$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.cer File: B56EEE7304E8D507FC1F8793090E1D975EFC96F1.cer (raw, json) Hash identifier: Z1NlHzvpikV8zcsDpn1Rx4OG/J4k2QPVM9bNQbaMJXo= Subject key identifier: B5:6E:EE:73:04:E8:D5:07:FC:1F:87:93:09:0E:1D:97:5E:FC:96:F1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3C1360FCB930BAA6D4E03B2B5417A9800EB98F8C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.mft caRepository: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 29 Jun 2024 17:27:34 +0000 Certificate not after: Sat 28 Jun 2025 17:32:34 +0000 Subordinate resources: AS: 268289 IP: 45.237.200.0/22 IP: 170.233.20.0/22 IP: 2804:4ee4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 21:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:13:60:fc:b9:30:ba:a6:d4:e0:3b:2b:54:17:a9:80:0e:b9:8f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 29 17:27:34 2024 GMT Not After : Jun 28 17:32:34 2025 GMT Subject: CN=B56EEE7304E8D507FC1F8793090E1D975EFC96F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:51:80:a9:30:20:2b:44:ca:73:95:de:97:d0: 2a:69:9c:c3:73:ca:33:b1:c3:68:89:44:31:b4:0e: 98:2b:95:67:a9:1b:8c:b6:38:72:0c:da:f2:a4:69: 2d:28:23:b0:42:8d:2b:64:bc:2a:90:be:d8:15:aa: 9d:8a:46:5e:94:1c:2b:90:5e:ba:f0:00:a6:4f:af: 72:95:2d:42:5d:63:bb:a6:32:bd:d5:d0:a3:f7:ad: 76:05:ce:88:80:73:75:bc:8a:00:e2:16:ad:ea:4a: 0d:68:32:0b:fe:50:0e:a1:ac:7e:bf:93:a4:71:88: bb:af:72:df:90:9a:cd:02:40:4c:5c:69:d2:96:1d: 1e:fa:0c:73:00:a7:30:ee:6b:df:66:9d:b6:a2:7b: 5f:1a:b4:79:9a:9a:80:d9:70:b4:89:6a:9b:03:d0: 26:e1:eb:e8:37:53:5e:78:3c:bd:e9:55:3b:38:ca: d8:3c:b4:ab:db:c5:1f:9b:68:e8:14:51:f7:83:9b: b2:13:5a:33:b7:ca:eb:dc:1f:38:c4:d6:db:6e:56: 4c:2f:b1:47:ff:0d:62:58:4b:d8:8e:08:26:bd:8f: f0:e9:7b:9a:00:05:d6:26:bf:68:c5:20:df:db:14: 25:42:d4:48:d5:f6:83:03:49:2b:72:d1:42:bc:53: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:6E:EE:73:04:E8:D5:07:FC:1F:87:93:09:0E:1D:97:5E:FC:96:F1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.200.0/22 170.233.20.0/22 IPv6: 2804:4ee4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268289 Signature Algorithm: sha256WithRSAEncryption 83:23:d8:22:fd:73:98:83:4e:79:a8:e3:b2:81:6c:f9:fd:1b: 5c:3c:e0:70:31:66:98:c7:df:1c:26:b2:70:3a:47:4b:05:18: cd:26:31:2a:23:e4:90:03:c3:34:57:ad:2e:51:7c:da:b5:b8: e7:67:bd:b3:99:c1:03:fb:24:46:99:60:8d:24:5a:2e:e8:33: 3e:70:66:90:1e:8a:b9:08:fc:ce:f6:7c:10:2d:08:6c:64:6d: 82:18:74:fc:bf:f9:75:52:6a:5f:73:9c:99:8a:c0:e7:8f:09: 90:b4:1a:fc:a5:b3:bd:cc:0d:59:c5:d9:b9:62:0e:f0:14:2b: 44:38:94:25:db:1c:c4:36:10:25:91:8c:21:3f:67:86:f4:2d: ee:32:51:05:ba:df:61:1f:88:01:46:c3:c7:7f:c8:0f:30:f9: 9d:c8:a5:81:8e:fe:ac:c7:7e:f1:76:1a:d2:f2:33:22:46:f0: 2a:65:4a:01:83:54:b3:c7:0e:02:da:1c:49:47:26:4b:9b:b3: a2:7c:10:96:99:65:fc:1c:5c:41:a8:73:68:ea:23:a3:94:9f: 7b:50:c6:50:6a:49:ca:37:77:e5:e6:00:d3:bf:df:3c:a0:90: 97:60:69:3b:68:76:bc:b3:4c:e1:32:84:22:67:77:06:b2:64: 97:0f:ef:ae -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPBNg/LkwuqbU4DsrVBepgA65j4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA2MjkxNzI3MzRaFw0yNTA2MjgxNzMyMzRaMDMxMTAvBgNV BAMTKEI1NkVFRTczMDRFOEQ1MDdGQzFGODc5MzA5MEUxRDk3NUVGQzk2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQUYCpMCArRMpzld6X0CppnMNz yjOxw2iJRDG0DpgrlWepG4y2OHIM2vKkaS0oI7BCjStkvCqQvtgVqp2KRl6UHCuQ XrrwAKZPr3KVLUJdY7umMr3V0KP3rXYFzoiAc3W8igDiFq3qSg1oMgv+UA6hrH6/ k6RxiLuvct+Qms0CQExcadKWHR76DHMApzDua99mnbaie18atHmamoDZcLSJapsD 0Cbh6+g3U154PL3pVTs4ytg8tKvbxR+baOgUUfeDm7ITWjO3yuvcHzjE1ttuVkwv sUf/DWJYS9iOCCa9j/Dpe5oABdYmv2jFIN/bFCVC1EjV9oMDSSty0UK8U5tjAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1bu5zBOjVB/wf h5MJDh2XXvyW8TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNU5X Z0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVO V2dHVG55UEpUdnZoQllXNDhWaVRuMVdLaDhpY3lTdFZlY3hxN3lUelZ0LzAvQjU2 RUVFNzMwNEU4RDUwN0ZDMUY4NzkzMDkwRTFEOTc1RUZDOTZGMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLe3IAwQCqukUMA0EAgACMAcDBQAoBE7kMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQYATANBgkqhkiG9w0BAQsFAAOCAQEAgyPYIv1z mINOeajjsoFs+f0bXDzgcDFmmMffHCaycDpHSwUYzSYxKiPkkAPDNFetLlF82rW4 52e9s5nBA/skRplgjSRaLugzPnBmkB6KuQj8zvZ8EC0IbGRtghh0/L/5dVJqX3Oc mYrA548JkLQa/KWzvcwNWcXZuWIO8BQrRDiUJdscxDYQJZGMIT9nhvQt7jJRBbrf YR+IAUbDx3/IDzD5ncilgY7+rMd+8XYa0vIzIkbwKmVKAYNUs8cOAtocSUcmS5uz onwQlpll/BxcQahzaOojo5Sfe1DGUGpJyjd35eYA07/fPKCQl2BpO2h2vLNM4TKE Imd3BrJklw/vrg== -----END CERTIFICATE-----Generated at Fri Nov 22 21:03:25 2024 by rpki-client on console-fra.rpki-client.org