$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer File: C0209F89D582107086D50ECA973AB99AA9BE2FCB.cer (raw, json) Hash identifier: A1Qkv48yU/Ws0pqetgu8UT6DjQYiLmYgopHk9xiwfXk= Subject key identifier: C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6FFA0B70B13593FA8C28025F85962FC632D67351 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.mft caRepository: rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 06:01:03 +0000 Certificate not after: Thu 03 Apr 2025 06:06:03 +0000 Subordinate resources: AS: 266327 IP: 170.238.160.0/22 IP: 2804:361c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:fa:0b:70:b1:35:93:fa:8c:28:02:5f:85:96:2f:c6:32:d6:73:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 06:01:03 2024 GMT Not After : Apr 3 06:06:03 2025 GMT Subject: CN=C0209F89D582107086D50ECA973AB99AA9BE2FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:39:3f:c6:d1:c3:49:76:83:6a:8f:35:9a: 11:b0:d8:39:a0:3e:19:33:5b:23:7a:0b:7c:b8:46: 3c:4b:ac:35:f0:7f:5e:0b:76:c9:f0:e4:ec:63:74: 10:32:59:37:89:88:02:03:9a:5b:5c:58:f7:54:70: 32:85:12:41:ad:e7:1a:a9:52:d8:3f:87:eb:8e:87: ad:f8:0d:17:ee:c1:8e:4c:b2:e8:fd:7f:fd:d0:0c: d9:c4:fb:6d:78:00:53:4c:22:17:f2:54:55:d5:ea: 47:15:db:dc:62:af:79:9c:b8:79:da:64:c9:1b:45: 9a:bd:49:18:bb:14:4f:c7:1d:b6:3d:35:d0:40:54: a2:44:02:d0:2e:23:a5:a1:2a:c6:e4:92:88:ec:96: b2:34:a0:60:84:f7:60:d4:51:40:94:bb:e7:f9:45: 8e:43:2f:49:7c:65:00:79:51:3a:d1:15:c4:ea:d4: 84:34:94:d3:c8:b0:fe:22:29:87:1b:cc:14:6d:8f: aa:cc:45:14:e9:eb:a1:ad:99:25:c8:69:72:86:db: 19:c6:45:77:ce:47:ca:54:4e:b9:d8:46:a8:d8:bd: 22:00:b7:f8:af:84:c1:45:83:7a:15:63:99:4e:60: c8:fd:8d:4d:4e:fc:7f:8b:3c:55:10:53:c7:ec:a5: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:20:9F:89:D5:82:10:70:86:D5:0E:CA:97:3A:B9:9A:A9:BE:2F:CB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/1/C0209F89D582107086D50ECA973AB99AA9BE2FCB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.160.0/22 IPv6: 2804:361c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266327 Signature Algorithm: sha256WithRSAEncryption 5d:b2:0a:79:80:9f:5e:df:c1:50:70:e1:9d:18:4a:a6:34:40: 62:c0:ec:63:e0:4b:81:7e:b2:ea:1b:ef:4e:8a:88:07:66:e8: 04:c1:78:e2:12:7e:98:97:1a:27:f9:85:46:2b:b4:22:15:41: 14:40:3b:d8:16:08:0c:de:e0:3e:72:bb:d7:2e:e4:ab:55:9e: fb:53:14:14:75:01:75:95:12:32:f6:d3:35:4b:4f:cd:4a:2e: 76:52:82:52:5f:5a:b5:6c:29:44:2f:cc:91:16:25:41:ae:58: f9:6a:a4:8d:ae:cf:07:4a:a1:0a:89:44:0b:61:2d:22:e8:89: b8:3a:0b:d4:d6:90:8c:41:5a:ee:4e:19:57:da:04:14:3b:68: 44:19:46:12:ab:8a:4a:f7:6a:3f:e3:22:72:41:f4:9e:e9:fb: 13:f4:1b:41:38:df:fb:25:c9:ae:93:3b:78:9e:0b:6f:63:d1: 98:02:e9:c4:48:86:af:4d:2a:0b:96:53:7c:bb:8f:f4:af:8b: 7b:03:0c:26:4c:69:f1:e8:ea:10:e0:0d:7b:4e:0a:aa:60:d5: 13:2e:d0:c5:cb:d9:3c:62:28:52:18:44:0e:8d:1f:b8:6f:51: 25:72:6f:6f:c0:a6:cc:ce:fd:68:e8:76:d2:fa:20:c0:65:84: b0:53:8b:fe -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUb/oLcLE1k/qMKAJfhZYvxjLWc1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNjAxMDNaFw0yNTA0MDMwNjA2MDNaMDMxMTAvBgNV BAMTKEMwMjA5Rjg5RDU4MjEwNzA4NkQ1MEVDQTk3M0FCOTlBQTlCRTJGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxTk/xtHDSXaDao81mhGw2Dmg PhkzWyN6C3y4RjxLrDXwf14Ldsnw5OxjdBAyWTeJiAIDmltcWPdUcDKFEkGt5xqp Utg/h+uOh634DRfuwY5Msuj9f/3QDNnE+214AFNMIhfyVFXV6kcV29xir3mcuHna ZMkbRZq9SRi7FE/HHbY9NdBAVKJEAtAuI6WhKsbkkojslrI0oGCE92DUUUCUu+f5 RY5DL0l8ZQB5UTrRFcTq1IQ0lNPIsP4iKYcbzBRtj6rMRRTp66GtmSXIaXKG2xnG RXfOR8pUTrnYRqjYvSIAt/ivhMFFg3oVY5lOYMj9jU1O/H+LPFUQU8fspbVFAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTAIJ+J1YIQcIbV DsqXOrmaqb4vyzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR214 ZUNINE1XQVRxeFZ3OW15QTFwUW9ZTnNNdUNCZnhqcm03NDNDVkJYMUcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR214 ZUNINE1XQVRxeFZ3OW15QTFwUW9ZTnNNdUNCZnhqcm03NDNDVkJYMUcvMS9DMDIw OUY4OUQ1ODIxMDcwODZENTBFQ0E5NzNBQjk5QUE5QkUyRkNCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKq7qAwDQQCAAIwBwMFACgENhwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBBXMA0GCSqGSIb3DQEBCwUAA4IBAQBdsgp5gJ9e38FQcOGd GEqmNEBiwOxj4EuBfrLqG+9OiogHZugEwXjiEn6Ylxon+YVGK7QiFUEUQDvYFggM 3uA+crvXLuSrVZ77UxQUdQF1lRIy9tM1S0/NSi52UoJSX1q1bClEL8yRFiVBrlj5 aqSNrs8HSqEKiUQLYS0i6Im4OgvU1pCMQVruThlX2gQUO2hEGUYSq4pK92o/4yJy QfSe6fsT9BtBON/7Jcmukzt4ngtvY9GYAunESIavTSoLllN8u4/0r4t7AwwmTGnx 6OoQ4A17TgqqYNUTLtDFy9k8YihSGEQOjR+4b1Elcm9vwKbMzv1o6HbS+iDAZYSw U4v+ -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:34 2024 by rpki-client on console-fra.rpki-client.org