$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer File: C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer (raw, json) Hash identifier: PaLh3vWv9rKXEBR5Ob8FF/P5XDYWHZVscBVade1ak80= Subject key identifier: C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6DD10178210B0F6AD3F84A7710841989CC30A95B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.mft caRepository: rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 09 Apr 2024 16:44:32 +0000 Certificate not after: Tue 08 Apr 2025 16:49:32 +0000 Subordinate resources: AS: 268205 IP: 45.236.48.0/22 IP: 2804:4d90::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d1:01:78:21:0b:0f:6a:d3:f8:4a:77:10:84:19:89:cc:30:a9:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 9 16:44:32 2024 GMT Not After : Apr 8 16:49:32 2025 GMT Subject: CN=C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:59:52:75:69:cb:44:a1:91:6f:71:58:e8: 4e:82:27:0e:2d:0f:7a:05:7a:73:c7:b7:a1:91:92: 05:b9:01:21:a4:08:b0:13:ba:24:ed:7a:c1:4c:27: 2b:2d:23:cf:32:b6:2f:07:32:19:6e:71:42:8f:97: da:b2:5c:17:c5:15:38:a8:da:fe:60:6c:53:b5:6d: 38:01:aa:4e:68:49:94:7c:00:ad:be:1a:7d:28:cd: 27:29:c3:ca:ae:ce:3b:ad:5d:3b:5a:7f:a9:a8:0d: 6b:c0:6c:7c:59:6a:30:ad:98:20:80:27:9e:31:28: a9:b8:a1:fb:5e:2a:47:be:34:01:c7:a0:a4:e3:df: 66:5d:7f:f4:65:dc:7e:17:26:21:7e:f2:c2:8d:86: 46:54:bc:98:20:25:20:1d:52:1b:ba:88:78:0e:ff: 14:2e:78:bc:a0:0c:96:39:bd:3a:2a:05:f8:e6:4b: c0:48:c3:73:3c:93:2d:19:a7:99:a7:26:af:e5:57: d3:d4:fb:1a:e2:55:a1:96:f1:a3:57:58:81:d0:4f: 3a:13:cd:be:5b:51:2a:61:a2:33:d8:73:35:54:f0: d3:2d:38:06:7d:a5:00:ed:52:5c:63:62:01:34:65: 66:0f:79:89:98:a0:6e:33:1f:a6:c0:f6:01:e1:d0: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.48.0/22 IPv6: 2804:4d90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268205 Signature Algorithm: sha256WithRSAEncryption 73:e3:ff:20:5a:1d:ed:7f:81:a6:10:98:5f:f8:79:6d:9d:5d: 67:f4:02:50:a4:39:6d:5d:be:44:4d:2b:03:c9:3c:39:a3:b1: 0f:00:5c:3e:62:1c:49:33:0e:95:46:84:54:9b:55:71:4c:8c: 3c:d2:31:c4:17:60:d7:9c:2c:2d:28:c0:fd:f9:e8:33:7e:79: cf:4b:d7:a7:d5:35:f7:f0:bb:cc:c1:b1:5e:57:bd:c0:41:85: bb:fd:7c:b7:85:c1:ff:bd:22:54:ac:0e:c0:99:da:30:79:c9: f2:a5:c4:62:de:d1:7e:2b:6b:f1:ce:48:6e:a6:a5:f8:6a:f9: e0:bb:2b:29:f1:59:a5:a7:a8:49:8a:52:b2:9a:92:1b:6d:c0: f2:c8:1b:e4:89:38:44:14:0c:03:31:78:da:c6:53:7f:17:43: 4f:d2:2f:74:fc:62:4a:0f:70:e3:a9:91:14:66:5f:bb:ae:8a: 09:d6:88:24:d2:e4:96:24:32:2c:17:95:35:11:44:71:6d:be: ac:bd:1e:62:a0:cd:94:3d:55:bd:a5:38:c9:90:27:29:78:25: 7e:fb:af:13:52:0d:19:8b:5f:1f:1a:01:9d:11:72:cb:5f:8b: 85:a4:e2:e5:c5:b8:51:8d:5c:4f:9e:e4:aa:a2:51:67:62:1f: 90:02:2a:1a -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUbdEBeCELD2rT+Ep3EIQZicwwqVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDkxNjQ0MzJaFw0yNTA0MDgxNjQ5MzJaMDMxMTAvBgNV BAMTKEM0MDczMkZCRkQ2RTkzRUMzNEM4QkY1RjQ3QjRGRDc1M0U1QzRCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QVlSdWnLRKGRb3FY6E6CJw4t D3oFenPHt6GRkgW5ASGkCLATuiTtesFMJystI88yti8HMhlucUKPl9qyXBfFFTio 2v5gbFO1bTgBqk5oSZR8AK2+Gn0ozScpw8quzjutXTtaf6moDWvAbHxZajCtmCCA J54xKKm4ofteKke+NAHHoKTj32Zdf/Rl3H4XJiF+8sKNhkZUvJggJSAdUhu6iHgO /xQueLygDJY5vToqBfjmS8BIw3M8ky0Zp5mnJq/lV9PU+xriVaGW8aNXWIHQTzoT zb5bUSphojPYczVU8NMtOAZ9pQDtUlxjYgE0ZWYPeYmYoG4zH6bA9gHh0C7fAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEBzL7/W6T7DTI v19HtP11PlxLBDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSERK WlhMWVBkMURMekRwemU0ZmJTeUZWMlMxTGk5dDRWZXFhWWtKSjdUNEcvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSERK WlhMWVBkMURMekRwemU0ZmJTeUZWMlMxTGk5dDRWZXFhWWtKSjdUNEcvMC9DNDA3 MzJGQkZENkU5M0VDMzRDOEJGNUY0N0I0RkQ3NTNFNUM0QjA0Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt7DAwDQQCAAIwBwMFACgETZAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBetMA0GCSqGSIb3DQEBCwUAA4IBAQBz4/8gWh3tf4GmEJhf +HltnV1n9AJQpDltXb5ETSsDyTw5o7EPAFw+YhxJMw6VRoRUm1VxTIw80jHEF2DX nCwtKMD9+egzfnnPS9en1TX38LvMwbFeV73AQYW7/Xy3hcH/vSJUrA7Amdowecny pcRi3tF+K2vxzkhupqX4avnguysp8Vmlp6hJilKympIbbcDyyBvkiThEFAwDMXja xlN/F0NP0i90/GJKD3DjqZEUZl+7rooJ1ogk0uSWJDIsF5U1EURxbb6svR5ioM2U PVW9pTjJkCcpeCV++68TUg0Zi18fGgGdEXLLX4uFpOLlxbhRjVxPnuSqolFnYh+Q Aioa -----END CERTIFICATE-----Generated at Sat Jun 29 03:29:06 2024 by rpki-client on console-ams.rpki-client.org