$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer File: CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer (raw, json) Hash identifier: Qn2qysAUHnuiFySUxHN2Ppbt0qXMkmNMo8uPamxuUoo= Subject key identifier: CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4BED4961A2DE7A0F838A2F96B10FA4233D85BFE5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft caRepository: rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:28 +0000 Certificate not after: Wed 02 Apr 2025 18:30:28 +0000 Subordinate resources: AS: 268952 IP: 45.176.204.0/22 IP: 200.196.36.0/22 IP: 2804:5d20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 16:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ed:49:61:a2:de:7a:0f:83:8a:2f:96:b1:0f:a4:23:3d:85:bf:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:28 2024 GMT Not After : Apr 2 18:30:28 2025 GMT Subject: CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:ce:58:9b:d2:6d:a1:f2:9a:a8:06:1b:2c: 64:aa:d1:08:53:85:1e:b0:5c:9a:63:dd:af:a4:b6: 71:d1:82:88:2b:21:37:42:60:6a:ed:e8:d9:4b:7c: 9d:c6:d1:d6:2d:f7:c8:f1:a6:de:b9:0e:7d:d4:93: b4:9b:13:fc:67:09:73:a8:1c:a4:04:ad:87:87:d8: bb:0f:65:bb:34:a3:df:5f:cf:fe:b5:94:17:3e:d6: 2f:a2:b7:49:cd:06:1a:b8:1b:5b:38:48:27:20:00: 0b:e3:32:28:36:55:40:0d:d3:73:fc:f2:e3:d0:3d: 55:f3:45:be:b7:a7:b7:3a:57:6e:8f:ef:b8:fe:8c: 3e:1e:0a:d3:9e:ed:24:0d:e2:c7:db:50:3d:a7:83: 97:99:a9:33:e1:b8:e2:41:e9:7b:f9:e3:15:49:af: c2:1e:12:04:24:da:80:1f:b2:04:67:d4:08:81:85: b1:3b:ac:74:af:c6:e2:88:53:c1:96:62:9e:9e:9b: 01:d7:72:6e:ca:b5:5c:2e:06:91:a5:3d:42:30:41: 3c:cf:3f:bb:3d:c3:9a:18:92:74:ce:db:57:d1:68: 8a:7b:1f:69:11:57:73:49:f9:e1:d4:c0:3a:f2:fb: a4:4c:e4:13:6e:d7:22:f1:b1:60:a6:36:8d:9f:e1: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.204.0/22 200.196.36.0/22 IPv6: 2804:5d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268952 Signature Algorithm: sha256WithRSAEncryption 91:37:ee:45:d9:32:41:d1:31:2d:4c:ec:09:ab:43:c3:af:1e: 0b:31:d2:0f:c5:bf:e5:e7:f2:a8:a6:0d:38:41:b7:9e:8d:37: 2a:13:4a:26:f3:c0:14:69:2f:d8:29:24:db:b3:7b:c8:db:ff: 13:7f:1a:a9:c4:9c:23:55:a8:b6:6b:c8:fa:be:bd:ea:99:ae: 8f:f5:20:7f:41:ab:7a:3d:b8:55:62:28:0d:a7:a4:18:c1:34: f8:dc:d2:8a:07:5a:ff:36:b7:39:cb:71:c3:85:40:84:7b:08: 86:9f:02:7b:41:8f:4a:e3:59:bf:87:a4:f8:5a:c5:78:d6:bb: f4:f8:c4:d2:c5:e7:30:4f:9e:0d:1a:cb:1e:05:dc:49:e9:5e: 22:78:21:91:39:c9:4b:9b:30:df:ff:ab:b9:a9:58:9c:59:28: 43:da:47:38:fd:e3:2e:2b:26:95:64:63:8a:ff:6a:a4:f3:43: d4:86:3d:02:21:e6:ce:9c:d9:68:b2:af:f6:ea:22:a5:92:34: 3e:fd:b7:8a:e3:79:cf:0d:c5:36:40:6c:35:6e:43:40:a3:16: d6:4d:04:78:43:4c:2c:8a:2c:d0:d9:6d:ab:6d:b2:a6:bc:e0: 54:dc:79:64:86:9e:67:f9:92:86:a5:0b:e0:9b:5e:bb:cc:a6: 48:a6:eb:37 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUS+1JYaLeeg+Dii+WsQ+kIz2Fv+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1MjhaFw0yNTA0MDIxODMwMjhaMDMxMTAvBgNV BAMTKENEQkJCQzhBMjFCNTY5QjhDMTM2NTdFRTczQ0M5M0NBOTU3N0EwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKK85Ym9JtofKaqAYbLGSq0QhT hR6wXJpj3a+ktnHRgogrITdCYGrt6NlLfJ3G0dYt98jxpt65Dn3Uk7SbE/xnCXOo HKQErYeH2LsPZbs0o99fz/61lBc+1i+it0nNBhq4G1s4SCcgAAvjMig2VUAN03P8 8uPQPVXzRb63p7c6V26P77j+jD4eCtOe7SQN4sfbUD2ng5eZqTPhuOJB6Xv54xVJ r8IeEgQk2oAfsgRn1AiBhbE7rHSvxuKIU8GWYp6emwHXcm7KtVwuBpGlPUIwQTzP P7s9w5oYknTO21fRaIp7H2kRV3NJ+eHUwDry+6RM5BNu1yLxsWCmNo2f4biFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNu7yKIbVpuME2 V+5zzJPKlXegJjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzRV VTR4VGZ4ZnNxNHhmczlkQ044bzJrU1F3WTZSWkdoZDY1YlRtYzhyZ20vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c0 VVU0eFRmeGZzcTR4ZnM5ZENOOG8ya1NRd1k2UlpHaGQ2NWJUbWM4cmdtLzEvQ0RC QkJDOEEyMUI1NjlCOEMxMzY1N0VFNzNDQzkzQ0E5NTc3QTAyNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLbDMAwQCyMQkMA0EAgACMAcDBQAoBF0gMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQamDANBgkqhkiG9w0BAQsFAAOCAQEAkTfuRdky QdExLUzsCatDw68eCzHSD8W/5efyqKYNOEG3no03KhNKJvPAFGkv2Ckk27N7yNv/ E38aqcScI1WotmvI+r696pmuj/Ugf0Grej24VWIoDaekGME0+NzSigda/za3Octx w4VAhHsIhp8Ce0GPSuNZv4ek+FrFeNa79PjE0sXnME+eDRrLHgXcSeleInghkTnJ S5sw3/+rualYnFkoQ9pHOP3jLismlWRjiv9qpPND1IY9AiHmzpzZaLKv9uoipZI0 Pv23iuN5zw3FNkBsNW5DQKMW1k0EeENMLIos0Nltq22yprzgVNx5ZIaeZ/mShqUL 4Jteu8ymSKbrNw== -----END CERTIFICATE-----Generated at Mon Jul 1 15:20:34 2024 by rpki-client on console-ams.rpki-client.org