$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer File: 6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer (raw, json) Hash identifier: oGKSzre4kkR70qym33WZ9d6UZdTlyu0U7S2Y6AZA0DU= Subject key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 12CFDE713942A044C432AAC71113AF4D286D519B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft caRepository: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Jul 2026 21:57:01 +0000 Certificate not after: Wed 21 Jul 2027 22:02:01 +0000 Subordinate resources: AS: 61851 IP: 177.75.224.0/20 IP: 201.149.124.0/22 IP: 2804:1a4c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 21:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cf:de:71:39:42:a0:44:c4:32:aa:c7:11:13:af:4d:28:6d:51:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 22 21:57:01 2026 GMT Not After : Jul 21 22:02:01 2027 GMT Subject: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:66:32:77:69:f7:ab:15:c9:d3:a9:70:c2: 70:8a:2c:88:af:0a:d3:f4:af:24:0d:c9:da:f9:e7: af:94:8d:42:19:b3:99:90:e9:45:87:5d:60:ca:a2: e4:6d:91:65:b0:40:4e:8b:16:19:9f:dd:02:eb:fe: c1:b2:bd:0c:35:63:d2:2a:17:7e:48:5b:c5:25:97: 5d:41:f4:71:38:a1:f6:1a:59:fb:5e:13:16:7a:58: 3a:4f:e8:1c:1c:f2:14:b4:c6:78:f5:ba:8e:3f:87: 7a:a2:02:d0:48:46:fc:6a:ba:b1:4c:46:68:a0:ea: f2:37:54:19:01:17:4e:1d:03:fb:25:a8:b6:f8:1c: e1:fe:87:78:08:c4:e8:97:29:b5:a4:2b:51:57:05: 32:c8:f3:b8:01:09:15:45:98:1f:6f:41:dd:61:57: d1:2e:da:27:c3:17:54:45:74:97:d8:87:6d:7d:ce: b6:af:db:f9:5c:e4:92:51:2d:06:6b:7e:e6:30:2d: b6:7c:8d:49:cd:fd:97:6a:7c:e5:56:d2:47:28:91: eb:b9:7b:b3:38:e1:19:53:20:31:38:27:a5:a3:6b: 1c:73:6b:a8:54:85:df:eb:76:58:a2:e3:e8:a2:fc: c0:58:aa:df:bf:1d:e9:c5:bd:c6:8f:8c:70:d6:1d: 42:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.75.224.0/20 201.149.124.0/22 IPv6: 2804:1a4c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61851 Signature Algorithm: sha256WithRSAEncryption cb:69:6e:83:26:6a:5b:3f:0b:c3:e9:06:29:c1:1f:77:b7:9f: df:73:da:6e:e9:5b:9d:21:89:72:b1:d8:75:57:7e:24:c6:5f: 18:93:90:c0:25:ab:3d:10:e9:c3:09:ce:ab:c4:c2:ce:a3:d5: ce:d2:45:cc:e6:51:7b:47:8e:03:d1:ea:06:0f:a6:52:49:57: 67:ae:5d:6f:0c:77:e2:6e:60:c8:f1:46:07:97:fc:31:64:8b: ed:0b:6e:8c:7b:0c:83:34:29:0f:9e:87:45:bb:18:c7:0c:2a: c5:e1:99:2d:66:32:95:96:2b:3a:4d:7f:c8:c5:41:12:1c:1e: e2:88:28:86:07:6a:24:93:81:72:16:96:35:9d:b1:1f:8b:a5: 85:27:0e:e3:07:b9:17:fb:d5:a0:4e:40:9c:e3:3b:77:37:68: 78:7f:ef:e6:50:bf:db:a7:0c:8b:69:f7:88:12:6f:7e:d3:11: 25:22:6a:a4:de:e8:a2:74:d5:61:5f:0d:56:3b:41:bf:37:7d: 20:01:f1:d0:a8:5d:53:6c:11:33:a6:9f:24:fa:af:65:6f:46: c7:60:61:b2:7e:74:37:1b:73:ef:ed:10:94:3a:99:6a:96:fc: 7b:1f:d9:0e:87:79:1b:bd:37:0e:46:4e:3e:9c:32:96:ab:bf: ec:81:02:e9 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUEs/ecTlCoETEMqrHEROvTShtUZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MjIyMTU3MDFaFw0yNzA3MjEyMjAyMDFaMDMxMTAvBgNV BAMTKDZDNjZEMzc1Qjk2NzUxMzZFN0M2OEJBQUM0RjJERERCMkNFNEUxNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jWYyd2n3qxXJ06lwwnCKLIiv CtP0ryQNydr556+UjUIZs5mQ6UWHXWDKouRtkWWwQE6LFhmf3QLr/sGyvQw1Y9Iq F35IW8Ull11B9HE4ofYaWfteExZ6WDpP6Bwc8hS0xnj1uo4/h3qiAtBIRvxqurFM Rmig6vI3VBkBF04dA/slqLb4HOH+h3gIxOiXKbWkK1FXBTLI87gBCRVFmB9vQd1h V9Eu2ifDF1RFdJfYh219zrav2/lc5JJRLQZrfuYwLbZ8jUnN/ZdqfOVW0kcokeu5 e7M44RlTIDE4J6Wjaxxza6hUhd/rdlii4+ii/MBYqt+/HenFvcaPjHDWHUJrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRsZtN1uWdRNufG i6rE8t3bLOThZzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOU1l NzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpRQjkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlN ZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAvNkM2 NkQzNzVCOTY3NTEzNkU3QzY4QkFBQzRGMkREREIyQ0U0RTE2Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsUvgAwQCyZV8MA0EAgACMAcDBQAoBBpMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxmzANBgkqhkiG9w0BAQsFAAOCAQEAy2lugyZq Wz8Lw+kGKcEfd7ef33PabulbnSGJcrHYdVd+JMZfGJOQwCWrPRDpwwnOq8TCzqPV ztJFzOZRe0eOA9HqBg+mUklXZ65dbwx34m5gyPFGB5f8MWSL7QtujHsMgzQpD56H RbsYxwwqxeGZLWYylZYrOk1/yMVBEhwe4ogohgdqJJOBchaWNZ2xH4ulhScO4we5 F/vVoE5AnOM7dzdoeH/v5lC/26cMi2n3iBJvftMRJSJqpN7oonTVYV8NVjtBvzd9 IAHx0KhdU2wRM6afJPqvZW9Gx2Bhsn50Nxtz7+0QlDqZapb8ex/ZDod5G703DkZO Ppwylqu/7IEC6Q== -----END CERTIFICATE-----Generated at Thu Jul 23 21:26:47 2026 by rpki-client