$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60CE8C62F8C5FE17F27692B2CDF67F4D5F2F00B6.cer File: 60CE8C62F8C5FE17F27692B2CDF67F4D5F2F00B6.cer (raw, json) Hash identifier: AmJfck/TKISP9vfd+ArVHzJKUiJNAGkqad+prTxPAtY= Subject key identifier: 60:CE:8C:62:F8:C5:FE:17:F2:76:92:B2:CD:F6:7F:4D:5F:2F:00:B6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C098D3D7F3DDBA50C99ED24DA01D0F19A9A06EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/1/60CE8C62F8C5FE17F27692B2CDF67F4D5F2F00B6.mft caRepository: rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 04:03:54 +0000 Certificate not after: Fri 06 Mar 2026 04:08:54 +0000 Subordinate resources: AS: 268531 IP: 45.162.144.0/22 IP: 2804:52a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:09:8d:3d:7f:3d:db:a5:0c:99:ed:24:da:01:d0:f1:9a:9a:06:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 04:03:54 2025 GMT Not After : Mar 6 04:08:54 2026 GMT Subject: CN=60CE8C62F8C5FE17F27692B2CDF67F4D5F2F00B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:22:cf:20:99:9e:26:f0:1c:25:30:e1:4a:85: cb:71:6f:c9:51:75:bf:cb:20:f7:de:45:26:e9:e5: c0:ba:45:7f:f3:7e:32:36:28:4f:98:30:18:6d:c2: cc:b4:46:e3:e0:86:87:a1:5c:1e:46:e4:4d:38:42: 36:e1:99:b1:83:97:22:df:cd:f9:f8:a3:d6:88:72: 79:d2:95:7c:0f:86:e1:07:f0:b4:68:3d:68:d6:8d: 18:cc:aa:f8:ee:a9:eb:c5:e5:2b:8a:2d:63:f6:3a: 63:fa:de:43:1d:71:e3:fc:69:8a:43:23:bc:d6:5d: e3:3b:a9:91:31:56:7e:af:58:1d:c3:1f:26:80:58: db:cb:cc:03:99:9d:3c:49:14:39:f5:bf:a8:2d:1f: ee:1f:94:f2:2e:69:4f:ee:2c:8a:4f:31:12:1d:11: ab:0a:9d:3d:b2:25:9a:42:1e:de:03:17:e1:ea:00: ee:c2:7d:d8:82:03:49:f9:5d:a3:1b:08:10:21:a4: db:40:82:f9:4b:4a:9d:d3:c1:30:41:24:4e:b4:aa: d0:60:0f:0c:47:77:ca:85:35:a4:d2:0a:b5:97:01: f5:bb:e5:60:21:6f:2f:df:7e:10:e1:6a:f8:f2:ce: 50:5d:04:8d:12:f2:67:09:fc:84:4a:5c:85:a9:40: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:CE:8C:62:F8:C5:FE:17:F2:76:92:B2:CD:F6:7F:4D:5F:2F:00:B6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/1/60CE8C62F8C5FE17F27692B2CDF67F4D5F2F00B6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.144.0/22 IPv6: 2804:52a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268531 Signature Algorithm: sha256WithRSAEncryption 99:2d:a1:ad:ea:d2:f7:9b:84:25:53:be:d9:1c:8a:51:66:62: 53:2c:8b:1a:b4:67:05:2d:39:be:00:f9:da:5a:73:63:eb:ee: 79:25:6c:06:60:d9:b1:bb:1a:92:b7:52:84:ab:dd:b6:20:7d: 89:0a:8b:39:c1:f5:3e:9f:61:97:e2:17:65:55:59:98:de:a4: 3d:1b:d9:4b:63:2a:ab:55:fd:a3:33:cb:62:82:23:64:c9:c6: cb:a2:3e:68:7a:34:8e:77:cc:e4:c8:7c:d0:5e:c0:fd:63:b7: c4:a0:9a:3c:bf:0a:ac:f6:d4:27:44:bb:07:a5:89:2c:77:1d: 20:10:31:ca:44:ba:75:29:6a:ba:8b:40:0b:81:70:59:d2:db: a0:32:6d:7d:6b:a1:43:90:78:04:58:61:db:f0:d7:ab:e1:77: 2a:83:8e:09:40:e3:fc:3d:2f:e9:6a:f1:64:65:a4:72:d1:08: 83:f3:50:6d:8b:a0:b9:83:9c:d6:c9:c3:11:c5:2f:52:fa:72: ea:76:1c:0e:cd:65:e3:ae:b3:e5:31:14:93:a4:0d:fc:2a:e0: a6:7f:8c:29:09:82:c7:85:95:ff:99:41:7e:d9:84:88:ce:04: fb:86:9f:1e:5a:eb:ee:47:c0:4c:8a:ff:bc:34:e6:87:c5:f7: 8b:d1:a2:04 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUfAmNPX8926UMme0k2gHQ8ZqaBuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwNDAzNTRaFw0yNjAzMDYwNDA4NTRaMDMxMTAvBgNV BAMTKDYwQ0U4QzYyRjhDNUZFMTdGMjc2OTJCMkNERjY3RjRENUYyRjAwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIs8gmZ4m8BwlMOFKhctxb8lR db/LIPfeRSbp5cC6RX/zfjI2KE+YMBhtwsy0RuPghoehXB5G5E04QjbhmbGDlyLf zfn4o9aIcnnSlXwPhuEH8LRoPWjWjRjMqvjuqevF5SuKLWP2OmP63kMdceP8aYpD I7zWXeM7qZExVn6vWB3DHyaAWNvLzAOZnTxJFDn1v6gtH+4flPIuaU/uLIpPMRId EasKnT2yJZpCHt4DF+HqAO7CfdiCA0n5XaMbCBAhpNtAgvlLSp3TwTBBJE60qtBg DwxHd8qFNaTSCrWXAfW75WAhby/ffhDhavjyzlBdBI0S8mcJ/IRKXIWpQCLxAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRgzoxi+MX+F/J2 krLN9n9NXy8AtjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHpl S3NkVVhieW12OUFzblRFVGlLQXhScUNiWGNIdHB0ZFc1QmY4M3dtMzQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHpl S3NkVVhieW12OUFzblRFVGlLQXhScUNiWGNIdHB0ZFc1QmY4M3dtMzQvMS82MENF OEM2MkY4QzVGRTE3RjI3NjkyQjJDREY2N0Y0RDVGMkYwMEI2Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItopAwDQQCAAIwBwMFACgEUqQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBjzMA0GCSqGSIb3DQEBCwUAA4IBAQCZLaGt6tL3m4QlU77Z HIpRZmJTLIsatGcFLTm+APnaWnNj6+55JWwGYNmxuxqSt1KEq922IH2JCos5wfU+ n2GX4hdlVVmY3qQ9G9lLYyqrVf2jM8tigiNkycbLoj5oejSOd8zkyHzQXsD9Y7fE oJo8vwqs9tQnRLsHpYksdx0gEDHKRLp1KWq6i0ALgXBZ0tugMm19a6FDkHgEWGHb 8Ner4Xcqg44JQOP8PS/pavFkZaRy0QiD81Bti6C5g5zWycMRxS9S+nLqdhwOzWXj rrPlMRSTpA38KuCmf4wpCYLHhZX/mUF+2YSIzgT7hp8eWuvuR8BMiv+8NOaHxfeL 0aIE -----END CERTIFICATE-----Generated at Fri Apr 4 19:42:15 2025 by rpki-client