$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer File: FB296CB95D657097D81AFC78BE6A40AC2591E349.cer (raw, json) Hash identifier: t57drkvPfiJG1PCofuraZ/5QOWmrMxw0FDUI4+2dAa8= Subject key identifier: FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0354B0D54416EBF8FC5379F5216582076A911CC3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft caRepository: rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:28 +0000 Certificate not after: Wed 02 Apr 2025 18:31:28 +0000 Subordinate resources: AS: 265234 IP: 45.172.68.0/22 IP: 168.0.96.0/22 IP: 2804:2cac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 05:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:54:b0:d5:44:16:eb:f8:fc:53:79:f5:21:65:82:07:6a:91:1c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:28 2024 GMT Not After : Apr 2 18:31:28 2025 GMT Subject: CN=FB296CB95D657097D81AFC78BE6A40AC2591E349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:97:9a:92:ea:f0:f4:c9:10:d6:be:69:97:56: da:5a:23:fd:00:77:15:f0:a7:05:79:c3:fc:e5:e9: 6f:db:d1:f0:88:71:be:17:c4:1e:49:74:2b:9c:74: 0f:46:85:74:4d:23:00:09:33:3e:24:77:72:4b:76: 70:7d:37:63:5a:89:11:87:29:c5:f1:a1:4a:a6:e3: 9e:98:cf:e3:49:5c:1c:a9:94:6e:32:e4:bc:a9:07: 92:61:f5:b1:6e:11:a6:62:44:90:2e:74:59:9a:5a: 21:44:77:c8:00:ad:c4:fe:a0:83:3d:73:6b:a1:9c: 15:0f:2d:8f:31:7a:e9:f0:36:5e:ed:18:26:fa:a8: 89:62:81:ea:aa:59:ac:2d:9c:2c:3c:f4:5c:2d:d1: ec:00:3c:06:7d:83:7a:25:64:8f:7a:0b:73:5d:52: 46:5b:db:f0:69:1f:ac:ce:67:d7:95:0a:d9:6d:3b: 73:a2:21:5a:fa:2d:61:95:23:e6:fe:15:1b:a7:96: b6:b6:f0:9e:8f:9a:5f:84:84:10:ad:c0:c3:5b:18: 9e:f4:9f:e1:c8:3a:a1:31:77:ec:55:1b:18:f1:9f: cb:e6:e3:5a:1b:bf:6c:fc:0f:ed:3f:c9:8a:f2:c7: 0d:cc:2c:6e:5e:7e:50:1a:1b:de:51:49:0b:2e:99: f8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.68.0/22 168.0.96.0/22 IPv6: 2804:2cac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265234 Signature Algorithm: sha256WithRSAEncryption 19:62:54:7d:f9:a9:f3:1b:9d:48:8d:d2:70:40:65:48:06:90: 17:c5:22:d4:d0:b3:cc:e1:db:83:97:e6:8b:68:2f:c3:88:ee: 44:eb:f4:4e:3f:4b:ca:5b:87:c1:b9:71:27:54:d2:fb:65:08: 88:92:07:4f:6f:cf:45:b6:7e:15:ee:b2:95:58:36:6d:14:d2: f4:8f:b3:0f:c4:a8:1d:60:1a:87:fe:de:bb:e2:0e:12:4c:40: e3:97:f4:04:80:43:58:e7:32:ba:70:02:73:7b:03:c5:ac:3f: 1c:2b:0f:43:44:77:ee:a7:71:e5:e4:f6:61:65:90:1b:66:39: 28:83:a2:e6:19:d1:e1:75:44:4e:d1:d9:42:b1:92:d1:c4:5e: 57:8a:55:73:6d:eb:f6:b9:73:58:c0:df:d0:69:1f:53:85:7d: 90:ec:78:c0:95:1d:cf:bf:7e:84:e0:50:6c:31:20:1f:12:d5: 88:29:43:2b:1b:80:1f:3e:e9:92:6f:4b:ee:be:e4:e4:23:b5: 30:90:f3:2c:34:5e:07:93:ae:89:72:6f:db:7c:94:5b:be:51: 65:a0:ff:ab:1a:d3:53:07:17:60:39:6e:11:e2:4c:74:53:e5: b4:c9:3a:03:39:12:cc:ee:69:55:fc:33:e0:72:33:e1:5d:7a: 39:bd:c7:69 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUA1Sw1UQW6/j8U3n1IWWCB2qRHMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2MjhaFw0yNTA0MDIxODMxMjhaMDMxMTAvBgNV BAMTKEZCMjk2Q0I5NUQ2NTcwOTdEODFBRkM3OEJFNkE0MEFDMjU5MUUzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpl5qS6vD0yRDWvmmXVtpaI/0A dxXwpwV5w/zl6W/b0fCIcb4XxB5JdCucdA9GhXRNIwAJMz4kd3JLdnB9N2NaiRGH KcXxoUqm456Yz+NJXByplG4y5LypB5Jh9bFuEaZiRJAudFmaWiFEd8gArcT+oIM9 c2uhnBUPLY8xeunwNl7tGCb6qIligeqqWawtnCw89Fwt0ewAPAZ9g3olZI96C3Nd UkZb2/BpH6zOZ9eVCtltO3OiIVr6LWGVI+b+FRunlra28J6Pml+EhBCtwMNbGJ70 n+HIOqExd+xVGxjxn8vm41obv2z8D+0/yYryxw3MLG5eflAaG95RSQsumfhJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT7KWy5XWVwl9ga /Hi+akCsJZHjSTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTkx aDFXRndiTlg0WkRldFlmU3kza3p0cDVFRm5laW9hWUZBeHo1cGZoenYvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U5 MWgxV0Z3Yk5YNFpEZXRZZlN5M2t6dHA1RUZuZWlvYVlGQXh6NXBmaHp2LzEvRkIy OTZDQjk1RDY1NzA5N0Q4MUFGQzc4QkU2QTQwQUMyNTkxRTM0OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLaxEAwQCqABgMA0EAgACMAcDBQAoBCysMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQMEjANBgkqhkiG9w0BAQsFAAOCAQEAGWJUffmp 8xudSI3ScEBlSAaQF8Ui1NCzzOHbg5fmi2gvw4juROv0Tj9LyluHwblxJ1TS+2UI iJIHT2/PRbZ+Fe6ylVg2bRTS9I+zD8SoHWAah/7eu+IOEkxA45f0BIBDWOcyunAC c3sDxaw/HCsPQ0R37qdx5eT2YWWQG2Y5KIOi5hnR4XVETtHZQrGS0cReV4pVc23r 9rlzWMDf0GkfU4V9kOx4wJUdz79+hOBQbDEgHxLViClDKxuAHz7pkm9L7r7k5CO1 MJDzLDReB5OuiXJv23yUW75RZaD/qxrTUwcXYDluEeJMdFPltMk6AzkSzO5pVfwz 4HIz4V16Ob3HaQ== -----END CERTIFICATE-----Generated at Tue Jun 18 07:41:17 2024 by rpki-client on console-ams.rpki-client.org