$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7F88A78A336184C335D3BA9829FC415F135FAA5.cer File: B7F88A78A336184C335D3BA9829FC415F135FAA5.cer (raw, json) Hash identifier: 5dstF70jvZrde3B/xV2LWXKEiogz3/vyoW6VBW8+BPU= Subject key identifier: B7:F8:8A:78:A3:36:18:4C:33:5D:3B:A9:82:9F:C4:15:F1:35:FA:A5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2B1D0A53618CF33C3955ADE6F4D0AFE2BDBFD7C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/1/B7F88A78A336184C335D3BA9829FC415F135FAA5.mft caRepository: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:48 +0000 Certificate not after: Wed 02 Apr 2025 18:30:48 +0000 Subordinate resources: AS: 263891 IP: 138.204.48.0/22 IP: 170.78.160.0/22 IP: 2804:2748::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 03:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1d:0a:53:61:8c:f3:3c:39:55:ad:e6:f4:d0:af:e2:bd:bf:d7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:48 2024 GMT Not After : Apr 2 18:30:48 2025 GMT Subject: CN=B7F88A78A336184C335D3BA9829FC415F135FAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:2f:7a:c1:b1:b5:55:48:5a:18:e8:bb:54: ba:9d:e5:ac:ac:2c:b3:4d:c3:03:2f:c4:ea:28:5e: 91:f7:88:00:f4:50:5f:b5:32:f5:db:17:9c:08:65: ac:45:d8:72:a6:41:5a:76:4a:bb:d7:14:63:b2:36: 8b:22:c6:9f:b4:05:80:1c:95:42:08:8d:98:a1:5a: 08:23:d9:5a:b7:85:65:ed:2d:32:90:06:97:ca:15: a3:23:78:15:dc:38:ae:fa:2f:ee:98:44:08:48:15: ef:89:1c:17:92:48:ba:3d:e9:a1:02:05:2c:49:2f: 55:18:a9:bc:95:fb:ee:fa:a1:ff:46:94:63:43:e3: 16:26:f1:35:33:36:eb:15:3f:aa:f9:d2:43:51:62: 7e:64:2d:45:a4:56:4d:f6:16:7f:43:9b:64:55:da: 1a:c0:30:75:c3:12:a7:60:67:47:9a:ae:44:9b:52: 00:67:74:61:35:76:9d:5f:29:1e:75:00:57:7d:03: d7:cd:bb:07:24:a1:39:21:4f:76:80:b0:ac:66:d5: ab:c8:52:e4:c4:8f:c7:ff:fb:ac:b8:3c:cf:d3:21: 99:a9:a0:9e:f7:e5:b2:3a:bc:65:18:5e:47:79:31: 9f:4c:a3:3b:e8:d8:27:12:ed:2c:44:66:4d:1d:2e: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:F8:8A:78:A3:36:18:4C:33:5D:3B:A9:82:9F:C4:15:F1:35:FA:A5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/1/B7F88A78A336184C335D3BA9829FC415F135FAA5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.48.0/22 170.78.160.0/22 IPv6: 2804:2748::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263891 Signature Algorithm: sha256WithRSAEncryption 01:3b:8b:e9:9e:f2:a4:11:5e:df:13:4b:f7:59:e6:7b:5c:cb: 2d:a3:f0:c1:7f:44:62:12:fa:93:3e:64:41:20:4b:8d:01:ae: fd:12:b1:61:11:2d:c5:ce:34:74:1b:9b:93:06:4a:e0:20:17: ff:2e:53:49:90:08:cd:ee:e5:c7:46:bb:03:4a:96:30:5c:ab: 72:7c:7d:a0:32:45:60:76:98:bb:65:82:06:92:85:b3:5e:a1: de:48:51:b4:a2:02:c9:23:8d:98:df:3a:47:de:a8:08:d8:7e: 5b:7e:8c:61:80:7c:1b:fe:99:fb:19:bf:3a:f0:17:46:f6:b0: 94:c1:f5:db:b9:2a:ba:c3:27:0a:96:41:ad:94:87:93:18:12: 70:ad:48:f0:25:c3:d0:02:71:96:1c:3c:64:6d:a8:0e:d4:88: 18:70:e2:80:e2:fa:f0:16:23:00:28:2e:48:f8:6b:47:8a:0f: f0:04:15:15:fb:68:64:19:5c:51:2d:40:c7:73:5c:7a:a0:1d: ac:db:b0:25:9c:20:7b:95:6e:bf:e6:b3:5e:1c:45:28:59:e7: 83:69:f6:c8:5c:60:b4:ff:c3:f9:4c:5f:3b:50:42:db:83:29: 0f:41:ea:e1:ea:32:f2:61:7c:05:80:94:27:14:3a:d4:34:b1: e5:45:51:f0 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUKx0KU2GM8zw5Va3m9NCv4r2/18cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1NDhaFw0yNTA0MDIxODMwNDhaMDMxMTAvBgNV BAMTKEI3Rjg4QTc4QTMzNjE4NEMzMzVEM0JBOTgyOUZDNDE1RjEzNUZBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ai96wbG1VUhaGOi7VLqd5ays LLNNwwMvxOooXpH3iAD0UF+1MvXbF5wIZaxF2HKmQVp2SrvXFGOyNosixp+0BYAc lUIIjZihWggj2Vq3hWXtLTKQBpfKFaMjeBXcOK76L+6YRAhIFe+JHBeSSLo96aEC BSxJL1UYqbyV++76of9GlGND4xYm8TUzNusVP6r50kNRYn5kLUWkVk32Fn9Dm2RV 2hrAMHXDEqdgZ0earkSbUgBndGE1dp1fKR51AFd9A9fNuwckoTkhT3aAsKxm1avI UuTEj8f/+6y4PM/TIZmpoJ735bI6vGUYXkd5MZ9Mozvo2CcS7SxEZk0dLm1LAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3+Ip4ozYYTDNd O6mCn8QV8TX6pTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlFn QWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVVNFovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JR Z0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzEvQjdG ODhBNzhBMzM2MTg0QzMzNUQzQkE5ODI5RkM0MTVGMTM1RkFBNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCiswwAwQCqk6gMA0EAgACMAcDBQAoBCdIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQG0zANBgkqhkiG9w0BAQsFAAOCAQEAATuL6Z7y pBFe3xNL91nme1zLLaPwwX9EYhL6kz5kQSBLjQGu/RKxYREtxc40dBubkwZK4CAX /y5TSZAIze7lx0a7A0qWMFyrcnx9oDJFYHaYu2WCBpKFs16h3khRtKICySONmN86 R96oCNh+W36MYYB8G/6Z+xm/OvAXRvawlMH127kqusMnCpZBrZSHkxgScK1I8CXD 0AJxlhw8ZG2oDtSIGHDigOL68BYjACguSPhrR4oP8AQVFftoZBlcUS1Ax3NceqAd rNuwJZwge5Vuv+azXhxFKFnng2n2yFxgtP/D+UxfO1BC24MpD0Hq4eoy8mF8BYCU JxQ61DSx5UVR8A== -----END CERTIFICATE-----Generated at Wed Jun 26 03:05:46 2024 by rpki-client on console.sobornost.net