$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.cer File: 60BE9B4CF63549FDFB946E908A43D3654E71A3A7.cer (raw, json) Hash identifier: DjoGP1Hb9jBazZyIwIa/fvkDu+wfSYFx2/yPkknj/VY= Subject key identifier: 60:BE:9B:4C:F6:35:49:FD:FB:94:6E:90:8A:43:D3:65:4E:71:A3:A7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 341AD4A14E43BDBF6105F1B0F4FDEE0A48A7E1D9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.mft caRepository: rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 24 Jul 2026 21:05:31 +0000 Certificate not after: Fri 23 Jul 2027 21:10:31 +0000 Subordinate resources: AS: 28293 IP: 189.28.32.0/19 IP: 2804:6ec0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Jul 2026 17:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1a:d4:a1:4e:43:bd:bf:61:05:f1:b0:f4:fd:ee:0a:48:a7:e1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 24 21:05:31 2026 GMT Not After : Jul 23 21:10:31 2027 GMT Subject: CN=60BE9B4CF63549FDFB946E908A43D3654E71A3A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5d:ac:59:1e:dc:1b:9e:88:9e:55:23:24:ed: 26:6a:cc:67:08:3f:61:50:2e:ac:23:cb:0f:58:b6: 43:46:2f:37:82:73:4e:73:77:fc:a2:72:48:9a:06: 8b:38:6c:d9:9b:06:ed:6f:03:6f:05:f8:38:d7:0e: 3a:0b:30:bd:b5:4f:57:28:32:61:34:b3:6c:3e:92: 50:07:48:25:17:89:d2:6c:4f:8a:d4:c1:b3:8a:fb: 4f:27:6e:8a:58:68:ea:cf:90:b0:67:76:ab:5e:1b: f7:93:0c:89:df:0e:c4:3d:fb:6e:68:3b:52:dc:f5: 00:4a:a7:aa:24:41:eb:f3:31:91:aa:78:02:77:94: 0d:82:cc:65:e1:ce:9a:58:fd:81:bc:ad:f1:1d:b3: 67:ab:8f:df:46:30:0b:26:b4:44:3d:bc:4d:75:7a: a1:94:d7:59:34:8a:51:9a:c9:16:c7:d0:e3:27:1c: 65:16:3f:d5:f1:f1:a7:14:62:0a:0d:57:a1:d4:09: 72:75:fd:c7:69:45:3e:d9:b7:1e:e5:63:8f:c6:cf: 21:98:ee:0b:88:7c:a2:e5:7e:bf:c0:74:69:25:c4: 26:43:4d:b7:50:ca:84:eb:67:2e:e6:98:6c:92:45: 8e:14:f7:c9:dd:c2:0a:5a:14:72:89:c8:4d:2d:68: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:BE:9B:4C:F6:35:49:FD:FB:94:6E:90:8A:43:D3:65:4E:71:A3:A7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.28.32.0/19 IPv6: 2804:6ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28293 Signature Algorithm: sha256WithRSAEncryption 84:af:d9:c6:f4:36:65:ff:dc:c1:a6:50:19:e3:c3:88:c2:f3: 70:3f:ba:86:95:11:27:6b:5f:87:d9:3e:96:61:77:07:62:a0: e8:f6:55:74:ce:a3:cd:d9:f0:8b:ad:ef:b4:01:da:e1:29:4e: 6e:94:ea:1e:88:a2:ed:3d:03:ed:ee:7e:e9:f2:b9:16:96:3a: 53:f2:7d:b2:e4:0f:4a:a6:9f:ea:a6:af:86:3a:1e:20:c4:1f: 3a:28:2e:d0:73:b7:df:a8:53:ae:b7:e1:31:5e:52:ac:7a:a0: e5:a4:8f:cf:84:1d:ba:26:34:04:2c:f1:95:a6:a1:d2:e7:18: cb:2a:e5:ec:21:ea:19:c4:ac:47:f8:e3:34:d8:66:10:16:d4: cf:88:d9:74:22:ae:48:3c:a9:ef:d5:27:73:f8:28:a1:ed:99: e7:8b:53:ed:34:af:5f:87:22:43:11:39:7a:61:07:7b:b4:b6: c5:63:78:3b:07:44:49:14:85:9b:0e:a3:0b:3c:b6:74:e8:5c: 91:b2:ac:da:72:3e:cf:eb:72:c8:f3:d2:56:79:9e:2d:8c:04: 8b:f9:d0:0e:05:99:90:e7:11:ed:f2:df:db:e7:3b:09:f5:88: 3c:bd:05:d1:1b:c1:2b:5b:12:38:cd:07:7d:46:92:0a:66:ea: eb:12:cc:71 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUNBrUoU5Dvb9hBfGw9P3uCkin4dkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MjQyMTA1MzFaFw0yNzA3MjMyMTEwMzFaMDMxMTAvBgNV BAMTKDYwQkU5QjRDRjYzNTQ5RkRGQjk0NkU5MDhBNDNEMzY1NEU3MUEzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXaxZHtwbnoieVSMk7SZqzGcI P2FQLqwjyw9YtkNGLzeCc05zd/yickiaBos4bNmbBu1vA28F+DjXDjoLML21T1co MmE0s2w+klAHSCUXidJsT4rUwbOK+08nbopYaOrPkLBndqteG/eTDInfDsQ9+25o O1Lc9QBKp6okQevzMZGqeAJ3lA2CzGXhzppY/YG8rfEds2erj99GMAsmtEQ9vE11 eqGU11k0ilGayRbH0OMnHGUWP9Xx8acUYgoNV6HUCXJ1/cdpRT7Ztx7lY4/GzyGY 7guIfKLlfr/AdGklxCZDTbdQyoTrZy7mmGySRY4U98ndwgpaFHKJyE0taFirAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRgvptM9jVJ/fuU bpCKQ9NlTnGjpzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG5u M1JlVm1yWkFyQWNCczltaXVYTXdaVGljOWhSQW5GMXRnbk5OalJKY3gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hu bjNSZVZtclpBckFjQnM5bWl1WE13WlRpYzloUkFuRjF0Z25OTmpSSmN4LzAvNjBC RTlCNENGNjM1NDlGREZCOTQ2RTkwOEE0M0QzNjU0RTcxQTNBNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQFvRwgMA0EAgACMAcDBQAoBG7AMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm6FMA0GCSqGSIb3DQEBCwUAA4IBAQCEr9nG9DZl/9zBplAZ 48OIwvNwP7qGlREna1+H2T6WYXcHYqDo9lV0zqPN2fCLre+0AdrhKU5ulOoeiKLt PQPt7n7p8rkWljpT8n2y5A9Kpp/qpq+GOh4gxB86KC7Qc7ffqFOut+ExXlKseqDl pI/PhB26JjQELPGVpqHS5xjLKuXsIeoZxKxH+OM02GYQFtTPiNl0Iq5IPKnv1Sdz +Cih7Znni1PtNK9fhyJDETl6YQd7tLbFY3g7B0RJFIWbDqMLPLZ06FyRsqzacj7P 63LI89JWeZ4tjASL+dAOBZmQ5xHt8t/b5zsJ9Yg8vQXRG8ErWxI4zQd9RpIKZurr Esxx -----END CERTIFICATE-----Generated at Tue Jul 28 18:34:43 2026 by rpki-client