$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer File: E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer (raw, json) Hash identifier: JW+PO/09vK37uJhuuSiFEC6W/BbWZ4MdRTNvJ/GqpZ0= Subject key identifier: E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4733D9DA9A104F26EF6DD47C46D69DDB560629EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.mft caRepository: rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 13:33:08 +0000 Certificate not after: Thu 03 Apr 2025 13:38:08 +0000 Subordinate resources: AS: 267067 IP: 45.228.84.0/22 IP: 2804:47a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 05:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:33:d9:da:9a:10:4f:26:ef:6d:d4:7c:46:d6:9d:db:56:06:29:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 13:33:08 2024 GMT Not After : Apr 3 13:38:08 2025 GMT Subject: CN=E20256FFD82563D54FB1FEA62EB7D27408DC46BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:88:1e:90:1d:8a:7b:e4:a7:17:83:0c:7d: 21:c0:ed:a2:4b:2e:4f:4a:d8:79:ab:78:9d:f1:c1: c5:b8:12:6c:c5:4e:70:d9:11:d5:cd:b7:71:83:af: ac:45:e2:32:ac:b3:34:06:0f:b4:f6:1c:62:9b:6e: 78:fc:dd:db:cc:21:62:ef:ea:37:26:67:40:6a:6d: 08:6a:a5:aa:83:da:0f:9c:82:a2:1d:be:6e:42:6e: 4a:de:16:67:00:55:d0:62:e3:a2:9f:dd:20:10:cc: 88:80:94:d5:ad:c5:a6:ac:d2:7f:18:a8:6b:6a:a3: 3d:fd:1a:5c:b8:28:ed:c9:23:e5:32:8b:09:76:1b: cc:c9:8e:71:69:49:fe:b5:76:92:91:43:6a:a5:7f: c5:33:03:49:15:da:4e:e3:72:d3:fa:71:e5:21:11: 2c:ac:21:f4:b3:54:70:69:41:32:f2:88:11:5b:34: 66:f7:1b:e0:d4:08:f2:8b:5b:bb:a1:b8:68:26:4d: a6:fe:72:f7:20:89:88:ae:92:ba:95:8d:0c:8e:48: bf:c1:c1:61:69:5a:09:ce:6a:c1:cf:c9:40:35:e0: 63:7c:bd:d2:d8:c1:88:73:1e:71:15:5c:62:a7:b3: 0d:9a:7d:f8:9d:63:a2:f7:e2:4f:14:ba:98:02:4c: d2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.84.0/22 IPv6: 2804:47a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267067 Signature Algorithm: sha256WithRSAEncryption 41:88:1c:92:e6:2c:67:05:6b:f8:73:0d:09:f3:3c:0a:a7:37: 15:42:a9:89:fc:7c:6e:2b:3c:d8:c6:48:4f:da:20:3c:f4:81: af:43:57:e1:20:71:55:fc:df:92:04:a0:a5:45:9d:47:65:48: 04:5d:26:e8:ee:8f:e7:41:97:f6:eb:65:ec:19:19:92:09:35: 1d:31:d4:8c:20:4f:e6:e1:b4:4f:de:f5:24:06:e7:cc:c7:3a: 71:c6:9e:77:f7:51:be:dd:0e:20:2b:f4:64:3d:f9:14:7f:3e: 21:9f:59:3c:d4:31:e5:0f:d4:4a:7d:f4:c3:a4:74:dc:2d:3d: 8d:a7:1b:38:fb:9a:00:a3:08:43:44:67:d1:df:c5:5c:3d:52: 46:ce:e3:80:fd:0c:9f:8c:d8:8e:fe:56:7f:0f:68:81:52:a6: 90:da:0c:1c:d6:a3:56:e5:e5:60:42:5c:3e:25:cb:d4:ee:84: f4:12:b4:5e:c2:71:a5:21:9b:9f:2f:b4:5f:e7:ec:fa:06:cf: 2b:c7:ac:f6:df:a8:a1:98:57:43:d1:a1:f5:f3:6c:e7:22:88: 75:5c:b8:5f:a2:62:f0:e2:2a:c8:17:9a:17:a0:a3:c3:7d:0c: a5:02:e9:22:83:27:c4:12:34:04:02:0a:f2:04:f3:29:77:48: d2:f2:6b:f6 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIURzPZ2poQTybvbdR8Rtad21YGKe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMzMzMDhaFw0yNTA0MDMxMzM4MDhaMDMxMTAvBgNV BAMTKEUyMDI1NkZGRDgyNTYzRDU0RkIxRkVBNjJFQjdEMjc0MDhEQzQ2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LIgekB2Ke+SnF4MMfSHA7aJL Lk9K2HmreJ3xwcW4EmzFTnDZEdXNt3GDr6xF4jKsszQGD7T2HGKbbnj83dvMIWLv 6jcmZ0BqbQhqpaqD2g+cgqIdvm5CbkreFmcAVdBi46Kf3SAQzIiAlNWtxaas0n8Y qGtqoz39Gly4KO3JI+Uyiwl2G8zJjnFpSf61dpKRQ2qlf8UzA0kV2k7jctP6ceUh ESysIfSzVHBpQTLyiBFbNGb3G+DUCPKLW7uhuGgmTab+cvcgiYiukrqVjQyOSL/B wWFpWgnOasHPyUA14GN8vdLYwYhzHnEVXGKnsw2affidY6L34k8UupgCTNJtAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTiAlb/2CVj1U+x /qYut9J0CNxGujAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHFh dEdrRjRRRFA2U2V0N1VjYlhuR0dqMlRrZWhEQloyNExHaWFMQWJkenUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHFh dEdrRjRRRFA2U2V0N1VjYlhuR0dqMlRrZWhEQloyNExHaWFMQWJkenUvMS9FMjAy NTZGRkQ4MjU2M0Q1NEZCMUZFQTYyRUI3RDI3NDA4REM0NkJBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt5FQwDQQCAAIwBwMFACgER6QwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBM7MA0GCSqGSIb3DQEBCwUAA4IBAQBBiByS5ixnBWv4cw0J 8zwKpzcVQqmJ/HxuKzzYxkhP2iA89IGvQ1fhIHFV/N+SBKClRZ1HZUgEXSbo7o/n QZf262XsGRmSCTUdMdSMIE/m4bRP3vUkBufMxzpxxp5391G+3Q4gK/RkPfkUfz4h n1k81DHlD9RKffTDpHTcLT2Npxs4+5oAowhDRGfR38VcPVJGzuOA/QyfjNiO/lZ/ D2iBUqaQ2gwc1qNW5eVgQlw+JcvU7oT0ErRewnGlIZufL7Rf5+z6Bs8rx6z236ih mFdD0aH182znIoh1XLhfomLw4irIF5oXoKPDfQylAukigyfEEjQEAgryBPMpd0jS 8mv2 -----END CERTIFICATE-----Generated at Mon Jul 1 03:57:09 2024 by rpki-client on console-ams.rpki-client.org