$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer File: BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer (raw, json) Hash identifier: eliYtZAbFV2xJu4/I35eQv/pKcONpX+tzoXcRgitMLs= Subject key identifier: BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0DA0BFABB9BBEBFABC06A04C6A712CDDEC2CF679 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft caRepository: rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:33:35 +0000 Certificate not after: Wed 02 Apr 2025 18:38:35 +0000 Subordinate resources: AS: 267470 IP: 192.141.72.0/22 IP: 2804:41fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a0:bf:ab:b9:bb:eb:fa:bc:06:a0:4c:6a:71:2c:dd:ec:2c:f6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:33:35 2024 GMT Not After : Apr 2 18:38:35 2025 GMT Subject: CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:b4:78:b9:d6:3a:9d:9f:cf:94:2f:fc:a7: 3c:9d:9a:bb:1a:b1:3a:51:4d:e2:c9:df:3c:f8:c4: 3c:90:e6:92:4f:78:41:a6:76:e9:4a:46:3b:ab:2a: b2:9e:60:d6:52:d1:76:8c:c1:03:89:15:01:00:da: fd:92:0e:96:3f:75:29:fc:ae:bc:3c:b4:28:30:2d: 9f:21:e0:96:a3:76:df:5b:9a:d4:6c:3c:c0:af:6d: f1:15:99:a3:96:b9:05:80:cb:02:7a:84:f3:3b:b9: f0:ca:67:af:5a:19:53:9b:6e:76:ea:66:f9:7d:89: ae:81:5d:83:5a:d1:9f:81:7a:16:7f:21:52:51:55: d0:2c:3f:0f:d8:a8:85:57:a1:01:33:66:58:27:f6: 8e:28:8c:83:97:ee:e9:17:0c:fa:e9:c6:33:3f:9e: 4f:49:94:00:e2:dd:36:a8:50:55:b0:ba:65:86:23: a5:d5:16:65:ea:0c:30:47:c4:56:6d:f7:77:35:83: 2b:c8:e7:e6:8b:83:73:99:e9:df:4a:7a:3f:d7:35: 50:b5:ca:06:79:73:33:b9:18:af:72:4d:1b:5f:c1: f3:d0:19:c9:3c:89:fb:b5:ee:37:5f:0b:a2:e7:1a: 69:74:e1:4f:2b:02:45:d0:e5:f5:44:91:64:67:ac: 24:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.72.0/22 IPv6: 2804:41fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267470 Signature Algorithm: sha256WithRSAEncryption d5:c1:83:37:0b:17:0c:2e:9f:60:d7:18:42:3b:fc:13:b4:ed: 0d:ed:be:77:39:bd:b7:ce:b9:e2:ba:62:71:58:99:50:e4:b2: 6b:c6:fb:4f:08:8b:cb:20:a0:36:6d:d1:ab:39:89:99:50:66: c7:a3:f6:eb:fd:3c:22:34:5f:f3:7c:a9:8f:a0:ae:12:19:e4: ce:6d:81:8a:da:e2:6f:3c:df:10:57:4c:d5:7b:0e:e1:d0:1b: 76:15:6f:e3:3d:02:99:55:e1:ab:ee:2f:28:a4:c3:46:9e:e5: d6:5b:d6:a2:8b:cf:e9:4f:d3:3f:36:a9:54:2a:41:2d:8a:83: e6:88:82:80:73:72:6d:4c:d5:5f:da:e2:9a:63:d6:d2:ae:f3: be:0c:eb:76:41:cb:9a:3b:fa:fd:25:d2:d6:20:ca:ab:28:bc: 1f:70:3e:de:5d:99:ad:05:a3:1d:72:94:68:f9:9d:9f:3f:1c: cd:c6:dd:02:eb:85:b8:c4:e2:a2:37:67:38:cf:b7:b2:a8:70: f7:e1:8b:ff:d3:3b:4b:e2:1b:04:04:bb:b2:40:8c:8c:dd:cc: 6b:08:a9:84:10:14:48:b0:3b:d7:2b:62:5d:7b:d3:5f:0e:3a: 9b:4b:06:6e:f4:6d:50:97:19:ca:61:ab:dd:1a:3c:3d:f4:39: a1:3e:e3:23 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUDaC/q7m76/q8BqBManEs3ews9nkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODMzMzVaFw0yNTA0MDIxODM4MzVaMDMxMTAvBgNV BAMTKEJGRDU2NTEyQzg1ODBEMEU2RDJGRDA1RjVEMTNDMzcxNEI0NUFBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLLR4udY6nZ/PlC/8pzydmrsa sTpRTeLJ3zz4xDyQ5pJPeEGmdulKRjurKrKeYNZS0XaMwQOJFQEA2v2SDpY/dSn8 rrw8tCgwLZ8h4Jajdt9bmtRsPMCvbfEVmaOWuQWAywJ6hPM7ufDKZ69aGVObbnbq Zvl9ia6BXYNa0Z+BehZ/IVJRVdAsPw/YqIVXoQEzZlgn9o4ojIOX7ukXDPrpxjM/ nk9JlADi3TaoUFWwumWGI6XVFmXqDDBHxFZt93c1gyvI5+aLg3OZ6d9Kej/XNVC1 ygZ5czO5GK9yTRtfwfPQGck8ifu17jdfC6LnGml04U8rAkXQ5fVEkWRnrCTnAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/1WUSyFgNDm0v 0F9dE8NxS0Wq6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzRM S1VWcDZpMzFxNEZSR2hBeGY3amFjOWMxZHI4SG1kR1dOZXdKWVVuOG4vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzRM S1VWcDZpMzFxNEZSR2hBeGY3amFjOWMxZHI4SG1kR1dOZXdKWVVuOG4vMS9CRkQ1 NjUxMkM4NTgwRDBFNkQyRkQwNUY1RDEzQzM3MTRCNDVBQUVBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALAjUgwDQQCAAIwBwMFACgEQfwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBTOMA0GCSqGSIb3DQEBCwUAA4IBAQDVwYM3CxcMLp9g1xhC O/wTtO0N7b53Ob23zrniumJxWJlQ5LJrxvtPCIvLIKA2bdGrOYmZUGbHo/br/Twi NF/zfKmPoK4SGeTObYGK2uJvPN8QV0zVew7h0Bt2FW/jPQKZVeGr7i8opMNGnuXW W9aii8/pT9M/NqlUKkEtioPmiIKAc3JtTNVf2uKaY9bSrvO+DOt2QcuaO/r9JdLW IMqrKLwfcD7eXZmtBaMdcpRo+Z2fPxzNxt0C64W4xOKiN2c4z7eyqHD34Yv/0ztL 4hsEBLuyQIyM3cxrCKmEEBRIsDvXK2Jde9NfDjqbSwZu9G1QlxnKYavdGjw99Dmh PuMj -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:13 2024 by rpki-client on console.sobornost.net