$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer File: 60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer (raw, json) Hash identifier: Lvr7v4oZX9dSuceHCzbwnclgFAkv6ba25yr6VaTvs8o= Subject key identifier: 60:A2:7F:04:2B:57:F4:E8:72:85:5F:53:53:E0:A6:43:2D:AC:4A:F2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 71D03DAEAB9665FD3966AB5EB52C2C9BA5A4F4BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft caRepository: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 18 Jun 2024 12:19:09 +0000 Certificate not after: Tue 17 Jun 2025 12:24:09 +0000 Subordinate resources: AS: 263266 IP: 170.82.108.0/22 IP: 177.129.28.0/22 IP: 2804:1614::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d0:3d:ae:ab:96:65:fd:39:66:ab:5e:b5:2c:2c:9b:a5:a4:f4:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 18 12:19:09 2024 GMT Not After : Jun 17 12:24:09 2025 GMT Subject: CN=60A27F042B57F4E872855F5353E0A6432DAC4AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:bf:b5:d1:1a:23:53:55:f6:f3:dc:a9:4a: 83:c3:89:c3:c9:60:1f:ce:e9:20:8f:5f:0e:e9:3e: c1:f8:3a:ad:b0:26:03:08:c1:c6:05:2c:78:34:44: 67:3c:b8:b7:1f:3e:a9:e4:81:a6:ce:fa:9f:7d:e9: a3:c2:d8:dd:e9:3e:9c:c4:91:68:4a:52:e2:89:99: 4f:fd:95:d0:db:67:6d:b5:43:4a:61:8c:ab:46:0a: 1f:4a:f2:5b:db:b6:34:da:fd:2e:1e:d8:92:a0:d7: d2:38:31:bd:78:bd:80:64:23:68:10:b0:e2:fa:be: d3:d9:4c:b8:e1:23:e3:d7:e6:c7:1a:e4:b4:b4:a7: 9a:2e:63:ab:56:2f:5f:78:ed:5c:f3:67:c4:7f:7d: bd:2a:62:93:be:f8:60:0f:2c:d8:e8:3b:83:4e:75: 65:30:78:c8:9a:e6:45:53:09:7a:ac:24:2e:d8:a7: 0e:cd:f7:73:f2:a7:1a:bc:19:2b:00:ac:f1:57:6f: a2:a9:0f:8c:db:ec:2f:af:f6:d8:b1:d8:95:5b:c9: 4a:2f:0e:30:4a:28:4a:71:0d:5d:bf:c4:c5:71:4b: f1:0d:b1:87:7d:10:d3:ac:35:5d:14:3f:16:da:15: 8d:9e:62:eb:74:84:e9:71:03:10:83:83:cc:14:50: fd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:A2:7F:04:2B:57:F4:E8:72:85:5F:53:53:E0:A6:43:2D:AC:4A:F2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.108.0/22 177.129.28.0/22 IPv6: 2804:1614::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263266 Signature Algorithm: sha256WithRSAEncryption a1:ed:5c:8f:60:0b:d8:6a:61:6e:a6:4b:6f:ff:05:10:fd:d2: c2:73:49:96:51:08:63:3c:bd:9d:a4:c3:50:5c:e0:a6:9b:80: 8b:54:39:85:60:74:58:fe:fe:65:14:d0:7d:4b:c3:ab:af:5c: 40:79:6e:1f:31:0d:ec:3d:25:68:fd:56:a2:88:df:86:26:de: 18:d2:dd:eb:35:e4:33:4e:03:5a:e8:74:3a:83:7d:c4:06:45: 3d:6e:21:f4:4c:17:86:7b:85:68:57:38:90:43:e7:74:d8:46: 0b:64:80:a5:3b:75:8e:46:64:ca:2e:07:4b:f5:3f:26:8f:98: 17:4d:06:d0:40:7b:d2:db:0f:d2:10:89:00:8d:84:8d:05:b5: 5b:7e:82:2b:c3:52:46:7c:1e:26:23:4a:f7:eb:03:07:fb:d8: d6:09:62:35:f3:8e:be:19:81:5f:b9:bf:6c:38:fd:38:75:1e: 64:9c:8c:c6:c7:04:31:b1:90:67:43:25:e8:6c:9d:7e:70:c5: e8:08:7f:72:55:a6:1e:dc:91:11:fd:d5:0e:91:46:1c:f2:78: e2:ec:46:3d:ec:80:71:ab:81:eb:c5:2c:83:aa:bf:e1:d4:03: 4a:3f:21:5c:2f:b4:8e:8f:8f:af:4a:2c:6c:e9:3f:82:3c:ba: c2:4d:1b:58 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUcdA9rquWZf05ZqtetSwsm6Wk9L8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA2MTgxMjE5MDlaFw0yNTA2MTcxMjI0MDlaMDMxMTAvBgNV BAMTKDYwQTI3RjA0MkI1N0Y0RTg3Mjg1NUY1MzUzRTBBNjQzMkRBQzRBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFb7+10RojU1X289ypSoPDicPJ YB/O6SCPXw7pPsH4Oq2wJgMIwcYFLHg0RGc8uLcfPqnkgabO+p996aPC2N3pPpzE kWhKUuKJmU/9ldDbZ221Q0phjKtGCh9K8lvbtjTa/S4e2JKg19I4Mb14vYBkI2gQ sOL6vtPZTLjhI+PX5sca5LS0p5ouY6tWL1947VzzZ8R/fb0qYpO++GAPLNjoO4NO dWUweMia5kVTCXqsJC7Ypw7N93Pypxq8GSsArPFXb6KpD4zb7C+v9tix2JVbyUov DjBKKEpxDV2/xMVxS/ENsYd9ENOsNV0UPxbaFY2eYut0hOlxAxCDg8wUUP0DAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRgon8EK1f06HKF X1NT4KZDLaxK8jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlVX ajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1JnZTIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJV V2o3V01hS1I3YkduaTVib1JzYjYzbzZVeEw5Qzc5dTV1YjZObmtSZ2UyLzAvNjBB MjdGMDQyQjU3RjRFODcyODU1RjUzNTNFMEE2NDMyREFDNEFGMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlJsAwQCsYEcMA0EAgACMAcDBQAoBBYUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEYjANBgkqhkiG9w0BAQsFAAOCAQEAoe1cj2AL 2GphbqZLb/8FEP3SwnNJllEIYzy9naTDUFzgppuAi1Q5hWB0WP7+ZRTQfUvDq69c QHluHzEN7D0laP1WoojfhibeGNLd6zXkM04DWuh0OoN9xAZFPW4h9EwXhnuFaFc4 kEPndNhGC2SApTt1jkZkyi4HS/U/Jo+YF00G0EB70tsP0hCJAI2EjQW1W36CK8NS RnweJiNK9+sDB/vY1gliNfOOvhmBX7m/bDj9OHUeZJyMxscEMbGQZ0Ml6GydfnDF 6Ah/clWmHtyREf3VDpFGHPJ44uxGPeyAcauB68Usg6q/4dQDSj8hXC+0jo+Pr0os bOk/gjy6wk0bWA== -----END CERTIFICATE-----Generated at Mon Feb 17 08:17:27 2025 by rpki-client