$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer File: 66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer (raw, json) Hash identifier: /j0PywlnZ+qD99CFk1bMVyd+OOqXLES1b9rJedNUqn0= Subject key identifier: 66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3E6E0F13ECF2D0648D3F43A5AB4BBB224DF15640 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft caRepository: rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 23 Aug 2026 13:36:22 +0000 Certificate not after: Sun 22 Aug 2027 13:41:22 +0000 Subordinate resources: AS: 263285 IP: 186.235.252.0/22 IP: 2804:1664::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 16:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6e:0f:13:ec:f2:d0:64:8d:3f:43:a5:ab:4b:bb:22:4d:f1:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 23 13:36:22 2026 GMT Not After : Aug 22 13:41:22 2027 GMT Subject: CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:30:9f:76:bc:66:a2:eb:6c:69:4a:74:b9: 56:46:f0:59:96:79:66:01:7d:ec:29:16:54:bb:00: 10:0d:78:57:44:d8:de:60:27:2d:1a:37:2f:62:cb: 32:a8:d0:ec:b6:6d:e7:46:8d:36:c3:c9:44:a2:88: 72:9d:58:a1:57:29:05:5a:4a:9f:3f:42:75:60:94: f1:a8:30:2c:08:fc:63:3f:11:e3:8b:2e:7b:94:f9: b0:ca:eb:60:20:ca:34:87:01:d2:de:0c:d2:da:ff: 19:1e:90:1f:af:21:4f:a3:29:92:48:6b:b0:3b:dc: b9:1e:8d:51:46:48:62:e5:8f:27:8e:d3:71:b9:4f: ed:c1:f3:0f:bd:b4:80:f5:68:35:c2:dd:37:79:6b: ba:8f:b7:a5:2c:51:de:08:5c:ec:9f:bc:0d:1a:15: 11:92:81:dc:58:b2:0f:fc:56:d7:bf:b5:b1:69:ec: c5:15:e0:e1:78:65:df:ac:c9:48:2b:86:1d:15:92: c3:84:7a:a2:03:c0:58:dc:97:66:ec:3e:05:e1:fe: 18:95:9f:46:70:34:21:dc:7a:d1:37:02:54:65:96: d7:75:6a:65:3f:89:8e:67:f1:d0:40:9a:32:00:2b: 5e:af:e0:d2:38:55:38:bf:41:f6:cf:92:19:db:c2: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.235.252.0/22 IPv6: 2804:1664::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263285 Signature Algorithm: sha256WithRSAEncryption 5e:52:1f:d1:46:46:52:b4:e5:5f:7b:19:7c:f1:2a:a8:2e:5c: dd:91:46:bb:cb:73:70:70:8c:84:35:0f:38:b7:a2:5d:77:a5: 3c:f7:1c:a6:1c:09:fc:90:c3:4d:01:26:9d:33:1f:af:e3:e4: d0:2c:57:c9:b2:52:5a:fb:84:e6:fb:53:44:9d:d7:be:21:b0: 03:75:b1:18:b5:79:97:0b:da:86:17:d0:db:34:82:6f:0b:9d: 8c:49:d2:07:c3:ae:03:a0:8a:a4:40:79:07:cb:2e:19:0d:88: b9:a7:29:7a:bb:5b:78:8f:3e:44:d1:7c:29:ca:3c:fb:9f:10: 26:32:ed:3e:41:24:e6:3f:12:5a:ad:d5:cd:c5:c3:7e:b8:b5: 3d:cb:b5:c8:89:0a:65:31:93:a6:5e:25:7b:78:da:d0:b5:e7: 0f:55:e3:a4:81:f2:d0:f5:3a:e3:87:dc:d9:cc:16:a0:0e:ef: f3:31:c6:a5:d5:72:aa:4d:d8:11:01:ed:25:bb:88:27:3b:7e: ea:51:c2:de:af:b9:3c:ea:ef:12:47:7a:0e:ba:fe:99:1d:12: d4:ce:9e:c1:20:23:01:60:3f:be:16:45:36:bd:e6:b1:2d:60: d1:fd:86:40:68:a4:19:8d:3c:a0:71:27:94:fd:3f:13:4a:10: a5:51:6e:5a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPm4PE+zy0GSNP0Olq0u7Ik3xVkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjMxMzM2MjJaFw0yNzA4MjIxMzQxMjJaMDMxMTAvBgNV BAMTKDY2QjkzNzk2RjQyMzkwQjY4MUEzREMxQ0M5OUY4RThFNDNDRTdCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83DCfdrxmoutsaUp0uVZG8FmW eWYBfewpFlS7ABANeFdE2N5gJy0aNy9iyzKo0Oy2bedGjTbDyUSiiHKdWKFXKQVa Sp8/QnVglPGoMCwI/GM/EeOLLnuU+bDK62AgyjSHAdLeDNLa/xkekB+vIU+jKZJI a7A73LkejVFGSGLljyeO03G5T+3B8w+9tID1aDXC3Td5a7qPt6UsUd4IXOyfvA0a FRGSgdxYsg/8Vte/tbFp7MUV4OF4Zd+syUgrhh0VksOEeqIDwFjcl2bsPgXh/hiV n0ZwNCHcetE3AlRlltd1amU/iY5n8dBAmjIAK16v4NI4VTi/QfbPkhnbwnozAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmuTeW9COQtoGj 3BzJn46OQ8573zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFZX Y1hOajNLSEVFNGF5WXZoNGdFR0ZoR3ROZnlTYmkxWEFvVlllNkcyNXcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhW V2NYTmozS0hFRTRheVl2aDRnRUdGaEd0TmZ5U2JpMVhBb1ZZZTZHMjV3LzEvNjZC OTM3OTZGNDIzOTBCNjgxQTNEQzFDQzk5RjhFOEU0M0NFN0JERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCuuv8MA0EAgACMAcDBQAoBBZkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQEdTANBgkqhkiG9w0BAQsFAAOCAQEAXlIf0UZGUrTlX3sZ fPEqqC5c3ZFGu8tzcHCMhDUPOLeiXXelPPccphwJ/JDDTQEmnTMfr+Pk0CxXybJS WvuE5vtTRJ3XviGwA3WxGLV5lwvahhfQ2zSCbwudjEnSB8OuA6CKpEB5B8suGQ2I uacpertbeI8+RNF8Kco8+58QJjLtPkEk5j8SWq3VzcXDfri1Pcu1yIkKZTGTpl4l e3ja0LXnD1XjpIHy0PU644fc2cwWoA7v8zHGpdVyqk3YEQHtJbuIJzt+6lHC3q+5 POrvEkd6Drr+mR0S1M6ewSAjAWA/vhZFNr3msS1g0f2GQGikGY08oHEnlP0/E0oQ pVFuWg== -----END CERTIFICATE-----Generated at Sun Aug 23 15:15:25 2026 by rpki-client