$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer File: 60E9E1814AC20560AE7B9A36F212037445A23C52.cer (raw, json) Hash identifier: l2Xi4+7OiuMqXfMBEKMOmGF4VTCppnoU5RzRFKtTFak= Subject key identifier: 60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6B6CA3345356A1FA9BDB11883DEC3353C222782F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft caRepository: rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 18 May 2025 21:48:21 +0000 Certificate not after: Sun 17 May 2026 21:53:21 +0000 Subordinate resources: AS: 265278 IP: 168.90.56.0/22 IP: 170.231.149.0 -- 170.231.151.255 IP: 2804:2d60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 02:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6c:a3:34:53:56:a1:fa:9b:db:11:88:3d:ec:33:53:c2:22:78:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 18 21:48:21 2025 GMT Not After : May 17 21:53:21 2026 GMT Subject: CN=60E9E1814AC20560AE7B9A36F212037445A23C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:57:38:67:1d:11:4c:77:ef:f0:c9:62:b2: 71:06:60:86:a6:7d:ff:b8:34:dd:a2:8d:75:af:8f: 40:09:84:da:60:85:14:cf:3c:fd:d2:f4:87:b2:97: ac:14:b6:2d:47:bd:54:29:75:f3:76:78:c2:38:6a: e2:36:36:99:33:90:c5:bb:e8:00:ab:e4:c2:96:64: 90:59:e0:8c:37:e8:ae:a1:e2:ba:e9:cf:0a:ec:bc: de:52:b2:db:2d:4e:b8:e5:38:07:2b:89:a8:b3:f5: b4:92:cb:25:75:33:00:88:79:ff:8e:7b:15:c4:c1: 54:55:50:2e:5a:a7:45:8d:9a:99:57:9c:a0:0c:f3: 7e:ce:b5:19:b1:2c:6d:d6:34:27:27:a0:b9:9f:92: e7:7f:02:eb:1e:59:2c:87:fd:22:e3:8e:60:ff:37: ac:71:fa:62:06:2d:46:e5:70:64:26:ec:5c:02:13: c8:86:fb:d6:1f:4d:ed:17:6f:42:fe:88:43:f7:f0: eb:30:cd:c7:48:70:aa:5e:10:93:47:dd:8b:bb:50: ce:c4:45:2a:fc:8e:81:84:dc:2d:3e:74:28:ec:e3: fa:64:0e:25:aa:d7:60:e9:2c:93:0e:01:7f:66:32: 41:a7:8f:f0:5f:31:bd:6a:46:93:57:2e:84:67:3e: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.56.0/22 170.231.149.0-170.231.151.255 IPv6: 2804:2d60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265278 Signature Algorithm: sha256WithRSAEncryption 2e:29:1a:a7:7d:93:a2:11:07:76:bc:d1:f1:ec:9a:9d:7c:ee: f2:1a:41:3f:41:74:38:a4:70:75:6f:24:20:5a:e4:45:70:82: 8d:ca:52:82:7f:b6:d7:62:0f:dc:7c:b8:e0:85:e3:01:95:b6: b9:0f:05:a1:0e:44:04:fb:a1:ba:9a:44:e7:8e:7c:17:74:c8: 62:69:4c:03:9e:87:c0:73:64:1d:91:c3:ea:e3:12:6c:c0:bd: 60:85:44:86:69:d6:8c:8c:31:23:16:e6:7d:3a:0f:b0:d3:c7: cd:8c:1f:3a:3f:bc:a1:8d:be:94:31:e8:90:36:83:a5:98:49: b6:04:97:ae:e4:00:4b:df:8e:20:0c:5e:00:8c:c4:32:62:3a: 75:a4:1b:b0:69:25:19:5d:65:0b:52:21:39:da:8b:43:8d:a6: 0c:3f:ba:89:cc:07:3f:bf:af:0f:32:be:bd:73:a3:1b:96:ca: 44:64:14:c4:59:db:43:ac:73:77:f5:fa:e3:e6:96:5e:ac:43: 66:0a:3a:89:8c:91:69:3c:a0:41:b7:c7:44:a4:99:3f:0d:f8: 07:4d:9f:31:0d:28:54:0b:b6:b8:05:b7:9e:22:9d:d2:60:80: 64:5c:c5:b1:4c:5c:de:a0:d6:b8:80:85:d2:f4:90:b6:47:e9: 37:0e:6c:a2 -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgIUa2yjNFNWofqb2xGIPewzU8IieC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTgyMTQ4MjFaFw0yNjA1MTcyMTUzMjFaMDMxMTAvBgNV BAMTKDYwRTlFMTgxNEFDMjA1NjBBRTdCOUEzNkYyMTIwMzc0NDVBMjNDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPklc4Zx0RTHfv8MlisnEGYIam ff+4NN2ijXWvj0AJhNpghRTPPP3S9Ieyl6wUti1HvVQpdfN2eMI4auI2NpkzkMW7 6ACr5MKWZJBZ4Iw36K6h4rrpzwrsvN5SststTrjlOAcriaiz9bSSyyV1MwCIef+O exXEwVRVUC5ap0WNmplXnKAM837OtRmxLG3WNCcnoLmfkud/AuseWSyH/SLjjmD/ N6xx+mIGLUblcGQm7FwCE8iG+9YfTe0Xb0L+iEP38OswzcdIcKpeEJNH3Yu7UM7E RSr8joGE3C0+dCjs4/pkDiWq12DpLJMOAX9mMkGnj/BfMb1qRpNXLoRnPnbZAgMB AAGjggNIMIIDRDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRg6eGBSsIFYK57 mjbyEgN0RaI8UjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWVM QkRSSE44cGNqeXBwakNldnV1UU5hN0xxN0U4V0JkQWdITUZxdzIycXIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzll TEJEUkhOOHBjanlwcGpDZXZ1dVFOYTdMcTdFOFdCZEFnSE1GcXcyMnFyLzAvNjBF OUUxODE0QUMyMDU2MEFFN0I5QTM2RjIxMjAzNzQ0NUEyM0M1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEH AQH/BC0wKzAaBAIAATAUAwQCqFo4MAwDBACq55UDBAOq55AwDQQCAAIwBwMFACgE LWAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAw+MA0GCSqGSIb3DQEBCwUAA4IB AQAuKRqnfZOiEQd2vNHx7JqdfO7yGkE/QXQ4pHB1byQgWuRFcIKNylKCf7bXYg/c fLjgheMBlba5DwWhDkQE+6G6mkTnjnwXdMhiaUwDnofAc2QdkcPq4xJswL1ghUSG adaMjDEjFuZ9Og+w08fNjB86P7yhjb6UMeiQNoOlmEm2BJeu5ABL344gDF4AjMQy Yjp1pBuwaSUZXWULUiE52otDjaYMP7qJzAc/v68PMr69c6MblspEZBTEWdtDrHN3 9frj5pZerENmCjqJjJFpPKBBt8dEpJk/DfgHTZ8xDShUC7a4BbeeIp3SYIBkXMWx TFzeoNa4gIXS9JC2R+k3Dmyi -----END CERTIFICATE-----Generated at Sun Jun 8 07:22:50 2025 by rpki-client