$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer File: FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer (raw, json) Hash identifier: ZXDdICFfx2gWNyH4vpqlQDv8P0kfMFAK4DfYvjvT72E= Subject key identifier: FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 451057545FCFD06E496C430D2278758C6D86B407 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft caRepository: rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:34:21 +0000 Certificate not after: Wed 02 Apr 2025 18:39:21 +0000 Subordinate resources: AS: 263145 IP: 168.205.136.0/22 IP: 170.245.224.0/22 IP: 177.154.28.0/22 IP: 2804:1774::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 21:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:10:57:54:5f:cf:d0:6e:49:6c:43:0d:22:78:75:8c:6d:86:b4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:34:21 2024 GMT Not After : Apr 2 18:39:21 2025 GMT Subject: CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:49:a8:da:97:1b:ea:4f:bd:f8:60:14:bb: 1a:1b:7a:08:f6:97:52:cb:6e:0a:9e:3c:d2:1e:64: 05:87:db:e8:a6:8b:42:52:2f:58:dc:95:f9:9f:ad: 78:d8:1c:de:a6:d7:bb:87:c2:d2:e9:99:00:0f:5f: 6f:94:4b:86:d2:2c:ab:bb:9e:bd:48:89:72:5c:8d: eb:5e:50:f0:2d:66:34:de:43:2b:91:05:31:28:74: d4:f5:96:fc:28:ad:56:a4:ea:05:84:20:31:7a:e2: 6d:05:6b:59:6a:6b:9c:89:bb:c2:36:a5:ea:41:21: 10:b6:b4:f8:3f:eb:7b:5e:d9:88:f4:0a:bf:0a:58: 16:40:e4:7f:73:88:ea:4c:b9:bd:13:0e:b8:d4:9e: 1f:95:ff:65:bd:2b:25:d0:63:7c:bb:44:e5:53:bd: 78:91:b8:bb:9f:10:45:6c:07:29:67:e1:7f:85:0d: 14:b8:ed:5e:2d:61:08:3c:62:2d:36:1e:96:9f:0f: 04:3b:57:c2:c1:41:ce:00:32:48:ac:8d:f5:29:37: 02:32:04:e8:51:15:0f:5f:6d:d2:5e:2c:0c:a2:b4: 06:b1:cb:5f:80:77:c2:74:69:6e:6f:cb:a5:f2:bf: e2:e4:43:e9:0d:d3:89:4e:10:cb:ea:bd:a4:38:0e: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.136.0/22 170.245.224.0/22 177.154.28.0/22 IPv6: 2804:1774::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263145 Signature Algorithm: sha256WithRSAEncryption 17:89:bb:9b:9e:05:37:c5:e5:7b:fc:bf:cd:d7:2c:bb:3c:a8: de:39:d2:71:54:1b:a6:8e:3b:70:1c:14:f0:a6:6f:3b:44:d5: 1d:96:b8:01:04:3c:20:b6:bb:73:8f:2a:b8:4c:89:32:ec:a5: e0:94:82:07:bd:6e:b5:ae:37:d9:b5:05:c6:d7:58:b0:9f:48: e2:b9:cb:c5:34:c1:2d:ce:ea:1a:39:59:74:2f:81:cf:b0:4d: cc:50:fd:a2:bc:f5:7a:59:72:7a:2d:71:24:b3:d8:2b:3f:b8: 9b:2e:e4:ea:48:5c:ce:61:bd:bd:10:4e:b9:2f:cc:9b:90:d7: 9e:0f:34:da:72:5f:59:7d:e4:fe:45:b9:74:f5:dd:bf:13:02: a2:dc:b8:0f:b2:08:bf:9d:ea:d4:46:9a:62:86:4c:93:a9:15: 35:e8:16:48:5b:93:d5:63:ae:75:db:ef:88:62:1d:e9:30:e4: 89:37:fd:ad:a4:26:85:2e:33:70:56:be:e1:e0:39:b1:4c:99: a7:6d:c8:89:a2:aa:a7:aa:67:3c:06:4e:47:db:b0:33:9e:40: e3:c2:0e:3b:a7:c3:52:4c:db:de:b2:f3:1c:c1:de:d4:c4:86: 45:ba:c7:fd:57:da:95:18:cb:1e:24:50:d4:47:8a:d9:fe:b1: 66:3d:7a:c4 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIURRBXVF/P0G5JbEMNInh1jG2GtAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODM0MjFaFw0yNTA0MDIxODM5MjFaMDMxMTAvBgNV BAMTKEZBMTQ0MjExRjU4OEQ5NjAzOUM4RDRENEE2RjM5QUFCMEI3QjM0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYS0mo2pcb6k+9+GAUuxobegj2 l1LLbgqePNIeZAWH2+imi0JSL1jclfmfrXjYHN6m17uHwtLpmQAPX2+US4bSLKu7 nr1IiXJcjeteUPAtZjTeQyuRBTEodNT1lvworVak6gWEIDF64m0Fa1lqa5yJu8I2 pepBIRC2tPg/63te2Yj0Cr8KWBZA5H9ziOpMub0TDrjUnh+V/2W9KyXQY3y7ROVT vXiRuLufEEVsByln4X+FDRS47V4tYQg8Yi02HpafDwQ7V8LBQc4AMkisjfUpNwIy BOhRFQ9fbdJeLAyitAaxy1+Ad8J0aW5vy6Xyv+LkQ+kN04lOEMvqvaQ4DsuDAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6FEIR9YjZYDnI 1NSm85qrC3s0YTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDUx MXNIVzFBcHdLUllFQWZIZ0VNYTFDenNndzg3MUhwNFNNcFgzcEtzUkwvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDUx MXNIVzFBcHdLUllFQWZIZ0VNYTFDenNndzg3MUhwNFNNcFgzcEtzUkwvMi9GQTE0 NDIxMUY1ODhEOTYwMzlDOEQ0RDRBNkYzOUFBQjBCN0IzNDYxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcB Af8EKzApMBgEAgABMBIDBAKozYgDBAKq9eADBAKxmhwwDQQCAAIwBwMFACgEF3Qw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAPpMA0GCSqGSIb3DQEBCwUAA4IBAQAX ibubngU3xeV7/L/N1yy7PKjeOdJxVBumjjtwHBTwpm87RNUdlrgBBDwgtrtzjyq4 TIky7KXglIIHvW61rjfZtQXG11iwn0jiucvFNMEtzuoaOVl0L4HPsE3MUP2ivPV6 WXJ6LXEks9grP7ibLuTqSFzOYb29EE65L8ybkNeeDzTacl9ZfeT+Rbl09d2/EwKi 3LgPsgi/nerURppihkyTqRU16BZIW5PVY6512++IYh3pMOSJN/2tpCaFLjNwVr7h 4DmxTJmnbciJoqqnqmc8Bk5H27AznkDjwg47p8NSTNvesvMcwd7UxIZFusf9V9qV GMseJFDUR4rZ/rFmPXrE -----END CERTIFICATE-----Generated at Sat Sep 28 20:54:13 2024 by rpki-client on console-ams.rpki-client.org