
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
File: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer (raw, json)
Hash identifier: 9BR4Oz82kJDQLHBMXkbZilMLDSIfBVRViXxwmcBxBvo=
Subject key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4F8B78809CFBA46E5F0306151269E71CD3676D32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
caRepository: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 08 Sep 2026 11:50:46 +0000
Certificate not after: Tue 07 Sep 2027 11:55:46 +0000
Subordinate resources: AS: 267543
IP: 45.70.16.0/22
IP: 2804:4304::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Oct 2026 17:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:8b:78:80:9c:fb:a4:6e:5f:03:06:15:12:69:e7:1c:d3:67:6d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 8 11:50:46 2026 GMT
Not After : Sep 7 11:55:46 2027 GMT
Subject: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:ac:f2:7c:20:63:3f:47:cd:3b:30:74:88:
af:00:e7:a0:71:26:29:e9:91:ef:02:dd:a8:2f:03:
05:04:f9:e2:40:4d:29:da:4c:dd:b0:65:bd:b6:c2:
80:d7:9f:e4:f1:e9:06:f4:42:55:25:7d:8a:c3:2d:
5e:8a:0b:92:96:42:67:60:a0:08:cf:17:48:9d:8b:
c9:a3:57:3b:5c:63:8f:02:fe:2c:66:b3:fc:51:ce:
18:c5:5a:5b:0d:2e:1a:5c:dc:c4:96:aa:c7:23:8a:
4a:df:98:cf:d0:80:4b:51:a3:f0:7b:4e:ba:2b:c5:
be:3b:c1:6d:bf:d2:52:60:05:af:cd:15:ae:b2:a2:
22:be:b5:b5:27:6a:10:3d:41:05:27:5e:f0:24:d7:
18:ec:bb:96:d9:99:ff:14:11:ac:f6:fe:58:fd:5f:
1c:7c:41:78:15:d5:81:99:bb:88:ca:6b:76:30:b8:
e2:ba:74:86:ab:86:84:3a:df:de:7a:3b:f6:03:c8:
2a:3d:85:6e:3a:04:f2:e2:23:b8:e7:88:21:69:ab:
5b:1e:ed:f6:87:c7:e1:20:fd:c2:d5:f4:f4:6e:3c:
96:52:51:a3:f8:0b:03:92:2b:e1:5f:74:20:a4:75:
dc:68:73:4c:64:d8:cc:96:fd:56:10:09:01:8c:1e:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.16.0/22
IPv6:
2804:4304::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267543
Signature Algorithm: sha256WithRSAEncryption
3c:32:70:be:93:52:00:3e:fa:b2:15:d8:a4:2e:6a:2e:2a:cd:
ba:e0:e8:c2:50:dd:b9:a1:93:6e:3a:df:b8:58:0e:5c:c4:fc:
b7:8a:82:b5:1a:cc:dd:90:3d:a3:5e:99:97:03:1b:07:34:d4:
df:91:18:00:23:19:e1:e4:62:30:ba:32:76:03:47:89:6b:15:
db:04:50:18:a8:b9:4c:95:1a:72:73:7c:9d:1f:1c:38:c6:bd:
ed:ea:f2:ca:b6:bc:0d:c0:94:6f:56:e6:da:b5:55:ab:42:f9:
cb:7f:16:f1:1d:3d:f8:46:64:3f:a8:0f:b2:fd:ae:e4:98:a5:
16:f4:e1:69:6d:8d:23:89:8f:3a:b1:58:5b:16:22:21:9b:3f:
92:86:01:eb:a5:cc:ae:62:c2:59:c9:a6:b4:87:8b:b0:e8:b8:
c0:53:ed:07:6c:6e:e1:ca:75:64:b9:1c:3d:f6:b8:70:ae:06:
e3:6a:ba:42:a5:3e:cc:64:53:e7:8f:f9:f6:74:60:b8:1c:28:
09:42:5b:95:fb:6a:5b:61:fd:9c:6c:6b:3f:b3:39:33:f2:fb:
45:1d:87:eb:64:65:2b:a0:57:d4:12:5f:43:d1:95:46:34:52:
64:e7:a5:da:5c:72:af:d5:d1:a4:7f:b5:4e:df:26:84:af:7a:
fe:af:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 19:12:21 2026 by rpki-client