$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer File: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer (raw, json) Hash identifier: uV2fUUgrHnXXMRndOLxz1X4td9l7yE5+2t9pO1CZVyc= Subject key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 31616F2CD66B184F5B63A9619824C1B13303AE5B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft caRepository: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 08 Mar 2025 03:31:12 +0000 Certificate not after: Sat 07 Mar 2026 03:36:12 +0000 Subordinate resources: AS: 262966 IP: 168.121.248.0/22 IP: 186.250.28.0/22 IP: 2804:ea8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:61:6f:2c:d6:6b:18:4f:5b:63:a9:61:98:24:c1:b1:33:03:ae:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 8 03:31:12 2025 GMT Not After : Mar 7 03:36:12 2026 GMT Subject: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:2b:fa:c9:5c:f5:e4:9c:0c:26:30:97:72: ee:31:58:d4:23:72:82:d4:3d:64:52:ee:5b:8b:be: 40:a5:91:b0:7b:a3:54:bc:cb:f7:6b:f9:33:8c:59: 28:9d:b7:34:9b:14:e0:22:9b:c9:68:60:b9:0e:48: ab:55:46:30:c2:df:74:60:51:9b:2b:36:91:55:b3: 8c:f4:ba:72:4e:f2:fd:d9:8a:0a:95:5d:30:21:69: 61:53:2f:5c:a4:85:51:6b:e8:8f:eb:8c:20:7d:bb: c5:39:49:28:fa:5b:c2:41:92:10:d3:2b:53:7f:07: 98:ca:ca:f4:70:0f:9c:a1:05:76:5b:7a:c0:a1:2b: 3a:b5:47:10:c1:34:47:bc:fc:ac:47:56:a6:9c:54: 18:ba:66:3b:fa:ce:e0:6d:98:0e:1b:a4:1b:24:19: 66:90:13:6a:12:05:e4:4f:cc:a8:0f:39:d2:b2:ce: af:a3:2b:81:71:6d:c6:62:64:a3:58:5f:d8:3f:f9: f7:b5:3e:9b:97:da:91:93:ed:a7:d5:6f:06:ae:cc: d2:28:af:03:b4:a0:e6:9e:87:79:b7:79:62:65:a4: be:89:f6:76:6c:b1:39:8f:3b:4a:10:9d:94:9c:8e: 6d:3b:10:67:d1:e8:78:52:44:b8:6a:a9:63:04:29: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.248.0/22 186.250.28.0/22 IPv6: 2804:ea8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262966 Signature Algorithm: sha256WithRSAEncryption a3:13:63:a7:64:da:82:3d:ea:b8:a7:11:d0:17:7b:71:9a:f5: 35:08:03:07:01:05:b4:b3:ec:e5:42:c6:6c:64:d7:78:4a:77: 77:7d:25:bb:58:15:c6:9d:28:87:d0:ae:1f:5e:72:e2:6c:a8: e9:a8:48:97:09:72:85:3d:e5:b8:2a:64:ad:c1:f9:b7:4f:76: ad:0f:5d:23:cc:3d:da:ef:40:a0:02:c9:83:99:11:a3:d1:4a: 2f:13:d7:1d:7d:7f:d7:aa:34:41:ba:c2:6a:2b:86:10:5d:a1: 71:9d:ff:e6:51:76:45:b9:39:3a:b2:7c:2e:bb:d7:3a:52:8d: 5e:71:06:06:5b:78:b5:d2:f6:05:ef:aa:a4:6e:c2:7a:b6:2c: f5:e6:2a:ad:a0:89:26:16:b7:3e:8c:70:62:51:cf:f3:7e:3d: 10:19:0e:d7:a7:65:af:c0:d3:a8:b0:70:4d:91:62:43:c0:e3: 43:2a:df:d3:7c:1d:bd:06:73:03:72:6c:c8:9e:b0:2f:eb:7a: 86:56:70:e6:8a:ed:6b:3f:76:54:ec:a2:48:f7:c1:eb:60:f8: 99:12:56:e4:8c:e9:6b:24:a8:6d:41:d4:a8:92:4d:27:c5:bf: 67:82:f4:6e:d9:fb:da:22:15:80:9d:45:2e:35:b4:5b:84:37: 11:b6:ad:a6 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUMWFvLNZrGE9bY6lhmCTBsTMDrlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDgwMzMxMTJaFw0yNjAzMDcwMzM2MTJaMDMxMTAvBgNV BAMTKERCNjAxMTNEQjg0N0VFNEZERkVDRjhFN0IzMkQ4Q0IwQTI4QTQyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ECv6yVz15JwMJjCXcu4xWNQj coLUPWRS7luLvkClkbB7o1S8y/dr+TOMWSidtzSbFOAim8loYLkOSKtVRjDC33Rg UZsrNpFVs4z0unJO8v3ZigqVXTAhaWFTL1ykhVFr6I/rjCB9u8U5SSj6W8JBkhDT K1N/B5jKyvRwD5yhBXZbesChKzq1RxDBNEe8/KxHVqacVBi6Zjv6zuBtmA4bpBsk GWaQE2oSBeRPzKgPOdKyzq+jK4FxbcZiZKNYX9g/+fe1PpuX2pGT7afVbwauzNIo rwO0oOaeh3m3eWJlpL6J9nZssTmPO0oQnZScjm07EGfR6HhSRLhqqWMEKV1RAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbYBE9uEfuT9/s +OezLYywoopCKTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2sz ZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01zQ2ovMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2sz ZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01zQ2ovMS9EQjYw MTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKoefgDBAK6+hwwDQQCAAIwBwMFACgEDqgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAM2MA0GCSqGSIb3DQEBCwUAA4IBAQCjE2OnZNqC Peq4pxHQF3txmvU1CAMHAQW0s+zlQsZsZNd4Snd3fSW7WBXGnSiH0K4fXnLibKjp qEiXCXKFPeW4KmStwfm3T3atD10jzD3a70CgAsmDmRGj0UovE9cdfX/XqjRBusJq K4YQXaFxnf/mUXZFuTk6snwuu9c6Uo1ecQYGW3i10vYF76qkbsJ6tiz15iqtoIkm Frc+jHBiUc/zfj0QGQ7Xp2WvwNOosHBNkWJDwONDKt/TfB29BnMDcmzInrAv63qG VnDmiu1rP3ZU7KJI98HrYPiZElbkjOlrJKhtQdSokk0nxb9ngvRu2fvaIhWAnUUu NbRbhDcRtq2m -----END CERTIFICATE-----Generated at Fri Apr 4 16:38:39 2025 by rpki-client