$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer File: 66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer (raw, json) Hash identifier: wv81ixLolKHL1/D9K7euKxHVMpD+xYg5bntJnxXKnUI= Subject key identifier: 66:F2:AA:D2:00:D9:E7:BF:57:7B:A3:DE:5A:46:D4:15:C8:07:56:97 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5E28429D567A35F66818B2859B4D22F105338DAD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.mft caRepository: rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 15 Jul 2026 16:45:39 +0000 Certificate not after: Wed 14 Jul 2027 16:50:39 +0000 Subordinate resources: AS: 267552 IP: 45.70.60.0/22 IP: 45.163.200.0/22 IP: 2804:4328::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 01:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:28:42:9d:56:7a:35:f6:68:18:b2:85:9b:4d:22:f1:05:33:8d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 15 16:45:39 2026 GMT Not After : Jul 14 16:50:39 2027 GMT Subject: CN=66F2AAD200D9E7BF577BA3DE5A46D415C8075697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5e:0c:45:79:df:bc:b5:6d:31:8e:9f:12:c9: b2:b7:b3:d0:79:6d:51:81:0b:db:3b:0d:07:95:00: 70:f4:8e:a3:ec:5f:e7:89:5c:5e:92:b9:a7:8c:16: d3:4e:6f:1e:de:20:32:ff:fa:17:23:95:7a:6f:7e: 18:cc:c5:85:fa:c9:f5:0f:ab:ff:ba:63:ba:1c:4f: a8:71:09:9f:f8:d8:44:f4:52:af:da:56:72:94:ba: 9d:0b:8b:51:b8:d8:8c:af:b6:ad:8b:c9:0f:cb:b7: d3:d0:f6:f7:de:dc:d5:9a:de:e0:2c:19:b9:ab:9a: f0:ff:b3:e7:d4:ab:fc:83:5f:a3:14:26:4c:4c:b2: 40:76:8c:1a:45:47:5f:e4:22:81:83:29:5c:c6:7d: 31:37:6a:a8:42:58:69:cd:ac:da:15:03:f0:95:95: a2:c9:bc:16:39:5f:c9:55:35:1d:8a:8d:1c:19:f1: 87:e1:8b:89:95:9f:ff:98:3e:fa:d6:3a:e0:3a:a4: bc:5b:aa:5b:45:70:40:ed:20:c8:7f:f6:8c:d7:29: 04:e4:4c:96:b9:7f:76:a2:eb:8e:46:94:8b:5e:d3: 7b:d1:77:0d:7f:4d:d5:03:1b:0b:32:c5:8a:79:c9: af:8a:1c:dd:d9:b3:0c:9b:a5:49:ea:92:dd:35:39: ad:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:F2:AA:D2:00:D9:E7:BF:57:7B:A3:DE:5A:46:D4:15:C8:07:56:97 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.60.0/22 45.163.200.0/22 IPv6: 2804:4328::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267552 Signature Algorithm: sha256WithRSAEncryption 78:da:59:dc:53:3a:6d:42:58:f1:4d:00:4c:96:86:5a:24:25: 60:f1:b4:73:79:b6:2b:7f:9c:4c:d6:3e:93:57:8f:e9:4f:12: 2f:f6:d7:96:70:a4:c9:6c:c6:e9:9b:f4:a7:7d:48:0e:ba:fe: 43:69:b5:60:4d:b7:39:ad:49:0b:fa:70:f8:0d:c8:99:88:c1: 60:83:17:20:d5:1f:d9:18:df:6e:97:9a:82:4e:ba:52:5f:dc: ae:3a:b9:60:57:2a:f1:a8:c6:70:83:79:3c:98:55:85:9e:ed: cb:4d:38:fc:7f:e5:f2:77:42:cd:e6:56:94:5f:cc:4e:90:bd: 98:22:55:f7:93:94:fe:1b:5e:60:f8:e3:e1:28:e0:4a:0d:af: a5:15:b0:5a:98:4e:d1:30:3c:5c:01:d1:65:1a:69:34:61:7b: e8:fc:92:32:fb:4e:fb:98:77:92:f5:01:05:d8:74:7d:99:7e: 15:75:78:b4:73:7f:93:d6:8b:70:64:83:f1:38:de:f4:4e:9e: a9:e5:7b:c7:6a:1e:ef:bb:4c:90:7c:69:0b:9b:41:77:c7:d5: f1:64:c4:4d:51:b7:9b:98:6d:65:2d:59:65:0f:17:9b:0e:a0: 4a:5c:ec:a7:7a:57:6e:82:0b:e0:ba:2f:12:a4:56:a5:c3:e4: 26:56:2f:3c -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXihCnVZ6NfZoGLKFm00i8QUzja0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MTUxNjQ1MzlaFw0yNzA3MTQxNjUwMzlaMDMxMTAvBgNV BAMTKDY2RjJBQUQyMDBEOUU3QkY1NzdCQTNERTVBNDZENDE1QzgwNzU2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgXgxFed+8tW0xjp8SybK3s9B5 bVGBC9s7DQeVAHD0jqPsX+eJXF6SuaeMFtNObx7eIDL/+hcjlXpvfhjMxYX6yfUP q/+6Y7ocT6hxCZ/42ET0Uq/aVnKUup0Li1G42Iyvtq2LyQ/Lt9PQ9vfe3NWa3uAs GbmrmvD/s+fUq/yDX6MUJkxMskB2jBpFR1/kIoGDKVzGfTE3aqhCWGnNrNoVA/CV laLJvBY5X8lVNR2KjRwZ8Yfhi4mVn/+YPvrWOuA6pLxbqltFcEDtIMh/9ozXKQTk TJa5f3ai645GlIte03vRdw1/TdUDGwsyxYp5ya+KHN3ZswybpUnqkt01Oa1/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRm8qrSANnnv1d7 o95aRtQVyAdWlzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmNz UnRTOGtzOTRVMnNnMWV3QnBxQVJ2Y21zRDhDZUhRcnozQ3FlRW5aaHAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jj c1J0Uzhrczk0VTJzZzFld0JwcUFSdmNtc0Q4Q2VIUXJ6M0NxZUVuWmhwLzAvNjZG MkFBRDIwMEQ5RTdCRjU3N0JBM0RFNUE0NkQ0MTVDODA3NTY5Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLUY8AwQCLaPIMA0EAgACMAcDBQAoBEMoMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQVIDANBgkqhkiG9w0BAQsFAAOCAQEAeNpZ3FM6 bUJY8U0ATJaGWiQlYPG0c3m2K3+cTNY+k1eP6U8SL/bXlnCkyWzG6Zv0p31IDrr+ Q2m1YE23Oa1JC/pw+A3ImYjBYIMXINUf2Rjfbpeagk66Ul/crjq5YFcq8ajGcIN5 PJhVhZ7ty004/H/l8ndCzeZWlF/MTpC9mCJV95OU/hteYPjj4SjgSg2vpRWwWphO 0TA8XAHRZRppNGF76PySMvtO+5h3kvUBBdh0fZl+FXV4tHN/k9aLcGSD8Tje9E6e qeV7x2oe77tMkHxpC5tBd8fV8WTETVG3m5htZS1ZZQ8Xmw6gSlzsp3pXboIL4Lov EqRWpcPkJlYvPA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:48:49 2026 by rpki-client