$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD50BD2086E482CF8522C43B160CF72E7053F3E8.cer File: BD50BD2086E482CF8522C43B160CF72E7053F3E8.cer (raw, json) Hash identifier: 4VWy7i9pewJtw8ll535R7YPejVRSOf+i7BHXzp3BBnE= Subject key identifier: BD:50:BD:20:86:E4:82:CF:85:22:C4:3B:16:0C:F7:2E:70:53:F3:E8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2A528F952833F37A572D14DFF67C1EA097B428F5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/BD50BD2086E482CF8522C43B160CF72E7053F3E8.mft caRepository: rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Jan 2025 15:04:48 +0000 Certificate not after: Tue 06 Jan 2026 15:09:48 +0000 Subordinate resources: AS: 265943 IP: 131.196.160.0/22 IP: 2804:4030::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:52:8f:95:28:33:f3:7a:57:2d:14:df:f6:7c:1e:a0:97:b4:28:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 7 15:04:48 2025 GMT Not After : Jan 6 15:09:48 2026 GMT Subject: CN=BD50BD2086E482CF8522C43B160CF72E7053F3E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:c9:d5:fe:2c:ff:c5:7b:e8:d9:04:bb:e0: 78:49:83:06:a6:59:2e:f6:a6:9e:60:e0:a3:34:b7: 9d:c8:64:40:48:9b:ca:8e:52:c7:58:6e:c0:32:5e: d3:96:f4:df:0f:be:9b:9e:3f:78:ea:22:1e:62:db: 95:8d:cd:3d:6a:11:48:34:87:63:39:9b:2f:58:1c: 78:b1:50:b3:b8:7b:7f:3d:00:2e:65:85:77:25:c7: 31:ad:16:32:75:bf:50:ac:e3:d8:01:a2:a6:fe:64: 7b:69:e4:a7:e6:ed:ec:71:0a:cb:ea:f1:4f:8e:56: af:60:89:aa:05:5f:05:ac:da:71:e1:00:3e:5f:db: 08:c6:cb:9e:2a:7e:cc:ec:53:b8:54:e6:1d:68:c8: 81:57:1d:f3:71:2d:44:4e:97:54:b9:ef:d7:f8:40: 07:67:2b:23:46:9b:fb:93:dc:06:72:9d:39:e1:a1: c3:ae:de:6a:e7:b3:12:65:df:29:29:dc:e0:75:5f: 73:28:63:63:d4:43:be:36:48:3a:e2:e6:19:92:b3: 05:98:bd:3c:c4:84:70:20:65:1a:fa:48:be:31:f8: 9e:93:e9:43:87:29:86:40:a1:9d:e9:d9:d9:3c:15: 49:4d:8e:cb:fe:83:6e:89:90:e9:1e:96:99:0b:3e: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:50:BD:20:86:E4:82:CF:85:22:C4:3B:16:0C:F7:2E:70:53:F3:E8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/BD50BD2086E482CF8522C43B160CF72E7053F3E8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.160.0/22 IPv6: 2804:4030::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265943 Signature Algorithm: sha256WithRSAEncryption 02:7f:57:72:0e:84:18:d4:c0:53:8b:c8:56:6d:fd:7d:e9:37: e1:91:19:33:bc:bd:b2:56:0f:9d:a1:9a:60:70:6b:f9:19:22: 64:09:a0:6a:c0:6d:db:21:a7:ad:3b:58:38:3f:f8:b5:71:39: ca:dd:f8:45:15:95:86:56:0e:12:43:89:88:43:04:2d:a8:0b: 07:7d:67:1b:66:06:f0:7b:d9:e5:58:f6:20:56:2a:0b:a4:69: 45:3f:6d:d0:1d:5b:c3:9d:de:7c:c7:c7:71:b4:6b:d3:7d:36: b9:42:01:5b:44:09:41:a0:ef:e2:f6:d5:3f:45:35:94:54:44: d5:d5:b2:46:66:68:9d:2c:37:6d:e2:0c:26:3f:58:f0:33:04: fb:3c:ae:13:58:b3:84:d0:8e:a0:ea:ba:e1:51:9e:b4:c6:06: fc:95:76:2f:9c:72:20:d3:bc:f7:1b:ee:0a:38:29:65:37:0f: 6d:6f:a4:b4:83:e4:90:f2:1a:9f:2a:26:e8:b1:77:d6:6b:4f: af:a8:33:e7:bf:4b:f4:a3:6a:25:2f:4e:fa:46:7a:f1:b7:de: f7:68:49:e6:ed:e9:29:84:78:1f:b6:bb:45:fb:dd:f3:42:17: ab:1c:88:64:35:7a:16:43:77:cd:58:74:91:e6:39:9d:fb:1f: 14:12:e5:e4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKlKPlSgz83pXLRTf9nweoJe0KPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMDcxNTA0NDhaFw0yNjAxMDYxNTA5NDhaMDMxMTAvBgNV BAMTKEJENTBCRDIwODZFNDgyQ0Y4NTIyQzQzQjE2MENGNzJFNzA1M0YzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/cnV/iz/xXvo2QS74HhJgwam WS72pp5g4KM0t53IZEBIm8qOUsdYbsAyXtOW9N8PvpueP3jqIh5i25WNzT1qEUg0 h2M5my9YHHixULO4e389AC5lhXclxzGtFjJ1v1Cs49gBoqb+ZHtp5Kfm7exxCsvq 8U+OVq9giaoFXwWs2nHhAD5f2wjGy54qfszsU7hU5h1oyIFXHfNxLUROl1S579f4 QAdnKyNGm/uT3AZynTnhocOu3mrnsxJl3ykp3OB1X3MoY2PUQ742SDri5hmSswWY vTzEhHAgZRr6SL4x+J6T6UOHKYZAoZ3p2dk8FUlNjsv+g26JkOkelpkLPo2FAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9UL0ghuSCz4Ui xDsWDPcucFPz6DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1Ey dFUzOTZESFFlTGVlYlBZNVM3eFY2eUhZV3BaOFJyYjRHZE54aFZQejQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dR MnRVMzk2REhRZUxlZWJQWTVTN3hWNnlIWVdwWjhScmI0R2ROeGhWUHo0LzAvQkQ1 MEJEMjA4NkU0ODJDRjg1MjJDNDNCMTYwQ0Y3MkU3MDUzRjNFOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg8SgMA0EAgACMAcDBQAoBEAwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQO1zANBgkqhkiG9w0BAQsFAAOCAQEAAn9Xcg6EGNTAU4vI Vm39fek34ZEZM7y9slYPnaGaYHBr+RkiZAmgasBt2yGnrTtYOD/4tXE5yt34RRWV hlYOEkOJiEMELagLB31nG2YG8HvZ5Vj2IFYqC6RpRT9t0B1bw53efMfHcbRr0302 uUIBW0QJQaDv4vbVP0U1lFRE1dWyRmZonSw3beIMJj9Y8DME+zyuE1izhNCOoOq6 4VGetMYG/JV2L5xyINO89xvuCjgpZTcPbW+ktIPkkPIanyom6LF31mtPr6gz579L 9KNqJS9O+kZ68bfe92hJ5u3pKYR4H7a7Rfvd80IXqxyIZDV6FkN3zVh0keY5nfsf FBLl5A== -----END CERTIFICATE-----Generated at Wed Feb 19 22:40:59 2025 by rpki-client