$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer File: BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer (raw, json) Hash identifier: iPqkRzFF37JPbJXfEqlj5ys41MqoPhYreMkuPCd+VnE= Subject key identifier: BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 531E426528DE4D6F45A583866AF6392CFF2D168E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft caRepository: rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 19:22:21 +0000 Certificate not after: Thu 03 Apr 2025 19:27:21 +0000 Subordinate resources: AS: 269649 IP: 45.189.20.0/22 IP: 2804:67c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 05:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1e:42:65:28:de:4d:6f:45:a5:83:86:6a:f6:39:2c:ff:2d:16:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 19:22:21 2024 GMT Not After : Apr 3 19:27:21 2025 GMT Subject: CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:48:37:9c:4e:0c:c2:6e:15:3a:b1:59:57: 8a:3e:3c:cc:7f:b9:5a:4b:8f:8f:7d:d3:94:01:37: 65:87:64:b8:7c:4a:8c:67:6e:1a:53:99:8e:28:eb: 30:a3:8a:cb:3e:b2:fb:5a:72:07:95:ed:08:58:8b: 9b:27:85:97:28:c2:da:e3:6a:cd:66:29:34:0e:43: e0:07:e7:cf:17:3d:bc:8b:4a:19:fb:a5:f6:b0:17: ef:e8:f6:5d:81:b7:48:2d:53:10:1b:2e:8b:70:62: ad:26:67:29:b3:1d:1c:d9:7e:f5:99:4c:db:40:03: 0a:c9:b7:85:69:94:37:fe:18:ec:0c:2b:d6:1d:23: b9:a6:83:b9:d2:5c:55:73:7e:ae:9b:7b:5c:2c:e0: 18:e9:76:86:63:1c:ae:9d:d9:cf:62:18:87:6a:85: 21:63:02:f5:22:4c:55:6e:71:b6:7d:ae:40:de:cc: f4:94:00:d5:86:d7:78:70:ae:d3:a4:5f:b6:9a:62: 18:e1:05:33:2b:41:73:f0:b3:36:1a:fb:3c:62:43: 3d:3f:c4:d7:f1:82:1e:8c:aa:f6:e6:88:ea:fc:19: 18:52:3d:08:66:3b:5f:7a:73:db:0b:78:4b:68:d3: b2:94:9e:df:13:b8:85:da:3d:72:6a:74:ef:60:2f: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.20.0/22 IPv6: 2804:67c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269649 Signature Algorithm: sha256WithRSAEncryption 65:08:25:74:5f:5c:ea:dc:61:53:04:21:eb:2a:23:28:ca:f2: cb:46:b4:ba:44:48:f5:7c:d8:a7:c3:fb:fc:df:7d:6c:1a:4d: 8b:26:3c:c7:ee:ba:11:1c:79:84:af:aa:90:ee:63:7d:79:da: 4c:21:e9:f9:1f:8d:18:6a:5e:66:f8:03:93:cc:57:83:8b:d1: 6c:e4:8c:d7:0b:3f:35:a3:f7:43:c5:46:b4:ff:cf:d1:d7:63: 68:4a:f4:71:f8:2e:a9:ac:de:32:b0:a3:28:32:31:2a:40:b2: 3a:e8:73:b5:20:f1:04:9f:0e:a9:1b:bb:93:7f:9f:92:ee:7d: b1:20:c5:44:79:20:2a:0f:89:cb:3d:0c:7b:19:ee:2d:63:1c: 1a:77:e7:6b:46:f1:66:fb:dd:65:0e:6c:07:cb:c9:58:2f:fe: b8:bd:37:12:ca:d6:cc:56:cd:cb:ed:75:a2:0f:3e:04:64:ec: 5c:ec:c4:32:d7:0d:d7:bf:ef:12:b5:35:db:15:ee:12:ea:87: 7a:48:f6:bf:48:a9:49:80:a7:75:72:90:16:5e:1d:7f:93:57: a0:f3:a4:16:a7:a6:f1:b4:8b:f4:9a:c0:0e:f1:7d:75:46:55: 79:a4:dd:86:ee:ae:b5:f4:e1:9c:f4:15:f4:9d:15:4f:82:d2: e4:b1:38:12 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUUx5CZSjeTW9FpYOGavY5LP8tFo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxOTIyMjFaFw0yNTA0MDMxOTI3MjFaMDMxMTAvBgNV BAMTKEJCRDExREY0OTI3M0QxQzVCMTMwMTY1RUJENzE2MUEzRTkzRDE2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcyUg3nE4Mwm4VOrFZV4o+PMx/ uVpLj49905QBN2WHZLh8SoxnbhpTmY4o6zCjiss+svtacgeV7QhYi5snhZcowtrj as1mKTQOQ+AH588XPbyLShn7pfawF+/o9l2Bt0gtUxAbLotwYq0mZymzHRzZfvWZ TNtAAwrJt4VplDf+GOwMK9YdI7mmg7nSXFVzfq6be1ws4BjpdoZjHK6d2c9iGIdq hSFjAvUiTFVucbZ9rkDezPSUANWG13hwrtOkX7aaYhjhBTMrQXPwszYa+zxiQz0/ xNfxgh6MqvbmiOr8GRhSPQhmO196c9sLeEto07KUnt8TuIXaPXJqdO9gL9yrAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS70R30knPRxbEw Fl69cWGj6T0WKTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUJw ZVpMcXZVZFo4V1VjUU16Uml5QXRDdjRTWktQTDVWdFZUTHZaRmlDY04vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUJw ZVpMcXZVZFo4V1VjUU16Uml5QXRDdjRTWktQTDVWdFZUTHZaRmlDY04vMS9CQkQx MURGNDkyNzNEMUM1QjEzMDE2NUVCRDcxNjFBM0U5M0QxNjI5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItvRQwDQQCAAIwBwMFACgEZ8QwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBB1RMA0GCSqGSIb3DQEBCwUAA4IBAQBlCCV0X1zq3GFTBCHr KiMoyvLLRrS6REj1fNinw/v8331sGk2LJjzH7roRHHmEr6qQ7mN9edpMIen5H40Y al5m+AOTzFeDi9Fs5IzXCz81o/dDxUa0/8/R12NoSvRx+C6prN4ysKMoMjEqQLI6 6HO1IPEEnw6pG7uTf5+S7n2xIMVEeSAqD4nLPQx7Ge4tYxwad+drRvFm+91lDmwH y8lYL/64vTcSytbMVs3L7XWiDz4EZOxc7MQy1w3Xv+8StTXbFe4S6od6SPa/SKlJ gKd1cpAWXh1/k1eg86QWp6bxtIv0msAO8X11RlV5pN2G7q619OGc9BX0nRVPgtLk sTgS -----END CERTIFICATE-----Generated at Tue Jun 18 07:41:09 2024 by rpki-client on console-ams.rpki-client.org