$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer File: 66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer (raw, json) Hash identifier: 5ENqUv2GeLg9eajUQbC7dpOZp80swKz2fOWpwmCetX0= Subject key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 11EBBDC32DEB1999FF4D1E43B3565E2AEAB8B3A9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft caRepository: rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 24 Jul 2025 11:43:08 +0000 Certificate not after: Thu 23 Jul 2026 11:48:08 +0000 Subordinate resources: AS: 271024 IP: 45.179.106.0/23 IP: 45.227.100.0/22 IP: 2804:751c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 21:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:eb:bd:c3:2d:eb:19:99:ff:4d:1e:43:b3:56:5e:2a:ea:b8:b3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 24 11:43:08 2025 GMT Not After : Jul 23 11:48:08 2026 GMT Subject: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:68:d5:53:3c:a5:a7:8b:bc:b2:8f:2e:a4: 4b:69:a0:89:f5:7d:df:58:88:2a:32:32:64:49:63: c3:92:70:26:73:e1:4b:8e:9f:f8:c2:9d:38:0e:3b: 59:2b:0f:56:a5:f3:76:27:1c:e8:0a:2c:05:6b:2a: 4e:6c:ac:66:9f:e8:c1:6d:1c:93:ca:92:fa:60:1e: dc:87:c4:1e:2b:9e:1d:1b:4f:cf:f3:1a:51:58:28: 78:03:4a:54:d4:a8:7a:71:20:45:27:11:f6:eb:92: 92:04:21:56:01:38:ee:ee:f4:2d:fd:20:6c:f5:41: c9:79:a0:e4:76:b5:a7:33:41:e7:e7:10:71:a9:be: a8:79:ed:b8:f4:1a:9b:ce:7d:b6:48:66:95:d7:65: 22:e7:0c:14:0e:f9:96:20:85:af:5b:fd:33:6a:4b: 7d:46:0e:5d:f8:01:00:d5:cd:98:a4:89:f7:c6:d3: 49:71:2d:9f:f9:f5:1d:5d:70:d5:37:a1:27:ad:7a: e2:83:ec:e6:ba:c1:a5:b0:74:ab:c3:1e:3a:42:7a: 6c:5d:0a:1d:24:91:d4:a8:f3:54:84:7b:2b:e0:f4: e2:2b:95:58:a8:4f:6d:d7:9e:28:26:43:f9:f7:de: c6:52:a0:c5:f1:8c:ed:a9:3d:26:e1:99:ee:13:b0: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.179.106.0/23 45.227.100.0/22 IPv6: 2804:751c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271024 Signature Algorithm: sha256WithRSAEncryption 36:38:8b:b0:fd:19:ef:13:5a:6a:ad:30:e6:52:6d:6d:be:1c: 16:21:34:ed:c6:f5:36:d8:a4:f1:f4:78:75:51:8b:3b:36:08: ba:dd:ce:09:7c:1b:c9:83:63:04:e0:29:05:6e:ce:7f:54:55: a1:03:35:87:83:7e:48:4f:36:e2:bc:22:a9:15:83:7a:95:91: 46:7d:54:01:8a:8a:ca:95:6f:b3:a3:bb:a6:27:12:d2:d9:ff: ad:1e:16:e8:de:7b:73:17:b8:c0:b0:2a:2f:92:7a:b3:77:41: 85:f7:4e:22:6b:63:dd:71:ab:c2:6f:a5:09:0b:5b:a3:c1:76: ad:25:16:0a:6d:6f:40:bb:d3:24:84:f9:d2:b1:24:c1:41:75: 10:36:ce:42:ce:2b:63:39:d0:bd:33:f2:ee:ba:34:13:b5:e2: ec:68:4d:63:20:97:9a:96:5e:94:78:fa:68:4c:24:b3:1e:e0: 2d:fd:64:9f:ec:ef:6d:13:6e:34:13:d5:eb:fb:cc:e2:b8:00: 98:b0:33:c1:f0:5e:97:f1:4c:53:80:7c:68:f1:28:3b:d0:d0: aa:0b:a9:48:12:1b:70:3c:56:57:91:51:09:0d:78:59:6f:4b: be:fa:30:74:ae:c1:c5:96:95:00:fa:c8:43:47:21:b6:50:1f: b5:8a:fd:aa -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUEeu9wy3rGZn/TR5Ds1ZeKuq4s6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjQxMTQzMDhaFw0yNjA3MjMxMTQ4MDhaMDMxMTAvBgNV BAMTKDY2RkRCODc2Q0JBMkUzRTFDMTIwODA0NUU5OTBCMzlCRDA5N0VCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sGjVUzylp4u8so8upEtpoIn1 fd9YiCoyMmRJY8OScCZz4UuOn/jCnTgOO1krD1al83YnHOgKLAVrKk5srGaf6MFt HJPKkvpgHtyHxB4rnh0bT8/zGlFYKHgDSlTUqHpxIEUnEfbrkpIEIVYBOO7u9C39 IGz1Qcl5oOR2taczQefnEHGpvqh57bj0GpvOfbZIZpXXZSLnDBQO+ZYgha9b/TNq S31GDl34AQDVzZikiffG00lxLZ/59R1dcNU3oSeteuKD7Oa6waWwdKvDHjpCemxd Ch0kkdSo81SEeyvg9OIrlVioT23XnigmQ/n33sZSoMXxjO2pPSbhme4TsIAzAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRm/bh2y6Lj4cEg gEXpkLOb0JfrzzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmFS emFIcWo3RmI5NzFkQTdoY3BFdkxiVndDWXUyTkttOFZDVjZMdzE4cHIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZh UnphSHFqN0ZiOTcxZEE3aGNwRXZMYlZ3Q1l1Mk5LbThWQ1Y2THcxOHByLzAvNjZG REI4NzZDQkEyRTNFMUMxMjA4MDQ1RTk5MEIzOUJEMDk3RUJDRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQBLbNqAwQCLeNkMA0EAgACMAcDBQAoBHUcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQisDANBgkqhkiG9w0BAQsFAAOCAQEANjiLsP0Z 7xNaaq0w5lJtbb4cFiE07cb1Ntik8fR4dVGLOzYIut3OCXwbyYNjBOApBW7Of1RV oQM1h4N+SE824rwiqRWDepWRRn1UAYqKypVvs6O7picS0tn/rR4W6N57cxe4wLAq L5J6s3dBhfdOImtj3XGrwm+lCQtbo8F2rSUWCm1vQLvTJIT50rEkwUF1EDbOQs4r YznQvTPy7ro0E7Xi7GhNYyCXmpZelHj6aEwksx7gLf1kn+zvbRNuNBPV6/vM4rgA mLAzwfBel/FMU4B8aPEoO9DQqgupSBIbcDxWV5FRCQ14WW9LvvowdK7BxZaVAPrI Q0chtlAftYr9qg== -----END CERTIFICATE-----Generated at Mon Aug 4 21:32:54 2025 by rpki-client