$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.cer File: BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.cer (raw, json) Hash identifier: X+rzFiF/JeaiGPlNZiOel3VrdfbpQaX/eRs/MQ8hQTM= Subject key identifier: BA:9C:8A:E4:CF:CE:7D:90:0B:77:A3:2A:AE:8A:B5:49:D3:01:42:6F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4B0362D192308445BF6AAF4D2B213D376B07C3DE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.mft caRepository: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 01:54:52 +0000 Certificate not after: Thu 03 Apr 2025 01:59:52 +0000 Subordinate resources: AS: 268258 IP: 45.237.8.0/22 IP: 2804:4e64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:03:62:d1:92:30:84:45:bf:6a:af:4d:2b:21:3d:37:6b:07:c3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 01:54:52 2024 GMT Not After : Apr 3 01:59:52 2025 GMT Subject: CN=BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:74:d8:e3:29:fe:0c:2a:7e:4c:7b:06:d8: c7:4d:34:1f:8c:66:ad:b7:65:c0:07:37:76:21:bd: b1:bd:04:f9:27:b1:98:94:28:39:a9:1a:d3:f9:84: 0f:06:ee:46:a3:5f:e9:bb:f3:94:15:f5:98:a9:eb: 83:0d:06:f8:7d:3d:19:f3:d0:2a:cb:e6:81:c5:8b: 8f:d0:f7:1e:68:6e:45:9e:12:d5:da:5c:8b:87:97: aa:16:3f:bb:39:ac:ae:1e:6c:40:cc:5f:13:ab:91: bc:16:1f:89:a9:fd:7c:b5:f5:68:dd:fb:67:69:4e: 8d:46:9b:6b:a7:f2:a6:ab:30:4a:a8:ca:86:83:91: e0:1b:12:df:bc:e6:8c:27:ac:93:76:8c:6f:4d:25: 99:d9:ce:91:34:ec:8b:4e:27:14:35:1b:2e:c4:2d: 59:b5:37:72:df:ce:c2:61:48:5d:90:16:e0:b9:7e: dd:4e:90:c4:9d:f8:55:06:af:6e:7d:94:84:0e:c7: f4:1b:20:47:6f:e8:d2:8d:1f:af:45:c4:10:6f:da: 98:fa:0f:ff:f6:7b:89:fe:4c:02:f2:2d:69:0e:ba: 1e:8f:65:2f:99:24:5a:ca:36:e5:c8:50:28:d9:e2: 00:fd:e3:5f:6b:e6:6c:a6:bc:d4:50:f6:ce:f6:a1: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:9C:8A:E4:CF:CE:7D:90:0B:77:A3:2A:AE:8A:B5:49:D3:01:42:6F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/1/BA9C8AE4CFCE7D900B77A32AAE8AB549D301426F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.8.0/22 IPv6: 2804:4e64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268258 Signature Algorithm: sha256WithRSAEncryption 85:f6:f4:9a:69:7f:47:0f:ac:16:27:d3:5b:9b:ba:55:e7:77: 2c:96:65:48:0f:88:9f:e1:1e:c5:38:e5:06:25:68:a6:8e:27: 62:51:1e:74:37:2a:80:55:c6:cc:e7:ba:91:42:30:69:8b:21: c3:56:d8:26:9b:ba:62:9a:a7:1c:9a:24:f0:c6:b1:ba:b5:7f: 46:26:94:6d:5c:81:a0:ac:79:10:d7:e6:02:a6:52:e2:9c:0f: 12:aa:6f:90:93:59:d1:9e:61:7f:7c:da:37:96:c7:33:c1:de: e6:49:be:e1:04:af:a2:27:5c:fc:2f:d4:f9:2e:36:ca:f9:48: ea:66:b4:3f:78:e6:ac:2e:df:6a:03:e0:b8:2e:0b:a3:06:e6: 59:26:02:b5:de:c2:30:a1:4d:ee:0c:79:91:0e:21:57:f6:84: 48:87:9c:cc:b2:7f:07:d7:25:cb:9b:22:2f:46:12:94:cc:78: ee:11:01:82:e1:34:49:39:60:76:ee:01:07:81:ee:6f:85:16: b9:cf:14:38:28:79:9d:d1:d4:ec:a2:ab:f8:67:87:78:cd:1b: e7:bb:1c:ae:55:5a:95:56:2c:35:b8:26:07:34:53:46:94:37: 80:80:59:05:5b:de:ae:ac:94:17:50:8d:1a:44:cb:1a:09:72: 63:46:0d:b2 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUSwNi0ZIwhEW/aq9NKyE9N2sHw94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMTU0NTJaFw0yNTA0MDMwMTU5NTJaMDMxMTAvBgNV BAMTKEJBOUM4QUU0Q0ZDRTdEOTAwQjc3QTMyQUFFOEFCNTQ5RDMwMTQyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CnTY4yn+DCp+THsG2MdNNB+M Zq23ZcAHN3YhvbG9BPknsZiUKDmpGtP5hA8G7kajX+m785QV9Zip64MNBvh9PRnz 0CrL5oHFi4/Q9x5obkWeEtXaXIuHl6oWP7s5rK4ebEDMXxOrkbwWH4mp/Xy19Wjd +2dpTo1Gm2un8qarMEqoyoaDkeAbEt+85ownrJN2jG9NJZnZzpE07ItOJxQ1Gy7E LVm1N3LfzsJhSF2QFuC5ft1OkMSd+FUGr259lIQOx/QbIEdv6NKNH69FxBBv2pj6 D//2e4n+TALyLWkOuh6PZS+ZJFrKNuXIUCjZ4gD9419r5mymvNRQ9s72oQBhAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6nIrkz859kAt3 oyquirVJ0wFCbzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0ho aWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1mQlQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0ho aWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1mQlQvMS9CQTlD OEFFNENGQ0U3RDkwMEI3N0EzMkFBRThBQjU0OUQzMDE0MjZGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt7QgwDQQCAAIwBwMFACgETmQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBfiMA0GCSqGSIb3DQEBCwUAA4IBAQCF9vSaaX9HD6wWJ9Nb m7pV53cslmVID4if4R7FOOUGJWimjidiUR50NyqAVcbM57qRQjBpiyHDVtgmm7pi mqccmiTwxrG6tX9GJpRtXIGgrHkQ1+YCplLinA8Sqm+Qk1nRnmF/fNo3lsczwd7m Sb7hBK+iJ1z8L9T5LjbK+UjqZrQ/eOasLt9qA+C4LgujBuZZJgK13sIwoU3uDHmR DiFX9oRIh5zMsn8H1yXLmyIvRhKUzHjuEQGC4TRJOWB27gEHge5vhRa5zxQ4KHmd 0dTsoqv4Z4d4zRvnuxyuVVqVViw1uCYHNFNGlDeAgFkFW96urJQXUI0aRMsaCXJj Rg2y -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:12 2024 by rpki-client on console.sobornost.net