$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer File: B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer (raw, json) Hash identifier: f/kBIv1Vwu81r8BpvKMD2xHdP9F+N7wEV3asbFxbMUQ= Subject key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 673ADB3187522C049BE8EC76AFB720EBD36AEE18 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft caRepository: rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:31 +0000 Certificate not after: Wed 02 Apr 2025 18:30:31 +0000 Subordinate resources: AS: 264311 IP: 138.122.100.0/22 IP: 2804:25f0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3a:db:31:87:52:2c:04:9b:e8:ec:76:af:b7:20:eb:d3:6a:ee:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:31 2024 GMT Not After : Apr 2 18:30:31 2025 GMT Subject: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:0b:e1:f4:b8:e9:cc:1c:cd:9b:ac:64:b2: 4a:ae:2f:55:64:80:bb:1a:36:1d:76:e5:d0:28:4f: 99:e5:06:2c:01:bc:93:f0:7e:0f:4b:71:a8:06:80: 25:80:e1:e3:07:b1:c6:5e:9e:12:fa:46:15:c5:b6: 68:ef:2d:47:86:f5:c3:f0:40:f6:52:93:8b:41:09: 51:f2:5e:1d:4c:ef:fe:19:e9:02:fd:ba:46:90:49: cf:f7:6a:53:b8:56:7b:e7:1f:45:ef:88:52:c7:9f: c4:07:da:49:5f:49:d3:a6:86:cc:01:f6:2a:97:a2: 53:6b:ac:5c:35:bb:9d:35:7f:31:7f:b1:8b:a0:3c: 59:98:7b:06:05:9d:e8:24:8f:33:6a:a3:9e:ac:25: 35:3b:d5:11:d6:7d:fc:f1:4b:53:d2:9c:c8:dd:ea: 99:69:de:2d:55:6b:9f:e9:c4:67:3e:32:62:8e:6e: 85:ba:3d:33:a6:b3:ae:d4:f3:c9:13:89:64:80:f9: 91:14:31:bd:10:f3:15:5f:d8:79:c9:94:9f:8a:12: 9e:7e:fe:d6:15:c0:8a:31:b0:29:7c:2d:9d:74:7e: 12:eb:71:d6:04:e0:f0:26:cb:81:6c:99:3c:f0:49: 3a:b1:8e:19:b9:ad:c0:22:94:e7:0d:e9:aa:c9:8d: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.100.0/22 IPv6: 2804:25f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264311 Signature Algorithm: sha256WithRSAEncryption 9b:b2:6c:c9:59:9e:79:ef:27:a3:d0:8b:df:8d:12:c4:07:d5: 9d:92:ac:00:df:bb:67:55:f0:c8:1d:5e:4a:d7:91:37:5c:50: 7a:8c:ed:7a:2f:37:11:e1:14:b1:f9:34:50:10:53:0f:42:51: ae:c5:d5:4d:b7:1a:e9:e6:54:37:04:77:14:cf:47:26:10:33: 20:0d:5d:c3:0a:75:34:65:54:64:9e:46:cf:a5:41:90:de:cb: 59:f8:12:8f:67:85:a1:b6:16:6a:50:59:07:21:f5:5d:48:e9: 16:52:16:41:3b:74:f1:ef:8a:96:4b:40:ac:44:99:bf:b8:97: 0b:a3:05:64:5e:08:f8:f9:c3:3a:01:03:b0:f7:20:c0:6a:92: bc:6f:cd:34:3f:6e:03:46:79:b4:d6:8e:c1:a7:97:8b:96:fe: 9d:9a:4d:43:ae:d8:60:71:5b:94:eb:b5:fc:61:1e:4c:75:be: 9a:e6:9a:75:7a:9c:9a:4f:da:68:65:bc:4c:28:b6:26:64:aa: eb:da:88:78:30:b8:84:6d:35:58:58:d8:3f:80:f3:6f:ca:f7: 88:eb:cc:fe:0a:a9:ee:4d:6d:0d:5e:74:d6:ba:6a:76:c8:cf: d5:30:66:08:9c:cc:31:d2:20:82:41:48:a2:c7:e1:91:83:e5: a1:d4:4d:f6 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUZzrbMYdSLASb6Ox2r7cg69Nq7hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1MzFaFw0yNTA0MDIxODMwMzFaMDMxMTAvBgNV BAMTKEI1RTBCRTNDNEY3M0Y4NTJCRkYzNTM1NTM3MDM3Q0FFNDgyQTRFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWwvh9LjpzBzNm6xkskquL1Vk gLsaNh125dAoT5nlBiwBvJPwfg9LcagGgCWA4eMHscZenhL6RhXFtmjvLUeG9cPw QPZSk4tBCVHyXh1M7/4Z6QL9ukaQSc/3alO4VnvnH0XviFLHn8QH2klfSdOmhswB 9iqXolNrrFw1u501fzF/sYugPFmYewYFnegkjzNqo56sJTU71RHWffzxS1PSnMjd 6plp3i1Va5/pxGc+MmKOboW6PTOms67U88kTiWSA+ZEUMb0Q8xVf2HnJlJ+KEp5+ /tYVwIoxsCl8LZ10fhLrcdYE4PAmy4FsmTzwSTqxjhm5rcAilOcN6arJjeaXAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS14L48T3P4Ur/z U1U3A3yuSCpO+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0Nt d3NUSDNncXRRR0h3ZVZEa1ZWNXpFd1FLUmRQdlVBY0RhakFRdDlXUmYvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0Nt d3NUSDNncXRRR0h3ZVZEa1ZWNXpFd1FLUmRQdlVBY0RhakFRdDlXUmYvMS9CNUUw QkUzQzRGNzNGODUyQkZGMzUzNTUzNzAzN0NBRTQ4MkE0RUZBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKemQwDQQCAAIwBwMFACgEJfAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAh3MA0GCSqGSIb3DQEBCwUAA4IBAQCbsmzJWZ557yej0Ivf jRLEB9WdkqwA37tnVfDIHV5K15E3XFB6jO16LzcR4RSx+TRQEFMPQlGuxdVNtxrp 5lQ3BHcUz0cmEDMgDV3DCnU0ZVRknkbPpUGQ3stZ+BKPZ4WhthZqUFkHIfVdSOkW UhZBO3Tx74qWS0CsRJm/uJcLowVkXgj4+cM6AQOw9yDAapK8b800P24DRnm01o7B p5eLlv6dmk1DrthgcVuU67X8YR5Mdb6a5pp1epyaT9poZbxMKLYmZKrr2oh4MLiE bTVYWNg/gPNvyveI68z+CqnuTW0NXnTWump2yM/VMGYInMwx0iCCQUiix+GRg+Wh 1E32 -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:11 2024 by rpki-client on console.sobornost.net