0Bv59Hog89FpdkO3W5lXIuPNnBuICb7eGjfBH2 AR/m39pbag6S8jOdkecWdDFdzs06hh9Cy++G8N3v7iycv5oKoji39Ka9dlqmXHkJ t+c9yDID5M+QJbN63t34vFKb4HUb23OgN+E9bnNMm+vfJP3PVXqQbv8CbNVvY1Ul mWqsoFs02yPJju7iSKg1XsSKIU4zzMqUNm7BqFR1rwLb6xxR5b3OlQ0j2gXuI+97 HWmHFpMCyEGmPtBTDevIEkbX0yqX8Jh2p5oMovXvPs7NFJuBj+YlQWeJ5COBAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSy0EbRT+e3f2Le iW6/CoFUE6WJvzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRllu SzdMRTVXaUtGQzdjZWhuTjV0YUxRY2pDSHZ1aG9Yb0pCUGl3cEJaYjkvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRllu SzdMRTVXaUtGQzdjZWhuTjV0YUxRY2pDSHZ1aG9Yb0pCUGl3cEJaYjkvMS9CMkQw NDZEMTRGRTdCNzdGNjJERTg5NkVCRjBBODE1NDEzQTU4OUJGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKO4gwDQQCAAIwBwMFACgEdKQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCKSMA0GCSqGSIb3DQEBCwUAA4IBAQALtSDMqvlaymMl2mbV dYajQ9EPjVdF03ERz+OFhiPaOv2d4X1mIyxb4eJXjyvmLHrc26KdPE+S9ZPl0ten Mc6N/9CEcm+o7AWfjU0whUtpjju9sQ/mUtevr7lki8eqYdlNcqIcfS3LvXvqgG6z 0f0e7e3hYaizg81+54FGF+abxKq0KvF/QgfVRBrFRIB0eOQqsrGe8IPyKNwjc5yY IQVzYU33hmFBiXOhNQANWnb1eUsaqjyNAM77Pk8NFWjnVY5X0ksPKKe8VyDD7HoI LCUo8PRALh/cXFREt1XGcce94Shgi6peLIeyTT09A37VOi+ANCVvRvl3u0XtHSfv VRFi -----END CERTIFICATE-----Generated at Sat Jun 1 23:01:11 2024 by rpki-client on console-ams.rpki-client.org