
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
File: 47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer (raw, json)
Hash identifier: SYzWHK/BZH/6ivs8jQup5tY7e568aW0gMh8+mLN+J34=
Subject key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 57BF35B9FC3888E6452DED773FC0B1F98912AAC2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
caRepository: rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 03 Mar 2026 17:23:06 +0000
Certificate not after: Tue 02 Mar 2027 17:28:06 +0000
Subordinate resources: AS: 53038
IP: 177.73.232.0/21
IP: 177.154.176.0/20
IP: 2804:648::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 22:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bf:35:b9:fc:38:88:e6:45:2d:ed:77:3f:c0:b1:f9:89:12:aa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 3 17:23:06 2026 GMT
Not After : Mar 2 17:28:06 2027 GMT
Subject: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:02:7b:48:bc:50:fd:3f:35:48:cf:3b:5f:
7c:43:54:89:2d:14:a7:33:e8:f5:25:9f:17:24:57:
fd:28:32:d8:c7:fb:3f:55:5b:35:29:6c:62:7e:ba:
d3:04:95:48:d6:eb:b2:5f:f9:62:fa:f1:ab:57:bc:
b9:d9:68:b5:85:db:83:03:81:f2:fb:eb:f2:8e:3a:
0a:3d:b2:e7:af:ab:99:93:6c:4e:2c:64:f0:25:5a:
16:5b:c5:c8:86:d4:37:92:fc:77:c7:8f:89:04:3f:
fc:cf:8d:a8:3e:8a:ed:cc:61:32:19:95:8f:81:53:
26:cb:75:fe:09:fb:ef:7c:a0:bd:fb:18:e9:45:59:
58:ba:fb:31:c5:e1:14:22:b6:f3:62:e7:3d:df:70:
0c:0e:a8:60:60:7f:b8:1a:8b:1d:94:9e:bf:41:6c:
14:f1:f3:ed:91:8f:d9:11:d7:16:29:39:97:f9:c9:
48:85:30:6c:5c:e1:fc:a0:f4:2f:cc:5a:d1:ca:31:
f9:45:24:84:0c:26:be:a8:8d:4b:54:3e:08:fa:a6:
3b:4e:92:62:99:1e:71:46:0a:37:98:58:10:7e:bd:
2e:15:28:db:83:29:1c:03:2b:3d:9c:51:41:d8:e0:
b0:d5:99:b0:39:8a:32:13:5b:b1:d6:f5:30:d4:cc:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.73.232.0/21
177.154.176.0/20
IPv6:
2804:648::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53038
Signature Algorithm: sha256WithRSAEncryption
26:d5:2c:60:57:38:45:10:c4:bc:4e:42:2d:6b:56:a0:72:51:
04:09:43:2d:c9:61:22:0f:7a:f3:29:06:85:da:ab:c8:26:8f:
4b:b8:dd:ff:83:12:91:9e:92:59:94:1e:c2:04:13:96:ae:a5:
c5:54:bd:a5:52:36:9c:a6:8c:41:d5:55:4d:8a:04:4f:74:fd:
e2:2e:ed:01:56:a7:e0:3d:fd:67:7e:96:e4:06:42:88:5e:f0:
74:1f:18:97:25:b6:83:a7:4f:da:3f:93:57:b8:c9:df:b0:bc:
2d:8d:b0:f4:bb:bf:a8:76:9e:eb:7d:92:0e:c9:53:a4:86:42:
c7:1c:c4:36:8e:d8:07:12:00:f6:be:3f:25:2b:a6:1f:bc:d7:
36:aa:2d:b4:50:9a:75:fd:79:50:2f:8f:6c:2f:b9:f8:8e:b9:
42:07:d6:0e:ce:ab:a0:92:3d:a6:ff:4a:c1:2d:52:25:06:dd:
dd:a3:30:9b:d7:9e:81:6b:84:4d:53:7f:37:a2:33:1c:e9:fd:
4b:eb:6a:41:0e:0c:d1:ed:dd:6c:a9:5e:19:3c:62:4e:d8:fb:
ce:b7:51:a1:ab:a8:9f:60:78:b6:0a:a9:50:1c:69:e8:96:57:
ac:85:a2:74:99:0a:11:60:17:3c:90:93:0b:50:86:f8:6f:67:
fc:50:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:31:00 2026 by rpki-client