$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer File: 66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer (raw, json) Hash identifier: dR/7ogzfM63CEdKcpv+vjYA0K9DLamcgYj8/2UE7u70= Subject key identifier: 66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3EA323E1C1D7E2DBEFAE6B7A85F089EACCDEE430 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft caRepository: rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 10:26:22 +0000 Certificate not after: Wed 24 Mar 2027 10:31:22 +0000 Subordinate resources: AS: 263285 IP: 186.235.252.0/22 IP: 2804:1664::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a3:23:e1:c1:d7:e2:db:ef:ae:6b:7a:85:f0:89:ea:cc:de:e4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 10:26:22 2026 GMT Not After : Mar 24 10:31:22 2027 GMT Subject: CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:30:9f:76:bc:66:a2:eb:6c:69:4a:74:b9: 56:46:f0:59:96:79:66:01:7d:ec:29:16:54:bb:00: 10:0d:78:57:44:d8:de:60:27:2d:1a:37:2f:62:cb: 32:a8:d0:ec:b6:6d:e7:46:8d:36:c3:c9:44:a2:88: 72:9d:58:a1:57:29:05:5a:4a:9f:3f:42:75:60:94: f1:a8:30:2c:08:fc:63:3f:11:e3:8b:2e:7b:94:f9: b0:ca:eb:60:20:ca:34:87:01:d2:de:0c:d2:da:ff: 19:1e:90:1f:af:21:4f:a3:29:92:48:6b:b0:3b:dc: b9:1e:8d:51:46:48:62:e5:8f:27:8e:d3:71:b9:4f: ed:c1:f3:0f:bd:b4:80:f5:68:35:c2:dd:37:79:6b: ba:8f:b7:a5:2c:51:de:08:5c:ec:9f:bc:0d:1a:15: 11:92:81:dc:58:b2:0f:fc:56:d7:bf:b5:b1:69:ec: c5:15:e0:e1:78:65:df:ac:c9:48:2b:86:1d:15:92: c3:84:7a:a2:03:c0:58:dc:97:66:ec:3e:05:e1:fe: 18:95:9f:46:70:34:21:dc:7a:d1:37:02:54:65:96: d7:75:6a:65:3f:89:8e:67:f1:d0:40:9a:32:00:2b: 5e:af:e0:d2:38:55:38:bf:41:f6:cf:92:19:db:c2: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.235.252.0/22 IPv6: 2804:1664::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263285 Signature Algorithm: sha256WithRSAEncryption 87:c1:e9:eb:48:13:0f:7e:ea:55:19:03:a0:0c:a3:f4:70:f0: dc:d4:68:a3:f3:a1:04:89:44:b7:d1:8a:1b:24:72:96:0f:b8: 48:41:86:db:b4:72:af:b1:22:fa:86:b7:db:15:ad:3d:e3:b1: cc:fd:b6:c6:1f:af:eb:a8:7c:dd:fe:1e:3b:00:be:cf:c9:34: 5c:06:1b:38:83:a9:3d:3f:37:01:2c:ab:b3:d8:e1:32:62:1c: af:0f:cc:55:01:66:90:4d:12:62:0a:c8:89:e3:8a:85:21:34: bd:e4:5a:d4:11:eb:c0:bf:67:97:a9:32:4b:d9:88:a8:a7:45: e8:84:86:e0:a5:2b:8c:0f:49:7b:d8:db:c1:b3:6e:6e:2f:be: 39:a0:46:4f:63:9a:a0:68:ec:23:e3:ed:fc:18:c9:e9:41:22: a5:ec:6c:3c:cc:b0:52:f5:69:86:61:a2:94:15:90:84:d9:ef: 85:d8:0c:80:04:9b:7e:1f:f2:fa:57:e4:f5:3e:62:93:b4:0b: 76:47:b1:de:fb:d0:e7:fb:4c:b2:a2:07:7f:53:c1:ed:d6:b2: d3:04:7f:44:47:00:36:6f:50:82:af:51:b6:dd:12:ac:a8:b9: ee:f5:1d:0c:d1:ad:ba:1c:b3:dc:25:10:f3:3a:64:36:0c:9b: 91:b6:b3:b6 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPqMj4cHX4tvvrmt6hfCJ6sze5DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjUxMDI2MjJaFw0yNzAzMjQxMDMxMjJaMDMxMTAvBgNV BAMTKDY2QjkzNzk2RjQyMzkwQjY4MUEzREMxQ0M5OUY4RThFNDNDRTdCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83DCfdrxmoutsaUp0uVZG8FmW eWYBfewpFlS7ABANeFdE2N5gJy0aNy9iyzKo0Oy2bedGjTbDyUSiiHKdWKFXKQVa Sp8/QnVglPGoMCwI/GM/EeOLLnuU+bDK62AgyjSHAdLeDNLa/xkekB+vIU+jKZJI a7A73LkejVFGSGLljyeO03G5T+3B8w+9tID1aDXC3Td5a7qPt6UsUd4IXOyfvA0a FRGSgdxYsg/8Vte/tbFp7MUV4OF4Zd+syUgrhh0VksOEeqIDwFjcl2bsPgXh/hiV n0ZwNCHcetE3AlRlltd1amU/iY5n8dBAmjIAK16v4NI4VTi/QfbPkhnbwnozAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmuTeW9COQtoGj 3BzJn46OQ8573zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFZX Y1hOajNLSEVFNGF5WXZoNGdFR0ZoR3ROZnlTYmkxWEFvVlllNkcyNXcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhW V2NYTmozS0hFRTRheVl2aDRnRUdGaEd0TmZ5U2JpMVhBb1ZZZTZHMjV3LzEvNjZC OTM3OTZGNDIzOTBCNjgxQTNEQzFDQzk5RjhFOEU0M0NFN0JERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCuuv8MA0EAgACMAcDBQAoBBZkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQEdTANBgkqhkiG9w0BAQsFAAOCAQEAh8Hp60gTD37qVRkD oAyj9HDw3NRoo/OhBIlEt9GKGyRylg+4SEGG27Ryr7Ei+oa32xWtPeOxzP22xh+v 66h83f4eOwC+z8k0XAYbOIOpPT83ASyrs9jhMmIcrw/MVQFmkE0SYgrIieOKhSE0 veRa1BHrwL9nl6kyS9mIqKdF6ISG4KUrjA9Je9jbwbNubi++OaBGT2OaoGjsI+Pt /BjJ6UEipexsPMywUvVphmGilBWQhNnvhdgMgASbfh/y+lfk9T5ik7QLdkex3vvQ 5/tMsqIHf1PB7day0wR/REcANm9Qgq9Rtt0SrKi57vUdDNGtuhyz3CUQ8zpkNgyb kbaztg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:55:54 2026 by rpki-client