$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer File: BA84972F94DED1627363CADBFA872D5EA75BBC41.cer (raw, json) Hash identifier: PA3PUYv7SQZ7oidHRGfZvD3iqJYNvNJUvsCV6hoVfeM= Subject key identifier: BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 32BACFD90CACE9E8C5A571A9DDD5785E8F43D3F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft caRepository: rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:12 +0000 Certificate not after: Wed 02 Apr 2025 18:31:12 +0000 Subordinate resources: AS: 267533 IP: 201.182.208.0/22 IP: 2804:42e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ba:cf:d9:0c:ac:e9:e8:c5:a5:71:a9:dd:d5:78:5e:8f:43:d3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:12 2024 GMT Not After : Apr 2 18:31:12 2025 GMT Subject: CN=BA84972F94DED1627363CADBFA872D5EA75BBC41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6c:85:55:11:13:27:45:dd:bc:36:63:b8:79: e3:a0:40:f6:bc:75:ae:a2:90:be:39:ba:fd:9e:85: 34:66:23:6f:0a:ab:84:50:04:29:76:38:c1:86:ec: 2d:e6:35:d1:f9:f9:12:a1:69:6d:61:90:25:9a:99: e4:40:db:ce:9c:d0:1f:4a:07:a8:3f:37:e5:81:03: a7:36:2f:95:d4:3c:68:6c:e6:c4:d1:7c:76:ea:69: df:cd:cd:db:18:ec:77:a0:8e:14:84:39:aa:7e:21: 45:a3:16:79:f5:10:4a:b6:cb:40:e0:0c:e5:55:27: 45:3b:ba:05:09:e3:03:fc:e6:e5:c5:ec:0d:b7:f9: 94:1a:6a:ad:b5:6b:45:be:3f:d7:d5:74:43:e4:50: 0a:b6:44:5a:4d:51:3c:c0:b9:98:f8:f4:f3:c0:0e: 0a:82:f7:a5:e5:d1:f4:f1:77:32:fb:b6:db:c9:f5: 28:53:09:43:1f:bf:77:8d:3e:99:6c:5e:5b:c4:62: 7b:e2:87:a8:78:df:45:5e:cc:92:77:c7:18:d7:19: 88:0c:bd:d9:7f:06:7c:eb:2c:cf:87:95:14:9d:c8: 10:d3:5a:86:c9:a8:8c:bc:b4:61:09:e6:1e:cd:cf: 91:84:ac:27:96:82:36:28:5c:ca:f9:15:4d:a0:5a: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.182.208.0/22 IPv6: 2804:42e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267533 Signature Algorithm: sha256WithRSAEncryption 81:7e:1d:32:fe:0f:5b:88:d6:be:b0:bd:13:14:82:99:2d:92: 47:be:09:dd:4e:a1:e0:09:f8:72:56:2c:5b:cc:06:cf:b7:19: 2d:76:90:0d:b8:b5:a5:ee:f0:c7:e2:9f:a2:1a:48:23:4f:54: 50:83:a7:e9:5b:b7:da:40:7c:f7:1c:5c:cf:9f:28:24:86:a9: 89:8d:b0:68:86:03:89:f0:91:0e:5d:da:68:91:32:3a:62:e6: 6e:b8:ef:3d:a1:b6:51:1b:36:ed:0d:01:7d:a5:d7:66:1f:d9: 1e:a8:50:c5:a6:b4:30:2a:69:e0:09:54:1a:48:e1:7e:4b:18: 3c:06:b0:c5:be:94:12:d1:b9:5c:ca:32:d9:5a:88:40:17:b8: a0:89:fa:90:96:5e:fb:59:65:11:de:c1:44:4c:a8:11:7a:89: 86:45:4d:bc:07:36:49:42:ef:b3:1a:83:cb:b7:e8:81:bb:5a: 5d:b8:b0:a3:f6:5e:3c:ce:3c:8c:30:e2:51:47:d3:de:64:6c: 46:a2:2e:3c:88:86:a2:61:2a:49:6b:8a:46:e2:fe:43:09:0d: c6:88:3f:c8:51:91:b1:cf:e1:7e:f9:e0:14:10:31:05:7f:56: fe:f2:ea:45:3b:0d:c3:2c:01:83:e9:44:d3:d2:83:db:bd:f4: 8c:15:e1:05 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUMrrP2Qys6ejFpXGp3dV4Xo9D0/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2MTJaFw0yNTA0MDIxODMxMTJaMDMxMTAvBgNV BAMTKEJBODQ5NzJGOTRERUQxNjI3MzYzQ0FEQkZBODcyRDVFQTc1QkJDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDebIVVERMnRd28NmO4eeOgQPa8 da6ikL45uv2ehTRmI28Kq4RQBCl2OMGG7C3mNdH5+RKhaW1hkCWameRA286c0B9K B6g/N+WBA6c2L5XUPGhs5sTRfHbqad/NzdsY7HegjhSEOap+IUWjFnn1EEq2y0Dg DOVVJ0U7ugUJ4wP85uXF7A23+ZQaaq21a0W+P9fVdEPkUAq2RFpNUTzAuZj49PPA DgqC96Xl0fTxdzL7ttvJ9ShTCUMfv3eNPplsXlvEYnvih6h430VezJJ3xxjXGYgM vdl/BnzrLM+HlRSdyBDTWobJqIy8tGEJ5h7Nz5GErCeWgjYoXMr5FU2gWsUzAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6hJcvlN7RYnNj ytv6hy1ep1u8QTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTJl MlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pEcGQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTJl MlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pEcGQvMS9CQTg0 OTcyRjk0REVEMTYyNzM2M0NBREJGQTg3MkQ1RUE3NUJCQzQxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALJttAwDQQCAAIwBwMFACgEQuAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBUNMA0GCSqGSIb3DQEBCwUAA4IBAQCBfh0y/g9biNa+sL0T FIKZLZJHvgndTqHgCfhyVixbzAbPtxktdpANuLWl7vDH4p+iGkgjT1RQg6fpW7fa QHz3HFzPnygkhqmJjbBohgOJ8JEOXdpokTI6YuZuuO89obZRGzbtDQF9pddmH9ke qFDFprQwKmngCVQaSOF+Sxg8BrDFvpQS0blcyjLZWohAF7igifqQll77WWUR3sFE TKgReomGRU28BzZJQu+zGoPLt+iBu1pduLCj9l48zjyMMOJRR9PeZGxGoi48iIai YSpJa4pG4v5DCQ3GiD/IUZGxz+F++eAUEDEFf1b+8upFOw3DLAGD6UTT0oPbvfSM FeEF -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:34 2024 by rpki-client on console-fra.rpki-client.org