$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer File: F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer (raw, json) Hash identifier: 7F5Z2ol5dj5I6/f97a+lTpqWGQ20l6MFfumlSGWiIKk= Subject key identifier: F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3AD48E3CBB650B26541B175BCE5E07D042B8E93A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.mft caRepository: rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 08 Apr 2024 16:17:25 +0000 Certificate not after: Mon 07 Apr 2025 16:22:25 +0000 Subordinate resources: AS: 266952 IP: 45.225.252.0/22 IP: 2804:45d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 01:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d4:8e:3c:bb:65:0b:26:54:1b:17:5b:ce:5e:07:d0:42:b8:e9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 8 16:17:25 2024 GMT Not After : Apr 7 16:22:25 2025 GMT Subject: CN=F8017B5E805C4A715B0DA978F817ABB4B74EEB52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0d:38:f4:b4:be:48:86:e6:f2:ff:10:64:91: 3b:11:a9:75:9a:e9:7b:8a:3a:42:2a:c8:45:6e:26: ec:0e:be:53:42:22:fe:cd:bf:4e:bb:d1:cc:db:0a: c2:74:f7:ca:69:ff:ba:ce:4f:58:85:d0:f9:e6:d5: 2d:97:0e:0a:e6:86:ff:0c:b7:39:26:ae:94:5c:17: eb:bb:91:08:89:e6:5f:7a:8a:51:92:eb:42:25:bb: 20:ac:c1:4a:6a:e8:cf:7d:3a:21:61:c1:41:8d:d8: 10:c3:98:8f:ae:4d:6c:a1:ce:18:69:61:92:73:1c: 7c:d5:66:24:42:ec:c4:51:75:26:c4:d9:01:b5:ff: 82:e6:66:df:7d:9a:70:0a:d9:3c:cb:6b:37:66:61: e8:ea:59:24:f6:49:3c:c9:c6:ba:99:dc:25:6b:f2: 85:12:99:3c:cc:9a:16:c1:40:b6:82:bc:08:5e:76: 01:71:7f:91:43:bc:68:a9:44:45:eb:f5:b6:fb:f5: f9:79:86:b6:18:28:a8:8e:c9:20:3f:f6:f6:51:44: 3e:bc:b0:94:f6:2e:b5:98:30:99:60:9f:81:2a:4b: 4e:fa:54:d5:90:54:ae:cd:c0:33:71:33:ec:ff:c8: 2c:c2:10:1e:8a:56:77:0b:28:7f:65:09:f1:ce:25: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.225.252.0/22 IPv6: 2804:45d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266952 Signature Algorithm: sha256WithRSAEncryption 78:39:7f:ce:54:13:c4:96:d9:b2:3c:b2:29:14:4e:20:f0:06: fe:b9:0c:ea:fd:e7:3c:e9:5a:01:72:f1:d0:a5:33:1a:00:72: 30:1d:af:61:ea:a3:98:14:25:19:40:6a:55:a1:30:3b:a6:6f: 75:0a:78:6a:35:24:ba:5b:4b:94:4c:63:88:3e:63:bd:73:3a: 8b:aa:cf:4b:ae:89:fe:ca:64:59:5f:de:52:d6:66:3a:be:5e: 41:07:2e:46:5d:8e:7d:99:29:31:64:b8:99:11:27:7c:6a:b7: 34:4f:e0:51:a5:c3:1f:5b:2c:e1:1d:e2:ed:34:d6:8d:80:05: 11:10:ff:83:cc:56:a1:f7:5b:00:4c:f9:61:18:44:a4:7a:54: 51:80:a1:98:30:9a:1c:8f:2f:bb:93:61:42:0b:14:32:3e:c9: 5a:3e:0f:2f:37:11:92:68:af:b8:d1:92:f2:c3:c0:4b:0d:2f: f7:c8:1f:68:cc:2a:64:bc:d0:1a:92:93:cc:d9:e4:ca:bf:24: 9c:d9:16:2f:83:b6:58:9b:11:dd:c3:15:5e:f4:58:6d:20:aa: ba:3e:ce:ae:62:3d:80:12:02:f0:a7:57:36:9f:12:5c:15:32: 7d:44:a6:34:ed:71:6f:d9:b2:a1:ea:aa:64:15:f5:1a:c5:b1: 34:d8:d4:83 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOtSOPLtlCyZUGxdbzl4H0EK46TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDgxNjE3MjVaFw0yNTA0MDcxNjIyMjVaMDMxMTAvBgNV BAMTKEY4MDE3QjVFODA1QzRBNzE1QjBEQTk3OEY4MTdBQkI0Qjc0RUVCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkDTj0tL5Ihuby/xBkkTsRqXWa 6XuKOkIqyEVuJuwOvlNCIv7Nv0670czbCsJ098pp/7rOT1iF0Pnm1S2XDgrmhv8M tzkmrpRcF+u7kQiJ5l96ilGS60IluyCswUpq6M99OiFhwUGN2BDDmI+uTWyhzhhp YZJzHHzVZiRC7MRRdSbE2QG1/4LmZt99mnAK2TzLazdmYejqWST2STzJxrqZ3CVr 8oUSmTzMmhbBQLaCvAhedgFxf5FDvGipREXr9bb79fl5hrYYKKiOySA/9vZRRD68 sJT2LrWYMJlgn4EqS076VNWQVK7NwDNxM+z/yCzCEB6KVncLKH9lCfHOJc6NAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4AXtegFxKcVsN qXj4F6u0t07rUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGcy VFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0Y1QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rn MlRTd3RUbjRnaUNmc1E4SlpXRlNEZDRNWnNxNTY0clZGQ2Z0bVBCNGNULzAvRjgw MTdCNUU4MDVDNEE3MTVCMERBOTc4RjgxN0FCQjRCNzRFRUI1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeH8MA0EAgACMAcDBQAoBEXUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQSyDANBgkqhkiG9w0BAQsFAAOCAQEAeDl/zlQTxJbZsjyy KRROIPAG/rkM6v3nPOlaAXLx0KUzGgByMB2vYeqjmBQlGUBqVaEwO6ZvdQp4ajUk ultLlExjiD5jvXM6i6rPS66J/spkWV/eUtZmOr5eQQcuRl2OfZkpMWS4mREnfGq3 NE/gUaXDH1ss4R3i7TTWjYAFERD/g8xWofdbAEz5YRhEpHpUUYChmDCaHI8vu5Nh QgsUMj7JWj4PLzcRkmivuNGS8sPASw0v98gfaMwqZLzQGpKTzNnkyr8knNkWL4O2 WJsR3cMVXvRYbSCquj7OrmI9gBIC8KdXNp8SXBUyfUSmNO1xb9myoeqqZBX1GsWx NNjUgw== -----END CERTIFICATE-----Generated at Tue Jun 18 00:27:09 2024 by rpki-client on console-ams.rpki-client.org