$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer File: B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer (raw, json) Hash identifier: MOFg3RmIt7L4/hz3lV0ugk5/fCu8d+/hGPr4FMbkREM= Subject key identifier: B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A53A49824CBAC95AB7C83289F80E2C9F9ACA323 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.mft caRepository: rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 05:46:16 +0000 Certificate not after: Thu 03 Apr 2025 05:51:16 +0000 Subordinate resources: AS: 265130 IP: 143.208.152.0/22 IP: 170.254.200.0/22 IP: 2804:2b00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 21:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:53:a4:98:24:cb:ac:95:ab:7c:83:28:9f:80:e2:c9:f9:ac:a3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 05:46:16 2024 GMT Not After : Apr 3 05:51:16 2025 GMT Subject: CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:3c:40:1f:f4:5c:10:bb:71:72:11:f7:c4: 5f:e4:11:e7:fc:70:f5:1e:1b:88:21:c4:9a:7e:46: 29:8f:ee:6d:22:e4:5c:e0:dd:cd:c1:44:b4:d8:03: 1c:5f:76:fe:53:94:56:01:30:0c:1e:fc:29:38:01: 75:b0:1f:57:f7:97:cd:64:d2:7f:bd:2e:d7:f1:d4: 85:b7:ff:e3:e5:35:83:b2:bb:3c:2b:e7:b5:e6:be: b4:3d:ca:de:b0:9a:10:6d:5b:c8:c9:b3:5b:4d:28: bf:39:86:30:1f:8a:b0:26:0b:fb:0f:79:1f:d2:5e: f2:d5:14:6a:e8:73:6a:be:86:dd:58:72:f4:a8:03: 44:9e:dd:22:2a:71:78:69:f0:d4:fa:e9:1c:08:ec: 3b:18:80:49:33:90:1d:18:6a:38:76:0f:cd:07:f1: 43:24:21:5f:25:ac:1d:4f:47:c6:ac:7c:e2:a1:68: aa:36:c3:a9:5a:08:a1:4d:98:c6:a6:57:34:f0:f2: e7:97:e8:04:e9:bc:1a:91:fb:99:d5:17:e1:b9:4a: a6:a4:fd:96:b6:9d:ae:94:3a:04:24:31:64:30:f2: 49:ae:c4:77:14:99:ef:97:af:2a:49:81:17:2e:d4: 39:fc:c5:14:a5:59:05:1c:aa:a1:9a:91:22:c5:af: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.152.0/22 170.254.200.0/22 IPv6: 2804:2b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265130 Signature Algorithm: sha256WithRSAEncryption 08:90:29:84:29:f6:7e:7b:b0:ff:9a:30:29:b4:c7:d5:e0:28: c3:88:f6:f4:a2:1f:69:7a:41:cd:1b:c1:d9:7d:31:68:d3:74: 7e:85:44:32:4c:be:f5:f4:cc:c2:9c:27:c1:20:72:3d:1c:fd: 2e:4a:a8:a9:b0:29:79:4b:5e:5f:c3:90:03:dd:41:5b:fa:83: 0a:57:31:21:d9:6e:ec:46:29:5f:2c:01:36:d3:bb:b5:c8:64: f8:e0:d1:d0:92:1c:7a:c0:2e:b4:77:cb:bf:27:c5:49:12:77: 45:72:e3:79:80:42:c6:e4:69:43:7e:ab:db:fa:50:f5:b3:48: 18:05:cb:bb:88:ad:3f:aa:61:b8:2a:48:c9:ec:47:4c:6d:ab: 6a:b1:1e:72:41:fd:94:a4:16:a4:ac:b3:5a:b7:70:f9:4c:24: 28:7d:72:fd:ce:80:53:7b:31:89:27:8d:9e:f5:29:01:da:15: b2:d8:69:c8:a1:7b:23:11:30:76:b8:b2:e9:37:dd:a2:4c:d2: 80:7e:22:b3:6a:bc:82:03:1b:72:c3:7b:53:32:bb:4a:b4:7c: 48:d0:29:05:f7:a2:00:0e:23:0b:80:bc:09:47:b2:ba:90:84: 31:56:b3:4d:21:68:c3:f8:c6:e4:b7:56:8b:5f:36:7c:68:5a: db:06:4d:d1 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUSlOkmCTLrJWrfIMon4DiyfmsoyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNTQ2MTZaFw0yNTA0MDMwNTUxMTZaMDMxMTAvBgNV BAMTKEI0RjAyMjk5QTJFREU1QkRGNTNGNkRFQ0FDNTI5QzI5RjZFOTI4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3zxAH/RcELtxchH3xF/kEef8 cPUeG4ghxJp+RimP7m0i5Fzg3c3BRLTYAxxfdv5TlFYBMAwe/Ck4AXWwH1f3l81k 0n+9Ltfx1IW3/+PlNYOyuzwr57XmvrQ9yt6wmhBtW8jJs1tNKL85hjAfirAmC/sP eR/SXvLVFGroc2q+ht1YcvSoA0Se3SIqcXhp8NT66RwI7DsYgEkzkB0Yajh2D80H 8UMkIV8lrB1PR8asfOKhaKo2w6laCKFNmMamVzTw8ueX6ATpvBqR+5nVF+G5Sqak /Za2na6UOgQkMWQw8kmuxHcUme+XrypJgRcu1Dn8xRSlWQUcqqGakSLFr/55AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS08CKZou3lvfU/ beysUpwp9ukogTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOERk MnlhZlFFRFJ5TFNuRWhYd2g2Q21TWXdCdUpFNXEzNXpLRFZCbVk1eHcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOERk MnlhZlFFRFJ5TFNuRWhYd2g2Q21TWXdCdUpFNXEzNXpLRFZCbVk1eHcvMS9CNEYw MjI5OUEyRURFNUJERjUzRjZERUNBQzUyOUMyOUY2RTkyODgxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKP0JgDBAKq/sgwDQQCAAIwBwMFACgEKwAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAuqMA0GCSqGSIb3DQEBCwUAA4IBAQAIkCmEKfZ+ e7D/mjAptMfV4CjDiPb0oh9pekHNG8HZfTFo03R+hUQyTL719MzCnCfBIHI9HP0u SqipsCl5S15fw5AD3UFb+oMKVzEh2W7sRilfLAE207u1yGT44NHQkhx6wC60d8u/ J8VJEndFcuN5gELG5GlDfqvb+lD1s0gYBcu7iK0/qmG4KkjJ7EdMbatqsR5yQf2U pBakrLNat3D5TCQofXL9zoBTezGJJ42e9SkB2hWy2GnIoXsjETB2uLLpN92iTNKA fiKzaryCAxtyw3tTMrtKtHxI0CkF96IADiMLgLwJR7K6kIQxVrNNIWjD+Mbkt1aL XzZ8aFrbBk3R -----END CERTIFICATE-----Generated at Sat Sep 28 20:53:56 2024 by rpki-client on console-ams.rpki-client.org