$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.cer File: 66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.cer (raw, json) Hash identifier: UTQ0aF4kv23GG3C5lP1GbqcD0x/sU8l7hRSzQTdBwW0= Subject key identifier: 66:D9:C3:E2:A9:2C:90:F1:5B:EB:35:42:0B:B2:D5:3A:F4:AA:2E:EC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 084E10BDB556759DE82E3B55C254DCDCF0A3EE96 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft caRepository: rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 14 Jul 2025 14:31:26 +0000 Certificate not after: Mon 13 Jul 2026 14:36:26 +0000 Subordinate resources: AS: 268623 IP: 45.164.120.0/22 IP: 2804:5404::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4e:10:bd:b5:56:75:9d:e8:2e:3b:55:c2:54:dc:dc:f0:a3:ee:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 14 14:31:26 2025 GMT Not After : Jul 13 14:36:26 2026 GMT Subject: CN=66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:d1:9e:0c:67:a6:cc:ea:ac:98:fc:47:70: 28:ee:5f:c9:34:22:82:94:21:8f:6d:e5:66:dd:6e: 62:cc:2b:a0:78:3a:10:62:61:40:14:8c:e7:76:0d: 98:c0:b1:66:b0:b0:50:7c:2d:e9:4d:86:c8:30:c8: 91:2b:09:1c:87:1f:37:60:02:06:f2:c8:e6:ed:1f: 65:73:c8:53:13:46:55:c1:38:df:6b:77:78:c1:10: af:7d:fc:c6:fb:d7:8f:f2:85:80:0b:2e:1f:c3:35: 6c:c2:34:6d:0a:83:88:27:ce:1f:e6:a8:30:ba:06: 0e:a9:fb:1c:bf:b7:f1:4e:94:1b:a8:03:60:69:53: 85:60:11:89:35:ea:27:68:86:5f:39:83:5f:90:76: aa:27:88:16:28:0a:3c:1e:f8:7f:1c:dc:48:0b:69: 3e:93:cf:9b:99:57:ce:a6:23:e7:d1:60:b9:be:35: 84:ed:83:b4:8d:ea:4d:5c:c5:fc:9c:34:2d:a9:45: 2d:20:dc:45:16:45:5c:97:ee:36:f9:64:5b:5f:4e: b4:8a:7a:58:5d:59:16:bf:9e:70:8b:07:3c:b4:69: 11:5b:26:09:1f:6e:6f:d2:90:3f:1b:e9:f0:21:f6: 13:37:8c:f2:94:1c:a8:6a:f1:39:ec:61:b9:66:e8: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:D9:C3:E2:A9:2C:90:F1:5B:EB:35:42:0B:B2:D5:3A:F4:AA:2E:EC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.164.120.0/22 IPv6: 2804:5404::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268623 Signature Algorithm: sha256WithRSAEncryption a8:bb:3e:71:83:6e:bd:53:eb:7f:e0:c7:7a:16:f8:27:23:79: 88:fc:37:09:f0:8c:36:dc:5e:96:19:c2:cb:1c:e7:2c:35:80: 8e:89:40:3e:8c:61:9e:cd:22:60:14:a6:ba:49:6a:e1:bc:23: 52:60:0b:70:d2:fb:95:1f:1a:9e:77:f1:8f:e4:21:16:fd:1a: 18:6f:b6:9c:5b:86:83:39:b8:e2:00:47:95:57:34:9d:5c:fb: 8f:48:7d:b1:f3:96:6b:3a:7e:cb:01:8b:57:22:8e:e2:bc:96: 74:7e:05:ec:d0:78:98:8b:36:97:64:7f:ff:df:f4:4a:4b:4d: 93:f3:18:b0:1e:0e:72:be:ee:f5:2b:44:d4:07:65:16:a3:47: 8a:76:d7:81:b6:4a:3a:f6:d6:2b:5e:75:71:6a:ec:ea:d3:8e: 70:da:84:92:52:8a:74:02:a4:a1:9c:f6:91:eb:3a:c0:09:85: c7:64:eb:99:ee:63:db:35:b6:c1:aa:ea:1a:c2:a8:77:fd:cb: 95:03:56:13:5f:c3:b0:38:1a:b6:41:38:43:41:4d:5c:99:05: 1c:a6:e4:73:44:e5:84:ab:0d:ef:9a:ee:36:83:6c:60:0e:ec: 5e:19:55:72:92:25:39:e1:8e:32:41:ee:27:75:75:26:e3:3b: 49:d5:cc:f3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCE4QvbVWdZ3oLjtVwlTc3PCj7pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MTQxNDMxMjZaFw0yNjA3MTMxNDM2MjZaMDMxMTAvBgNV BAMTKDY2RDlDM0UyQTkyQzkwRjE1QkVCMzU0MjBCQjJENTNBRjRBQTJFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IdGeDGemzOqsmPxHcCjuX8k0 IoKUIY9t5WbdbmLMK6B4OhBiYUAUjOd2DZjAsWawsFB8LelNhsgwyJErCRyHHzdg AgbyyObtH2VzyFMTRlXBON9rd3jBEK99/Mb714/yhYALLh/DNWzCNG0Kg4gnzh/m qDC6Bg6p+xy/t/FOlBuoA2BpU4VgEYk16idohl85g1+QdqoniBYoCjwe+H8c3EgL aT6Tz5uZV86mI+fRYLm+NYTtg7SN6k1cxfycNC2pRS0g3EUWRVyX7jb5ZFtfTrSK elhdWRa/nnCLBzy0aRFbJgkfbm/SkD8b6fAh9hM3jPKUHKhq8TnsYblm6FirAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRm2cPiqSyQ8Vvr NUILstU69Kou7DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGpQ NHpLYXdINGdrbW93NDRrdWlvRnBocVZBSjM2MUxRcDZqeXljdkxGY28vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhq UDR6S2F3SDRna21vdzQ0a3Vpb0ZwaHFWQUozNjFMUXA2anl5Y3ZMRmNvLzAvNjZE OUMzRTJBOTJDOTBGMTVCRUIzNTQyMEJCMkQ1M0FGNEFBMkVFQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaR4MA0EAgACMAcDBQAoBFQEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZTzANBgkqhkiG9w0BAQsFAAOCAQEAqLs+cYNuvVPrf+DH ehb4JyN5iPw3CfCMNtxelhnCyxznLDWAjolAPoxhns0iYBSmuklq4bwjUmALcNL7 lR8annfxj+QhFv0aGG+2nFuGgzm44gBHlVc0nVz7j0h9sfOWazp+ywGLVyKO4ryW dH4F7NB4mIs2l2R//9/0SktNk/MYsB4Ocr7u9StE1AdlFqNHinbXgbZKOvbWK151 cWrs6tOOcNqEklKKdAKkoZz2kes6wAmFx2Trme5j2zW2warqGsKod/3LlQNWE1/D sDgatkE4Q0FNXJkFHKbkc0TlhKsN75ruNoNsYA7sXhlVcpIlOeGOMkHuJ3V1JuM7 SdXM8w== -----END CERTIFICATE-----Generated at Sun Nov 2 23:01:34 2025 by rpki-client