$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer File: 66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer (raw, json) Hash identifier: nA7HzxobIiDGR74C2tlK/wL5ONuf0vnhvgFqv3qLoA4= Subject key identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1B6E4DF0E9A55FF331D342DD54DC19444002A5B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft caRepository: rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 16 Jun 2026 13:32:04 +0000 Certificate not after: Tue 15 Jun 2027 13:37:04 +0000 Subordinate resources: AS: 267625 IP: 45.71.236.0/22 IP: 2804:4454::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 28 Jun 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6e:4d:f0:e9:a5:5f:f3:31:d3:42:dd:54:dc:19:44:40:02:a5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 16 13:32:04 2026 GMT Not After : Jun 15 13:37:04 2027 GMT Subject: CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:19:22:cf:a0:49:2b:90:b8:e2:20:b4:46: f9:24:30:1f:8b:ee:d4:8b:bf:ea:15:b5:5b:2b:2d: 68:00:38:9e:6c:0e:61:65:b7:fe:83:3e:e2:1c:02: da:d3:85:54:ec:e0:aa:9f:9a:40:ab:62:92:a5:8d: 33:39:45:a2:b0:bd:ad:cd:5d:e2:a3:7f:db:f2:36: e1:53:a6:43:cb:8b:4d:c2:83:6a:91:ea:58:a3:32: 9c:b0:32:4d:2f:3b:fc:0f:db:f7:ac:da:1a:fd:9e: 81:90:83:e4:67:f8:72:f6:85:b2:40:19:aa:f0:4b: 2f:d0:ff:de:93:57:05:9d:f2:ad:84:1f:7e:fa:e2: fc:13:5b:8e:37:40:9f:58:1e:e0:9f:06:db:94:12: 82:7a:db:eb:7b:4c:26:09:86:f8:a7:67:d7:27:cf: 46:e4:81:f7:72:d6:4d:62:b4:46:50:e9:8c:bd:a5: 71:b6:af:43:35:64:c5:72:23:92:b5:93:af:f2:d6: 20:8e:33:1b:31:0b:64:61:6e:71:1d:31:31:b6:cc: 65:de:42:a6:6e:92:0b:22:43:f6:2c:90:ae:8f:d9: 6b:cd:cb:52:a7:a3:c1:23:f9:0f:6b:bb:e3:61:6a: e2:4e:9a:67:5e:58:37:b6:89:df:2f:ec:61:19:10: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.236.0/22 IPv6: 2804:4454::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267625 Signature Algorithm: sha256WithRSAEncryption 25:5f:d6:58:58:81:fa:7f:78:de:02:42:bb:10:06:2f:fb:38: 89:cd:8d:f3:b2:1b:ec:66:07:b1:60:ff:42:4a:57:09:76:9f: 16:56:4d:e9:e3:99:e7:09:b7:78:25:01:50:cc:90:5e:43:98: f6:61:8c:9c:ab:ee:38:3c:5c:99:2d:b8:f0:d4:87:e5:52:94: d7:b4:4c:a2:7f:15:1e:ba:1b:33:62:ad:f2:84:25:60:e4:f4: 01:bd:7a:3f:19:68:dd:e7:50:a6:ba:70:92:51:fd:61:d2:10: 6e:34:2a:f6:50:0f:2e:f8:e0:e1:d3:5a:c4:22:67:f3:59:5d: 8f:97:68:90:1e:83:44:63:53:d1:df:1a:79:32:88:34:6b:20: d7:87:4a:32:4b:18:34:25:58:05:3f:37:e6:c3:91:6b:c8:26: ed:49:bd:f5:96:72:5c:de:c2:bf:d6:f4:08:50:6e:95:97:07: 64:eb:17:5c:e7:fd:dd:e2:da:4a:c4:eb:18:2a:ae:3e:00:28: da:9f:20:ed:2c:1a:20:b4:e3:cf:98:c1:86:65:80:04:29:46: 71:67:9e:2f:47:82:69:6e:21:f5:af:23:e3:12:e2:33:52:94: 41:0e:28:05:2e:2f:88:73:6a:e9:b3:10:11:cf:24:40:f1:4e: 9f:9c:a1:86 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUG25N8OmlX/Mx00LdVNwZREACpbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA2MTYxMzMyMDRaFw0yNzA2MTUxMzM3MDRaMDMxMTAvBgNV BAMTKDY2RDRGRTc5RUQ4QThFMEQxOTUwNDFDMzM1RUVCMUI3NDhBMTJGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdhkiz6BJK5C44iC0RvkkMB+L 7tSLv+oVtVsrLWgAOJ5sDmFlt/6DPuIcAtrThVTs4KqfmkCrYpKljTM5RaKwva3N XeKjf9vyNuFTpkPLi03Cg2qR6lijMpywMk0vO/wP2/es2hr9noGQg+Rn+HL2hbJA GarwSy/Q/96TVwWd8q2EH3764vwTW443QJ9YHuCfBtuUEoJ62+t7TCYJhvinZ9cn z0bkgfdy1k1itEZQ6Yy9pXG2r0M1ZMVyI5K1k6/y1iCOMxsxC2RhbnEdMTG2zGXe QqZukgsiQ/YskK6P2WvNy1Kno8Ej+Q9ru+NhauJOmmdeWDe2id8v7GEZEMRlAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRm1P557YqODRlQ QcM17rG3SKEvCjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUNa akhwa0FlV0w3UVd6Ync1WXRCQ0FVcEdxTmpSeG1rRkpmRm1zNFU2R0YvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FD WmpIcGtBZVdMN1FXemJ3NVl0QkNBVXBHcU5qUnhta0ZKZkZtczRVNkdGLzAvNjZE NEZFNzlFRDhBOEUwRDE5NTA0MUMzMzVFRUIxQjc0OEExMkYwQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUfsMA0EAgACMAcDBQAoBERUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVaTANBgkqhkiG9w0BAQsFAAOCAQEAJV/WWFiB+n943gJC uxAGL/s4ic2N87Ib7GYHsWD/QkpXCXafFlZN6eOZ5wm3eCUBUMyQXkOY9mGMnKvu ODxcmS248NSH5VKU17RMon8VHrobM2Kt8oQlYOT0Ab16Pxlo3edQprpwklH9YdIQ bjQq9lAPLvjg4dNaxCJn81ldj5dokB6DRGNT0d8aeTKINGsg14dKMksYNCVYBT83 5sORa8gm7Um99ZZyXN7Cv9b0CFBulZcHZOsXXOf93eLaSsTrGCquPgAo2p8g7Swa ILTjz5jBhmWABClGcWeeL0eCaW4h9a8j4xLiM1KUQQ4oBS4viHNq6bMQEc8kQPFO n5yhhg== -----END CERTIFICATE-----Generated at Sat Jun 27 11:09:58 2026 by rpki-client