$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer File: 60E9E1814AC20560AE7B9A36F212037445A23C52.cer (raw, json) Hash identifier: NWO5ZDz7KhnksDhLPwouaHsXr3e6DFF2UOFUmNHldMw= Subject key identifier: 60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1FAE7A3AD82E5102C6618283A096569209707AD2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft caRepository: rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Dec 2024 22:54:59 +0000 Certificate not after: Thu 18 Dec 2025 22:59:59 +0000 Subordinate resources: AS: 265278 IP: 168.90.56.0/22 IP: 170.231.149.0 -- 170.231.151.255 IP: 2804:2d60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ae:7a:3a:d8:2e:51:02:c6:61:82:83:a0:96:56:92:09:70:7a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 19 22:54:59 2024 GMT Not After : Dec 18 22:59:59 2025 GMT Subject: CN=60E9E1814AC20560AE7B9A36F212037445A23C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:57:38:67:1d:11:4c:77:ef:f0:c9:62:b2: 71:06:60:86:a6:7d:ff:b8:34:dd:a2:8d:75:af:8f: 40:09:84:da:60:85:14:cf:3c:fd:d2:f4:87:b2:97: ac:14:b6:2d:47:bd:54:29:75:f3:76:78:c2:38:6a: e2:36:36:99:33:90:c5:bb:e8:00:ab:e4:c2:96:64: 90:59:e0:8c:37:e8:ae:a1:e2:ba:e9:cf:0a:ec:bc: de:52:b2:db:2d:4e:b8:e5:38:07:2b:89:a8:b3:f5: b4:92:cb:25:75:33:00:88:79:ff:8e:7b:15:c4:c1: 54:55:50:2e:5a:a7:45:8d:9a:99:57:9c:a0:0c:f3: 7e:ce:b5:19:b1:2c:6d:d6:34:27:27:a0:b9:9f:92: e7:7f:02:eb:1e:59:2c:87:fd:22:e3:8e:60:ff:37: ac:71:fa:62:06:2d:46:e5:70:64:26:ec:5c:02:13: c8:86:fb:d6:1f:4d:ed:17:6f:42:fe:88:43:f7:f0: eb:30:cd:c7:48:70:aa:5e:10:93:47:dd:8b:bb:50: ce:c4:45:2a:fc:8e:81:84:dc:2d:3e:74:28:ec:e3: fa:64:0e:25:aa:d7:60:e9:2c:93:0e:01:7f:66:32: 41:a7:8f:f0:5f:31:bd:6a:46:93:57:2e:84:67:3e: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.56.0/22 170.231.149.0-170.231.151.255 IPv6: 2804:2d60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265278 Signature Algorithm: sha256WithRSAEncryption 2e:17:77:b8:56:e9:6e:53:aa:65:12:74:f3:bb:61:e4:56:14: 4e:f7:cd:de:6c:4b:d2:43:82:ee:f9:7b:aa:44:fd:14:bc:c3: 64:1c:cd:6a:2b:5c:3f:08:f5:5b:c9:a7:24:3e:5d:06:88:7d: 71:62:d9:ed:8a:1e:d4:73:4d:0c:e6:be:f6:8b:cf:58:db:38: ed:46:0b:1a:04:c4:c7:66:8d:61:2d:ff:ee:b5:4d:a7:13:69: 17:fc:ee:4c:9b:68:a0:8e:2f:c0:c8:7e:d4:10:3f:38:4b:78: 55:34:9b:e6:c0:e7:a7:c3:cc:55:e4:db:4c:43:a0:9c:7a:c1: ec:29:8f:e8:1c:02:71:c3:24:54:c6:63:47:3a:61:bd:9b:a2: 5a:b4:af:88:ec:22:04:59:99:ba:81:48:1b:5a:3b:f3:01:5a: 19:0a:4f:a3:af:ba:60:aa:f7:72:12:ef:d7:b6:fd:71:80:b8: 69:36:6b:13:ba:64:df:4b:bf:54:47:a2:2f:22:7e:7d:94:68: 80:11:d4:0d:fd:a9:4a:2b:95:fe:ae:ba:69:c2:7a:0c:e5:62: 0e:2e:13:82:89:3a:3f:a4:ad:24:3a:4f:29:9d:24:38:e0:80: e1:ce:c4:53:ce:0e:7e:36:8e:3d:29:42:c7:94:88:f7:06:40: 35:69:42:dd -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgIUH656OtguUQLGYYKDoJZWkglwetIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTkyMjU0NTlaFw0yNTEyMTgyMjU5NTlaMDMxMTAvBgNV BAMTKDYwRTlFMTgxNEFDMjA1NjBBRTdCOUEzNkYyMTIwMzc0NDVBMjNDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPklc4Zx0RTHfv8MlisnEGYIam ff+4NN2ijXWvj0AJhNpghRTPPP3S9Ieyl6wUti1HvVQpdfN2eMI4auI2NpkzkMW7 6ACr5MKWZJBZ4Iw36K6h4rrpzwrsvN5SststTrjlOAcriaiz9bSSyyV1MwCIef+O exXEwVRVUC5ap0WNmplXnKAM837OtRmxLG3WNCcnoLmfkud/AuseWSyH/SLjjmD/ N6xx+mIGLUblcGQm7FwCE8iG+9YfTe0Xb0L+iEP38OswzcdIcKpeEJNH3Yu7UM7E RSr8joGE3C0+dCjs4/pkDiWq12DpLJMOAX9mMkGnj/BfMb1qRpNXLoRnPnbZAgMB AAGjggNHMIIDQzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRg6eGBSsIFYK57 mjbyEgN0RaI8UjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWVM QkRSSE44cGNqeXBwakNldnV1UU5hN0xxN0U4V0JkQWdITUZxdzIycXIvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWVM QkRSSE44cGNqeXBwakNldnV1UU5hN0xxN0U4V0JkQWdITUZxdzIycXIvMC82MEU5 RTE4MTRBQzIwNTYwQUU3QjlBMzZGMjEyMDM3NDQ1QTIzQzUyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcB Af8ELTArMBoEAgABMBQDBAKoWjgwDAMEAKrnlQMEA6rnkDANBAIAAjAHAwUAKAQt YDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDD4wDQYJKoZIhvcNAQELBQADggEB AC4Xd7hW6W5TqmUSdPO7YeRWFE73zd5sS9JDgu75e6pE/RS8w2QczWorXD8I9VvJ pyQ+XQaIfXFi2e2KHtRzTQzmvvaLz1jbOO1GCxoExMdmjWEt/+61TacTaRf87kyb aKCOL8DIftQQPzhLeFU0m+bA56fDzFXk20xDoJx6wewpj+gcAnHDJFTGY0c6Yb2b olq0r4jsIgRZmbqBSBtaO/MBWhkKT6OvumCq93IS79e2/XGAuGk2axO6ZN9Lv1RH oi8ifn2UaIAR1A39qUorlf6uumnCegzlYg4uE4KJOj+krSQ6TymdJDjggOHOxFPO Dn42jj0pQseUiPcGQDVpQt0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:41:12 2025 by rpki-client