
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer
File: 35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer (raw, json)
Hash identifier: gtwufS6CF4SO5v4Ygzfixrcpo391KTwGQcW+W0bB8wc=
Subject key identifier: 35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 45F69E3A81E1B0EFB2BA56503BA84AB1E5FEDF64
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft
caRepository: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 07 Oct 2026 15:17:15 +0000
Certificate not after: Wed 06 Oct 2027 15:22:15 +0000
Subordinate resources: AS: 52527
IP: 177.152.80.0/21
IP: 200.150.252.0/22
IP: 2804:dec::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 09 Oct 2026 22:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f6:9e:3a:81:e1:b0:ef:b2:ba:56:50:3b:a8:4a:b1:e5:fe:df:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 7 15:17:15 2026 GMT
Not After : Oct 6 15:22:15 2027 GMT
Subject: CN=35548EB6B3E5B3A2570680DBBEDAE02D653D08A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:78:44:76:34:e0:7d:9b:8b:97:ed:30:1c:
9c:c1:85:b5:93:db:5b:58:88:59:43:9b:5e:71:4b:
c0:61:6b:db:a1:d0:fc:58:c9:67:a9:3b:3b:0c:46:
98:6b:1b:2e:16:eb:40:3e:cc:90:4b:dd:cc:ab:50:
80:1f:2b:a9:e1:92:19:d9:7c:00:81:da:e8:3c:b8:
6a:c2:4b:3a:4c:a7:ae:6f:bf:57:69:e2:85:e2:bf:
f1:cf:6b:f5:d6:58:db:50:c4:e2:7c:8e:48:9a:7e:
58:6e:0a:ef:47:d0:0e:03:49:8a:e0:5f:b2:c2:20:
17:a8:17:c8:1d:86:fe:6b:64:6b:f9:22:65:f2:88:
70:70:0a:ce:fb:b6:3b:29:37:e9:de:0a:59:03:e1:
bf:f8:51:97:ce:3e:3e:4d:cd:fd:b3:f7:38:7b:b2:
bc:b0:eb:18:79:01:ad:be:11:c8:34:2f:bc:9b:8f:
cd:e2:28:ea:0a:54:5f:de:1a:ff:ed:d2:9d:fc:f6:
a2:8e:7c:94:93:5c:57:3b:7e:59:56:b3:d2:66:aa:
ef:1d:32:6e:d1:bd:9a:79:1e:dc:56:b6:1a:1f:22:
af:57:79:0e:3b:34:46:de:87:92:8d:67:e8:ca:bd:
2e:e1:6a:54:71:29:f2:21:27:86:67:3e:c6:c4:9c:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.152.80.0/21
200.150.252.0/22
IPv6:
2804:dec::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52527
Signature Algorithm: sha256WithRSAEncryption
af:ff:4d:ac:cf:40:57:7e:6b:53:bd:a9:26:f0:c6:6f:1c:0c:
5e:1d:19:e4:be:9e:19:57:97:eb:62:97:8f:96:8a:ae:d1:98:
e2:69:04:bf:7e:48:db:91:e5:f4:69:ab:b6:a7:10:ca:41:74:
75:88:ce:13:28:37:9a:a1:94:df:eb:40:43:bc:12:7e:2d:54:
91:0f:e3:81:c1:4c:43:59:a3:9e:47:4c:ae:2a:f1:58:3b:0a:
1a:21:26:cf:86:bf:33:ff:b0:23:ab:9d:14:22:8d:af:cc:53:
3c:3e:3e:55:7b:fc:84:5d:22:0a:21:92:23:e2:3c:8f:43:a5:
54:17:d8:78:a5:87:7c:59:77:3e:9b:fd:a5:ec:99:28:65:63:
e4:7d:5b:a7:51:53:c0:aa:ac:9b:20:a4:f4:f7:a7:50:4b:df:
7a:87:fd:2d:ce:cb:23:ab:2a:05:1d:92:96:9d:77:95:8b:c6:
6f:e9:0b:98:69:cd:85:74:08:8e:93:68:aa:bc:67:70:43:37:
a5:8c:e9:66:58:84:67:35:22:ee:67:0d:e8:d6:c7:76:bf:a5:
2e:39:ad:1a:9f:10:fa:3d:d3:b9:4e:45:1b:ee:b1:6e:04:a4:
6b:ef:dd:aa:aa:84:2b:0f:54:f8:fa:a0:03:f5:dc:e2:33:14:
be:a1:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:54:08 2026 by rpki-client