$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.cer File: BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.cer (raw, json) Hash identifier: w3BpXeVNYJc7xhvJWMcslcuKpo3xnb3s2JFelJizYc4= Subject key identifier: BB:7A:F2:63:1F:65:C6:E5:A5:7A:CF:0D:BA:13:E8:87:EE:7F:74:AA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 24D3879ECF8796DEC0E0B504B4865E3A57795248 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.mft caRepository: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 09:20:17 +0000 Certificate not after: Thu 03 Apr 2025 09:25:17 +0000 Subordinate resources: AS: 270428 IP: 190.111.184.0/22 IP: 2804:6bd4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d3:87:9e:cf:87:96:de:c0:e0:b5:04:b4:86:5e:3a:57:79:52:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 09:20:17 2024 GMT Not After : Apr 3 09:25:17 2025 GMT Subject: CN=BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:03:fb:f3:7e:92:59:67:2e:b0:1c:a5:23:db: ff:1d:0a:85:65:e9:31:3b:a0:f2:5d:44:33:5a:3d: b2:7d:b0:c8:86:9e:6d:50:00:9d:86:e9:0b:76:84: 39:e2:76:a0:c7:a3:af:06:2c:11:62:dc:f3:54:50: dc:fa:cd:14:85:0b:78:b6:78:26:2d:93:99:47:8c: 9d:93:fb:bf:4b:c1:ac:0d:e4:28:df:0b:77:6e:4f: 6b:ba:7e:bc:16:b4:be:ca:bb:de:5e:90:b8:ed:25: 69:ab:45:20:d0:a2:fb:22:80:ea:5d:ef:87:c9:d7: 82:48:db:03:78:9c:5b:f5:12:b2:93:21:7b:66:19: 4f:8f:3d:62:2a:be:c3:48:b7:1e:62:2e:b5:00:06: f6:de:b9:22:34:46:32:85:18:65:19:f0:00:34:41: 08:64:ec:ca:6e:98:e9:12:eb:fe:0c:4d:b6:d3:66: a7:71:31:e0:ae:9c:5b:e6:c1:94:b1:0b:01:f8:fb: 6d:21:57:36:74:af:f3:2c:9e:79:b1:be:d8:ff:18: 62:70:21:f7:05:4b:a2:84:08:af:11:64:83:68:3d: ca:52:33:57:90:26:f8:65:89:b0:49:16:db:9a:3c: 14:1b:6d:12:58:a9:45:3b:05:3b:ad:28:6b:e5:49: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:7A:F2:63:1F:65:C6:E5:A5:7A:CF:0D:BA:13:E8:87:EE:7F:74:AA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.184.0/22 IPv6: 2804:6bd4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270428 Signature Algorithm: sha256WithRSAEncryption 7d:50:12:c0:77:bc:1d:f4:cb:10:59:61:cb:da:8d:96:f7:37: 72:68:5d:40:6f:3a:66:4a:a4:c5:d4:61:8f:df:4a:f2:93:a7: b8:5d:3c:5c:dd:fd:44:1c:fc:19:4e:66:79:5c:93:c7:ec:36: 33:d3:c4:fc:ca:d5:a7:a9:9d:12:56:ef:d5:e7:63:21:fd:73: 28:dd:99:c7:80:cc:17:7f:be:22:0c:94:d1:d4:90:c7:5e:be: 20:1c:d2:a5:74:c3:0e:44:43:f3:9d:42:c1:dd:ec:fe:14:4a: 26:da:d0:4b:d0:e0:81:4e:90:77:db:9e:10:d8:68:71:52:aa: 10:b8:05:ab:de:24:99:4e:36:f7:a7:ea:20:9f:02:0a:5a:03: de:eb:bc:c8:16:df:b3:fe:5c:ec:cd:6a:c0:c7:de:cc:3f:bd: 15:78:c3:64:45:10:cf:5d:32:bc:e5:89:bf:52:1d:0d:71:25: 9b:48:f9:46:30:2e:79:8e:c0:60:ee:cc:ac:78:cc:0c:bb:8d: 5a:7a:1a:1e:c1:5e:a9:b7:da:5e:b2:b2:62:83:03:4b:d3:a5: c5:86:47:0c:50:e1:68:25:cb:3c:3b:95:6f:fd:d4:fe:bd:43: 97:36:29:db:ec:8f:a4:2a:ef:7d:67:72:29:b7:ac:f8:60:4c: e2:d0:52:08 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUJNOHns+Hlt7A4LUEtIZeOld5UkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwOTIwMTdaFw0yNTA0MDMwOTI1MTdaMDMxMTAvBgNV BAMTKEJCN0FGMjYzMUY2NUM2RTVBNTdBQ0YwREJBMTNFODg3RUU3Rjc0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbA/vzfpJZZy6wHKUj2/8dCoVl 6TE7oPJdRDNaPbJ9sMiGnm1QAJ2G6Qt2hDnidqDHo68GLBFi3PNUUNz6zRSFC3i2 eCYtk5lHjJ2T+79LwawN5CjfC3duT2u6frwWtL7Ku95ekLjtJWmrRSDQovsigOpd 74fJ14JI2wN4nFv1ErKTIXtmGU+PPWIqvsNItx5iLrUABvbeuSI0RjKFGGUZ8AA0 QQhk7MpumOkS6/4MTbbTZqdxMeCunFvmwZSxCwH4+20hVzZ0r/Msnnmxvtj/GGJw IfcFS6KECK8RZINoPcpSM1eQJvhlibBJFtuaPBQbbRJYqUU7BTutKGvlSdJpAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7evJjH2XG5aV6 zw26E+iH7n90qjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3F3 NUtzYkZRYnB1YzVTbU14MjJoMkU3MVNnYXZGaURNYVAxRHgzcFpzdTcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3F3 NUtzYkZRYnB1YzVTbU14MjJoMkU3MVNnYXZGaURNYVAxRHgzcFpzdTcvMS9CQjdB RjI2MzFGNjVDNkU1QTU3QUNGMERCQTEzRTg4N0VFN0Y3NEFBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK+b7gwDQQCAAIwBwMFACgEa9QwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCBcMA0GCSqGSIb3DQEBCwUAA4IBAQB9UBLAd7wd9MsQWWHL 2o2W9zdyaF1AbzpmSqTF1GGP30ryk6e4XTxc3f1EHPwZTmZ5XJPH7DYz08T8ytWn qZ0SVu/V52Mh/XMo3ZnHgMwXf74iDJTR1JDHXr4gHNKldMMOREPznULB3ez+FEom 2tBL0OCBTpB3254Q2GhxUqoQuAWr3iSZTjb3p+ognwIKWgPe67zIFt+z/lzszWrA x97MP70VeMNkRRDPXTK85Ym/Uh0NcSWbSPlGMC55jsBg7syseMwMu41aehoewV6p t9pesrJigwNL06XFhkcMUOFoJcs8O5Vv/dT+vUOXNinb7I+kKu99Z3Ipt6z4YEzi 0FII -----END CERTIFICATE-----Generated at Sun Jun 2 00:29:21 2024 by rpki-client on console-ams.rpki-client.org