$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer File: 60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer (raw, json) Hash identifier: GgdHGR6NFRJ1C3xL6pPi5HTHg0kpuOa0Z77xvQ1uwPw= Subject key identifier: 60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5AE92ADEA2911CC9BACB05EFE77CFA94F18269FF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft caRepository: rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 11 Sep 2025 16:01:46 +0000 Certificate not after: Thu 10 Sep 2026 16:06:46 +0000 Subordinate resources: AS: 52913 IP: 167.249.4.0/22 IP: 170.150.76.0/22 IP: 170.246.164.0/22 IP: 177.23.168.0/21 IP: 179.127.40.0/21 IP: 190.109.80.0/22 IP: 2804:1088::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e9:2a:de:a2:91:1c:c9:ba:cb:05:ef:e7:7c:fa:94:f1:82:69:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 11 16:01:46 2025 GMT Not After : Sep 10 16:06:46 2026 GMT Subject: CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:12:ef:03:56:80:17:87:90:95:3f:9a:99: 0d:d1:78:b2:ca:f9:15:05:51:dd:ff:08:87:04:2d: 82:3e:35:9a:b4:b6:22:c7:20:54:84:6e:43:7a:37: c2:52:a6:91:1c:43:2d:10:25:22:01:40:af:af:a3: 1a:55:2a:49:94:a7:fd:d3:07:53:72:f7:3b:33:b9: e6:78:2f:e3:62:87:55:6b:6e:ff:9e:49:07:8d:c8: 7b:86:d6:8a:6d:8c:2d:47:28:84:e9:c6:96:9e:8a: 3c:5f:47:76:8f:b8:7f:7f:96:89:82:ab:20:60:97: 48:09:ba:9d:ff:6d:e2:d7:09:3d:a6:c7:96:02:e2: f4:be:06:b6:8d:0a:51:89:04:ab:29:21:92:05:8c: 22:fd:d0:14:75:23:d6:02:70:a2:34:9c:69:be:3e: 34:6e:c8:63:f0:0c:38:27:7f:20:28:23:1d:08:fe: 32:42:23:68:f5:9a:b1:e3:68:5f:ee:d5:a0:15:6c: 90:c3:1f:c5:0b:50:b2:13:d9:62:7c:4f:8c:9c:f6: 29:8b:3f:ec:25:24:9b:95:e6:ab:21:27:de:10:a9: 18:d4:26:33:96:9e:f2:7b:7e:38:89:42:9d:9a:b3: 7b:e6:21:16:af:83:2d:cd:f6:70:24:0e:9a:99:61: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.249.4.0/22 170.150.76.0/22 170.246.164.0/22 177.23.168.0/21 179.127.40.0/21 190.109.80.0/22 IPv6: 2804:1088::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52913 Signature Algorithm: sha256WithRSAEncryption 8c:1f:80:a3:85:c3:6d:ae:16:9f:47:01:70:41:46:65:cd:37: 24:4d:f4:ee:02:8b:90:50:01:5b:03:af:41:9f:08:08:66:fb: df:66:d6:31:6a:24:4c:87:c6:2f:a6:f2:81:9d:2a:e2:cb:7a: 66:ae:cb:d3:f3:fb:5f:de:02:d7:93:3d:fd:50:09:eb:bc:87: a2:2b:b6:59:a3:27:11:42:e3:1e:0e:e3:a0:fa:ff:4a:eb:9c: 64:a9:c6:65:35:64:85:d7:81:61:b4:ec:dd:c2:a7:f5:72:c5: cb:08:0f:31:05:f3:cd:d7:0e:e9:a4:26:41:44:bd:c2:58:a8: e3:10:b3:d5:30:d7:5d:a0:41:87:10:a8:cd:9b:f2:ba:6a:7f: fa:ec:33:ea:0e:09:bf:9e:a0:7a:03:21:27:9b:d0:64:3f:44: b3:dc:b8:6a:6c:62:19:90:c9:92:e1:7f:9f:be:2e:9f:2b:8d: 32:e2:61:29:b1:2d:5c:08:ff:2a:ad:b4:48:7b:a7:8b:87:39: dc:f9:08:a6:1d:95:6f:86:2a:0f:c9:cd:f1:18:5e:f5:25:c7: ee:a2:1c:32:16:4e:0e:78:df:d9:20:7c:ec:1e:fa:2f:91:f4: b3:97:13:69:3e:0d:80:31:a3:59:98:16:9b:ec:1e:c5:31:95: 61:38:b3:9a -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUWukq3qKRHMm6ywXv53z6lPGCaf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTExNjAxNDZaFw0yNjA5MTAxNjA2NDZaMDMxMTAvBgNV BAMTKDYwQ0IxQThGRUNBM0JBNzk4NEFCREMwMkFEREYzMkUzRDBCOUZBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmBLvA1aAF4eQlT+amQ3ReLLK +RUFUd3/CIcELYI+NZq0tiLHIFSEbkN6N8JSppEcQy0QJSIBQK+voxpVKkmUp/3T B1Ny9zszueZ4L+Nih1Vrbv+eSQeNyHuG1optjC1HKITpxpaeijxfR3aPuH9/lomC qyBgl0gJup3/beLXCT2mx5YC4vS+BraNClGJBKspIZIFjCL90BR1I9YCcKI0nGm+ PjRuyGPwDDgnfyAoIx0I/jJCI2j1mrHjaF/u1aAVbJDDH8ULULIT2WJ8T4yc9imL P+wlJJuV5qshJ94QqRjUJjOWnvJ7fjiJQp2as3vmIRavgy3N9nAkDpqZYTtJAgMB AAGjggNYMIIDVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRgyxqP7KO6eYSr 3AKt3zLj0Ln6zjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1NW d1JheEQzU3dacEV0dUxkRk1MY056d2FDM0ZCdXJXVUFOZFc3bTRMTnIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNT VndSYXhEM1N3WnBFdHVMZEZNTGNOendhQzNGQnVyV1VBTmRXN200TE5yLzAvNjBD QjFBOEZFQ0EzQkE3OTg0QUJEQzAyQURERjMyRTNEMEI5RkFDRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEH AQH/BD0wOzAqBAIAATAkAwQCp/kEAwQCqpZMAwQCqvakAwQDsReoAwQDs38oAwQC vm1QMA0EAgACMAcDBQAoBBCIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDOsTAN BgkqhkiG9w0BAQsFAAOCAQEAjB+Ao4XDba4Wn0cBcEFGZc03JE307gKLkFABWwOv QZ8ICGb732bWMWokTIfGL6bygZ0q4st6Zq7L0/P7X94C15M9/VAJ67yHoiu2WaMn EULjHg7joPr/SuucZKnGZTVkhdeBYbTs3cKn9XLFywgPMQXzzdcO6aQmQUS9wlio 4xCz1TDXXaBBhxCozZvyump/+uwz6g4Jv56gegMhJ5vQZD9Es9y4amxiGZDJkuF/ n74unyuNMuJhKbEtXAj/Kq20SHuni4c53PkIph2Vb4YqD8nN8Rhe9SXH7qIcMhZO Dnjf2SB87B76L5H0s5cTaT4NgDGjWZgWm+wexTGVYTizmg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:21:09 2025 by rpki-client