$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer File: FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer (raw, json) Hash identifier: qeF6hxPbswmzY49SdyBjlppVw/V9f8Pp6x2sU9xutS8= Subject key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3FD389C8C8581F65B91993C7A545073F645D7874 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft caRepository: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:22 +0000 Certificate not after: Wed 02 Apr 2025 18:30:22 +0000 Subordinate resources: AS: 268144 AS: 268568 IP: 45.163.144.0/22 IP: 45.168.200.0/22 IP: 2804:532c::/32 IP: 2804:58b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d3:89:c8:c8:58:1f:65:b9:19:93:c7:a5:45:07:3f:64:5d:78:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:22 2024 GMT Not After : Apr 2 18:30:22 2025 GMT Subject: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:01:c8:cb:d4:fe:ba:e9:17:b0:91:09:16:3e: ef:d4:44:c0:8d:6d:9a:ca:75:eb:4d:b6:5a:07:67: b8:66:ef:78:d9:d7:38:a0:95:6a:29:cf:9b:cc:54: 94:4c:77:e9:54:37:71:57:42:69:47:13:56:43:d1: fe:b1:f8:d6:66:bc:51:32:cf:d0:d9:3c:a9:0d:cf: b6:47:50:07:2f:36:f6:d7:eb:62:80:f2:2a:e6:38: 37:49:3d:b2:a3:e5:27:62:5e:1c:07:47:57:5a:3e: dc:e1:78:c3:0f:1f:9b:8f:13:76:a5:13:61:78:fb: 84:df:52:18:93:3b:97:b1:45:1e:f1:24:61:ea:fb: 85:b6:50:d7:1a:de:0c:03:30:c8:05:2c:62:79:d4: f5:1c:13:c9:e3:62:42:04:c2:3d:c1:ed:7e:28:cb: f9:96:6d:d7:79:ad:21:f1:da:4d:2a:8c:b5:88:60: 2a:de:73:84:f5:84:d9:2c:df:3f:e1:48:fe:f0:cd: 79:b8:ec:2f:7f:7e:c6:69:9f:bf:81:12:a5:95:28: 18:c5:7f:90:d2:f4:40:88:87:cc:a9:89:05:c6:1b: 13:c0:a5:b7:31:1a:22:eb:23:64:81:18:49:19:6d: 8f:52:e7:d8:e7:9b:b6:03:71:e9:13:23:27:5a:de: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.144.0/22 45.168.200.0/22 IPv6: 2804:532c::/32 2804:58b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268144 268568 Signature Algorithm: sha256WithRSAEncryption 53:6f:32:ef:8e:35:f9:cd:24:6a:47:72:c1:da:5c:99:c4:91: e3:61:9f:20:78:fc:8a:8e:3b:46:0e:be:8e:a2:2a:df:96:87: 6b:e6:34:39:71:2a:81:ee:dd:55:fa:3e:47:9e:2a:bc:ae:d8: 98:dd:54:83:13:bc:a2:c7:62:83:fa:1b:10:4f:4a:44:db:12: 62:0d:5a:71:2f:6b:3c:57:7d:0a:e6:0f:00:6f:52:fa:1c:28: d8:e3:73:0e:15:f1:3c:e1:a4:86:4b:f3:f2:43:ed:0a:e4:5d: b0:d4:93:27:c9:c3:c1:d3:62:7c:e7:25:9a:a6:bb:d9:39:77: 14:da:3b:c9:20:76:4b:f8:20:6e:c5:b4:a4:c5:5a:f0:ff:99: f5:70:c6:69:c9:30:46:bc:d0:5d:ca:fc:33:a1:f2:a1:33:07: a7:90:5e:ce:3a:5a:ee:63:73:28:02:6a:e7:0c:92:fb:86:06: d0:58:69:19:37:53:c0:1c:56:2c:17:a8:80:be:03:a4:34:b8: 29:d9:ca:23:70:d9:77:79:c5:74:c8:59:df:7a:ef:1c:1f:30: fc:b0:5e:e5:3d:86:a8:49:9a:e2:d1:24:bd:1e:04:f7:f6:a5: 5b:53:bc:d5:bc:af:c9:59:56:34:0b:e8:07:e8:19:b2:bf:28: ff:c0:73:07 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUP9OJyMhYH2W5GZPHpUUHP2RdeHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1MjJaFw0yNTA0MDIxODMwMjJaMDMxMTAvBgNV BAMTKEZGODk1QzgyRjU3M0JFMEU0REYzODQ5QTEyMUQ4NzgzQUM2QUUyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhAcjL1P666RewkQkWPu/URMCN bZrKdetNtloHZ7hm73jZ1ziglWopz5vMVJRMd+lUN3FXQmlHE1ZD0f6x+NZmvFEy z9DZPKkNz7ZHUAcvNvbX62KA8irmODdJPbKj5SdiXhwHR1daPtzheMMPH5uPE3al E2F4+4TfUhiTO5exRR7xJGHq+4W2UNca3gwDMMgFLGJ51PUcE8njYkIEwj3B7X4o y/mWbdd5rSHx2k0qjLWIYCrec4T1hNks3z/hSP7wzXm47C9/fsZpn7+BEqWVKBjF f5DS9ECIh8ypiQXGGxPApbcxGiLrI2SBGEkZbY9S59jnm7YDcekTIyda3hjrAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/iVyC9XO+Dk3z hJoSHYeDrGriLDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUhq dGc5ZHZEVTdTSFJpS3RvdTdzOHM5eWJDVk5OaTNKdEN4V0NHekFZem4vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlI anRnOWR2RFU3U0hSaUt0b3U3czhzOXliQ1ZOTmkzSnRDeFdDR3pBWXpuLzEvRkY4 OTVDODJGNTczQkUwRTRERjM4NDlBMTIxRDg3ODNBQzZBRTIyQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEH AQH/BCwwKjASBAIAATAMAwQCLaOQAwQCLajIMBQEAgACMA4DBQAoBFMsAwUAKARY sDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMEF3ACAwQZGDANBgkqhkiG9w0BAQsF AAOCAQEAU28y7441+c0kakdywdpcmcSR42GfIHj8io47Rg6+jqIq35aHa+Y0OXEq ge7dVfo+R54qvK7YmN1UgxO8osdig/obEE9KRNsSYg1acS9rPFd9CuYPAG9S+hwo 2ONzDhXxPOGkhkvz8kPtCuRdsNSTJ8nDwdNifOclmqa72Tl3FNo7ySB2S/ggbsW0 pMVa8P+Z9XDGackwRrzQXcr8M6HyoTMHp5Bezjpa7mNzKAJq5wyS+4YG0FhpGTdT wBxWLBeogL4DpDS4KdnKI3DZd3nFdMhZ33rvHB8w/LBe5T2GqEma4tEkvR4E9/al W1O81byvyVlWNAvoB+gZsr8o/8BzBw== -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:55 2024 by rpki-client on console-ams.rpki-client.org