$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer File: B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer (raw, json) Hash identifier: 5CbhnNF2pH12/FdTVZvRKBWWvQKkIYOAjmC2HGMX+6o= Subject key identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6FDC36C5968C54181CCDA778034DA9A335F5023E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft caRepository: rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 20:46:10 +0000 Certificate not after: Thu 03 Apr 2025 20:51:10 +0000 Subordinate resources: AS: 268526 IP: 45.162.28.0/22 IP: 2804:5290::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:dc:36:c5:96:8c:54:18:1c:cd:a7:78:03:4d:a9:a3:35:f5:02:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 20:46:10 2024 GMT Not After : Apr 3 20:51:10 2025 GMT Subject: CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:97:86:87:58:92:1a:f5:51:36:fd:da:e9:25: e5:38:11:44:42:99:ce:d6:ea:70:67:84:33:ba:1f: b2:45:a4:1b:a2:e9:2e:f6:f4:db:8e:fb:60:c5:60: 55:77:d7:3b:31:cf:b2:28:27:cb:0c:53:00:e7:c9: 66:ee:01:34:70:fe:fd:b3:a4:18:69:a1:4a:8a:fa: 01:7b:26:3f:ca:f2:e9:34:82:d0:21:74:d2:2a:40: 1c:1f:8b:7f:f7:3e:1d:d1:61:34:1c:63:df:f4:a7: 6a:e7:16:14:35:39:87:f0:66:9d:7f:17:7f:52:0a: ef:8e:e7:b7:6a:cb:79:d5:9d:81:7e:55:a3:af:ae: ab:27:e2:e8:04:21:88:75:e0:6b:61:db:c9:41:3d: 82:2c:9c:5e:ce:ee:03:8d:84:71:d4:59:27:9f:f5: 4a:79:36:7f:5a:72:ab:1d:96:ea:59:2a:3c:b2:98: 71:1c:1c:9d:7c:cc:24:ba:b6:3f:48:a1:2c:99:29: d3:63:78:a2:1b:e4:1d:70:85:b4:3e:a3:2d:00:1e: 6f:87:43:71:0b:76:1d:a0:b9:b9:d4:2b:e3:a5:ae: 0f:5d:d7:27:05:48:92:d7:78:66:a0:c2:81:8f:94: 3e:37:11:f4:60:f1:31:ab:dd:4e:7c:d2:88:db:ad: a7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.28.0/22 IPv6: 2804:5290::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268526 Signature Algorithm: sha256WithRSAEncryption ce:30:1f:66:7e:95:fa:42:96:29:b1:51:80:25:a6:e1:d8:c0: 5e:a4:95:8a:3c:69:c9:4c:4e:12:a6:db:22:24:b5:fb:4f:5b: fc:4d:83:56:77:f1:37:b4:00:bb:58:80:fb:54:f8:a7:bb:26: 09:6c:c2:5f:7b:7e:1a:9e:04:18:49:60:f7:d4:06:48:96:63: 54:33:17:8a:51:d7:ab:39:72:c3:dc:f7:1a:05:c7:c7:c0:e5: 2c:d4:b3:91:1d:5a:72:c9:c4:64:a7:74:8c:d2:34:9e:df:21: f0:f0:82:e2:fe:27:89:a4:52:21:40:ba:a7:2b:eb:a5:79:00: a6:c3:ba:4c:fa:d9:85:10:e7:8c:a9:27:e8:cc:d8:0c:2b:ed: 48:15:53:b1:11:f0:c4:4f:91:4e:62:60:89:0b:8e:b1:20:dd: 0b:0d:18:b2:6c:0d:d8:e2:68:7f:14:81:c8:38:9f:a8:ad:26: c7:93:99:b3:9e:61:81:94:ba:c8:30:b6:cf:4b:89:30:fe:19: 41:04:93:4d:8a:c4:f1:3f:1c:5d:f7:97:90:37:1d:81:1f:e5: 6d:8c:37:f2:97:e0:1c:ae:49:2f:ec:6b:12:5c:27:76:a2:c1: 51:0d:5f:48:65:94:23:d6:a4:30:5b:9e:ff:1f:42:58:71:55: 57:5f:56:8b -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUb9w2xZaMVBgczad4A02pozX1Aj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQyMDQ2MTBaFw0yNTA0MDMyMDUxMTBaMDMxMTAvBgNV BAMTKEI1OTczODFGMkE3RkRFMDhCMzYzOThBRkIwRkNFN0U3QjZCRDMxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgl4aHWJIa9VE2/drpJeU4EURC mc7W6nBnhDO6H7JFpBui6S729NuO+2DFYFV31zsxz7IoJ8sMUwDnyWbuATRw/v2z pBhpoUqK+gF7Jj/K8uk0gtAhdNIqQBwfi3/3Ph3RYTQcY9/0p2rnFhQ1OYfwZp1/ F39SCu+O57dqy3nVnYF+VaOvrqsn4ugEIYh14Gth28lBPYIsnF7O7gONhHHUWSef 9Up5Nn9acqsdlupZKjyymHEcHJ18zCS6tj9IoSyZKdNjeKIb5B1whbQ+oy0AHm+H Q3ELdh2gubnUK+Olrg9d1ycFSJLXeGagwoGPlD43EfRg8TGr3U580ojbradtAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1lzgfKn/eCLNj mK+w/Ofntr0x8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1lz cXNzemE3Z3NzOTZNZGY1V3ZMR25wSFBNQ0p1REVGN0E0dEc3Sm9oWFQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1lz cXNzemE3Z3NzOTZNZGY1V3ZMR25wSFBNQ0p1REVGN0E0dEc3Sm9oWFQvMS9CNTk3 MzgxRjJBN0ZERTA4QjM2Mzk4QUZCMEZDRTdFN0I2QkQzMUYwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItohwwDQQCAAIwBwMFACgEUpAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBjuMA0GCSqGSIb3DQEBCwUAA4IBAQDOMB9mfpX6QpYpsVGA Jabh2MBepJWKPGnJTE4SptsiJLX7T1v8TYNWd/E3tAC7WID7VPinuyYJbMJfe34a ngQYSWD31AZIlmNUMxeKUderOXLD3PcaBcfHwOUs1LORHVpyycRkp3SM0jSe3yHw 8ILi/ieJpFIhQLqnK+uleQCmw7pM+tmFEOeMqSfozNgMK+1IFVOxEfDET5FOYmCJ C46xIN0LDRiybA3Y4mh/FIHIOJ+orSbHk5mznmGBlLrIMLbPS4kw/hlBBJNNisTx Pxxd95eQNx2BH+VtjDfyl+Acrkkv7GsSXCd2osFRDV9IZZQj1qQwW57/H0JYcVVX X1aL -----END CERTIFICATE-----Generated at Sat Nov 23 06:12:05 2024 by rpki-client on console-ams.rpki-client.org