$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer File: 66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer (raw, json) Hash identifier: soG3RSqHPExFINrFuIbqJFCVb0EqaLaFTqr/2ov4744= Subject key identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 24A6EB0D2F24A15B3E23A70B85FE411A654A24C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft caRepository: rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 02 Apr 2025 12:16:54 +0000 Certificate not after: Wed 01 Apr 2026 12:21:54 +0000 Subordinate resources: AS: 267625 IP: 45.71.236.0/22 IP: 2804:4454::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a6:eb:0d:2f:24:a1:5b:3e:23:a7:0b:85:fe:41:1a:65:4a:24:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 2 12:16:54 2025 GMT Not After : Apr 1 12:21:54 2026 GMT Subject: CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:19:22:cf:a0:49:2b:90:b8:e2:20:b4:46: f9:24:30:1f:8b:ee:d4:8b:bf:ea:15:b5:5b:2b:2d: 68:00:38:9e:6c:0e:61:65:b7:fe:83:3e:e2:1c:02: da:d3:85:54:ec:e0:aa:9f:9a:40:ab:62:92:a5:8d: 33:39:45:a2:b0:bd:ad:cd:5d:e2:a3:7f:db:f2:36: e1:53:a6:43:cb:8b:4d:c2:83:6a:91:ea:58:a3:32: 9c:b0:32:4d:2f:3b:fc:0f:db:f7:ac:da:1a:fd:9e: 81:90:83:e4:67:f8:72:f6:85:b2:40:19:aa:f0:4b: 2f:d0:ff:de:93:57:05:9d:f2:ad:84:1f:7e:fa:e2: fc:13:5b:8e:37:40:9f:58:1e:e0:9f:06:db:94:12: 82:7a:db:eb:7b:4c:26:09:86:f8:a7:67:d7:27:cf: 46:e4:81:f7:72:d6:4d:62:b4:46:50:e9:8c:bd:a5: 71:b6:af:43:35:64:c5:72:23:92:b5:93:af:f2:d6: 20:8e:33:1b:31:0b:64:61:6e:71:1d:31:31:b6:cc: 65:de:42:a6:6e:92:0b:22:43:f6:2c:90:ae:8f:d9: 6b:cd:cb:52:a7:a3:c1:23:f9:0f:6b:bb:e3:61:6a: e2:4e:9a:67:5e:58:37:b6:89:df:2f:ec:61:19:10: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.236.0/22 IPv6: 2804:4454::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267625 Signature Algorithm: sha256WithRSAEncryption 91:a3:c6:7f:cf:8f:da:c3:a4:98:62:4e:f9:c9:c2:73:f0:6f: 3b:c2:50:5e:75:ac:09:5f:9d:27:7e:90:92:ae:06:bd:96:cd: db:c2:d5:77:03:87:d5:58:34:c7:94:87:2c:05:0c:30:f8:4e: 99:ca:3e:9b:8a:45:7f:37:7a:7d:48:81:b3:83:02:ae:de:35: 72:c4:5b:7c:0e:5a:f7:00:73:38:a7:f6:2e:f2:e9:99:c5:2d: ad:4a:39:db:ad:5b:ec:91:b1:26:f8:fa:6b:28:ef:e2:9f:24: b9:4d:78:f1:26:f6:68:0b:0f:d4:95:a0:9e:19:9d:b9:5c:17: 56:ec:cd:8b:09:1e:47:39:bd:e5:42:6c:d9:a1:54:ff:ad:da: 44:d5:58:49:5a:f9:6b:24:09:7e:a9:bc:58:4b:44:9f:8d:93: 8a:f3:3a:81:ad:c6:63:18:ca:e0:50:fe:77:0e:e1:c5:89:e1: a4:6b:d8:76:65:0e:5f:f0:0f:3b:88:15:a3:11:11:a1:77:1d: 15:3f:41:63:cd:d5:f2:8a:9a:48:10:1e:5b:f7:31:f1:ae:11: 49:ca:39:85:2a:f8:41:21:4c:f4:e0:80:6f:8b:96:e1:b5:9a: 3d:92:87:b6:65:5c:22:e1:a4:cb:dd:98:3a:ab:62:42:ea:aa: 1b:db:8b:1c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJKbrDS8koVs+I6cLhf5BGmVKJMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDIxMjE2NTRaFw0yNjA0MDExMjIxNTRaMDMxMTAvBgNV BAMTKDY2RDRGRTc5RUQ4QThFMEQxOTUwNDFDMzM1RUVCMUI3NDhBMTJGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdhkiz6BJK5C44iC0RvkkMB+L 7tSLv+oVtVsrLWgAOJ5sDmFlt/6DPuIcAtrThVTs4KqfmkCrYpKljTM5RaKwva3N XeKjf9vyNuFTpkPLi03Cg2qR6lijMpywMk0vO/wP2/es2hr9noGQg+Rn+HL2hbJA GarwSy/Q/96TVwWd8q2EH3764vwTW443QJ9YHuCfBtuUEoJ62+t7TCYJhvinZ9cn z0bkgfdy1k1itEZQ6Yy9pXG2r0M1ZMVyI5K1k6/y1iCOMxsxC2RhbnEdMTG2zGXe QqZukgsiQ/YskK6P2WvNy1Kno8Ej+Q9ru+NhauJOmmdeWDe2id8v7GEZEMRlAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRm1P557YqODRlQ QcM17rG3SKEvCjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUNa akhwa0FlV0w3UVd6Ync1WXRCQ0FVcEdxTmpSeG1rRkpmRm1zNFU2R0YvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FD WmpIcGtBZVdMN1FXemJ3NVl0QkNBVXBHcU5qUnhta0ZKZkZtczRVNkdGLzAvNjZE NEZFNzlFRDhBOEUwRDE5NTA0MUMzMzVFRUIxQjc0OEExMkYwQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUfsMA0EAgACMAcDBQAoBERUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVaTANBgkqhkiG9w0BAQsFAAOCAQEAkaPGf8+P2sOkmGJO +cnCc/BvO8JQXnWsCV+dJ36Qkq4GvZbN28LVdwOH1Vg0x5SHLAUMMPhOmco+m4pF fzd6fUiBs4MCrt41csRbfA5a9wBzOKf2LvLpmcUtrUo5261b7JGxJvj6ayjv4p8k uU148Sb2aAsP1JWgnhmduVwXVuzNiwkeRzm95UJs2aFU/63aRNVYSVr5ayQJfqm8 WEtEn42TivM6ga3GYxjK4FD+dw7hxYnhpGvYdmUOX/APO4gVoxERoXcdFT9BY83V 8oqaSBAeW/cx8a4RSco5hSr4QSFM9OCAb4uW4bWaPZKHtmVcIuGky92YOqtiQuqq G9uLHA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:35:24 2025 by rpki-client