$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer File: C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer (raw, json) Hash identifier: pQZ0UrPkcpQJV7FRnwjRaW8Bzwa71bmlOAqZk8nZON0= Subject key identifier: C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1BDD9F76DDAF7320B719136D962C5C5A83F7136B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.mft caRepository: rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 20:06:17 +0000 Certificate not after: Wed 02 Apr 2025 20:11:17 +0000 Subordinate resources: AS: 267624 IP: 45.71.228.0/22 IP: 2804:4450::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:dd:9f:76:dd:af:73:20:b7:19:13:6d:96:2c:5c:5a:83:f7:13:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 20:06:17 2024 GMT Not After : Apr 2 20:11:17 2025 GMT Subject: CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:02:50:c6:03:44:9a:62:c1:a1:2a:3e:84: b8:94:4c:05:cd:75:38:05:fb:9c:6e:81:70:8f:ea: 56:73:06:4f:93:9b:39:f3:5d:8a:62:7a:46:fd:e2: fd:09:2f:75:fa:83:f1:9a:c0:45:15:2d:a9:8c:81: 2f:9a:d2:c9:cc:e7:81:32:68:35:2f:c8:58:31:e4: d2:84:e4:50:3e:33:96:20:b8:40:a9:be:28:6a:2c: af:94:2c:fd:6d:f0:a1:33:3b:4b:72:4a:d6:42:3c: 05:2a:dd:a1:7a:c0:bb:2b:f9:b1:03:a1:51:66:f4: 33:1f:e4:e4:97:a8:12:0a:4d:dd:52:28:fa:4d:cc: 10:96:45:50:cb:bb:fa:81:fe:d0:34:49:db:7b:64: 64:1d:58:3b:58:fe:90:68:92:31:43:cb:b3:06:bb: 77:25:e3:e1:04:f1:1f:07:3a:1e:d2:48:de:46:e5: e4:eb:9f:40:55:69:22:3e:cd:05:06:98:3f:bf:2a: ca:70:5c:71:72:2c:82:8f:a7:c2:b5:76:9b:10:0c: 06:a1:41:d8:ae:9c:02:d3:8c:4c:66:d7:41:9b:6b: 96:f7:d8:cf:c4:cc:68:e2:9a:f1:b5:30:0f:18:11: 2e:b8:ac:4d:2f:50:43:6a:32:54:f8:56:b2:31:22: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.228.0/22 IPv6: 2804:4450::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267624 Signature Algorithm: sha256WithRSAEncryption d6:28:e6:38:61:0b:2a:13:72:5a:d6:26:53:04:85:df:f3:24: 14:71:69:35:fd:33:93:a7:bd:cf:38:06:40:e0:7f:c1:4a:6d: f2:ba:33:0e:54:f5:f6:ef:d3:b8:43:ab:b9:86:67:79:59:ed: d1:f8:48:b5:9e:e2:7d:6d:d4:b1:d3:f9:3e:e9:4f:2a:41:bf: 0b:d1:55:6a:25:24:9d:c9:63:0a:f8:10:d0:94:07:95:52:c2: 21:3f:57:50:9e:d6:ee:a5:04:89:81:87:93:e2:c5:07:b3:12: d5:f7:9f:45:d7:ad:25:37:3a:ff:36:ca:8a:47:e9:96:51:f0: 11:f8:19:15:cd:2b:41:16:09:c9:25:fb:c9:31:c4:47:a2:fa: fe:37:b3:15:38:ec:7d:43:1e:1c:cf:2a:4c:50:a9:65:28:fe: 65:d2:c0:10:71:25:86:a0:9f:01:eb:8c:88:98:48:f6:45:b5: 61:4b:7d:3c:84:b1:52:5b:85:a3:be:16:ca:84:44:3c:79:d4: cf:f7:8b:b0:09:0d:22:4b:8f:ed:7a:d6:50:60:06:82:51:71: 04:73:f6:b7:90:2d:41:5a:6b:e1:e1:b9:7d:8e:ab:24:df:46: 4e:5c:0b:9c:5e:b4:83:b0:a6:44:51:0f:82:83:3e:74:33:67: d9:b3:80:a0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUG92fdt2vcyC3GRNtlixcWoP3E2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMDA2MTdaFw0yNTA0MDIyMDExMTdaMDMxMTAvBgNV BAMTKEMyMzUyOEExM0ZFMkFEM0JGNDhGMzI0MjdFQTlCQkREODdDMTJBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7gJQxgNEmmLBoSo+hLiUTAXN dTgF+5xugXCP6lZzBk+TmznzXYpiekb94v0JL3X6g/GawEUVLamMgS+a0snM54Ey aDUvyFgx5NKE5FA+M5YguECpvihqLK+ULP1t8KEzO0tyStZCPAUq3aF6wLsr+bED oVFm9DMf5OSXqBIKTd1SKPpNzBCWRVDLu/qB/tA0Sdt7ZGQdWDtY/pBokjFDy7MG u3cl4+EE8R8HOh7SSN5G5eTrn0BVaSI+zQUGmD+/KspwXHFyLIKPp8K1dpsQDAah QdiunALTjExm10Gba5b32M/EzGjimvG1MA8YES64rE0vUENqMlT4VrIxIr2PAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCNSihP+KtO/SP MkJ+qbvdh8EqATAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2ND ZWlFS1Jic2Z3VnZxMlBmNncyMWFmRFd1WDF5cmVISHU2ZFJWOTU0NWQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nj Q2VpRUtSYnNmd1Z2cTJQZjZ3MjFhZkRXdVgxeXJlSEh1NmRSVjk1NDVkLzEvQzIz NTI4QTEzRkUyQUQzQkY0OEYzMjQyN0VBOUJCREQ4N0MxMkEwMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUfkMA0EAgACMAcDBQAoBERQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVaDANBgkqhkiG9w0BAQsFAAOCAQEA1ijmOGELKhNyWtYm UwSF3/MkFHFpNf0zk6e9zzgGQOB/wUpt8rozDlT19u/TuEOruYZneVnt0fhItZ7i fW3UsdP5PulPKkG/C9FVaiUkncljCvgQ0JQHlVLCIT9XUJ7W7qUEiYGHk+LFB7MS 1fefRdetJTc6/zbKikfpllHwEfgZFc0rQRYJySX7yTHER6L6/jezFTjsfUMeHM8q TFCpZSj+ZdLAEHElhqCfAeuMiJhI9kW1YUt9PISxUluFo74WyoREPHnUz/eLsAkN IkuP7XrWUGAGglFxBHP2t5AtQVpr4eG5fY6rJN9GTlwLnF60g7CmRFEPgoM+dDNn 2bOAoA== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:34 2024 by rpki-client on console-fra.rpki-client.org