
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
File: 69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer (raw, json)
Hash identifier: iEy0uG6Zv1H+ovxkn72w5157z8Zt2Pj5v7+FKCHxFEk=
Subject key identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 798D89D008A8EDEF895D3CC6DC7D6473DFD2598A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft
caRepository: rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 06 Mar 2026 09:01:43 +0000
Certificate not after: Fri 05 Mar 2027 09:06:43 +0000
Subordinate resources: AS: 28309
IP: 168.228.96.0/22
IP: 179.189.0.0/20
IP: 187.44.64.0/20
IP: 189.38.32.0/20
IP: 2804:16c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 00:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:8d:89:d0:08:a8:ed:ef:89:5d:3c:c6:dc:7d:64:73:df:d2:59:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 6 09:01:43 2026 GMT
Not After : Mar 5 09:06:43 2027 GMT
Subject: CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:17:ea:9f:5a:d1:d8:6b:ac:74:47:84:67:
15:d4:f3:c8:f1:08:e2:64:47:9c:ed:1c:57:68:87:
0b:8f:62:63:34:f9:e7:fc:ba:b9:b4:63:cc:0a:9d:
2d:7b:2e:ef:df:bc:7c:3a:08:46:eb:6f:f0:b3:1a:
61:3c:21:00:67:52:65:4d:ae:8e:40:72:fb:2c:72:
13:03:bd:d8:83:c8:7d:14:5c:36:71:a1:8a:de:c0:
4b:11:0e:16:56:41:8b:02:41:1e:2c:f4:84:e3:df:
31:6a:4b:a3:4c:58:9e:d4:48:c8:9a:76:54:c5:60:
bf:53:ea:cc:f5:c9:5f:7b:3c:62:0c:12:7e:9d:01:
19:b3:23:9e:ac:c2:ec:6a:4f:b0:85:cd:96:8f:e3:
82:c7:7f:c5:2d:e6:6a:5e:b0:84:1b:1d:ab:53:46:
29:ae:40:59:7f:4d:9c:3e:22:64:7d:db:27:aa:72:
75:68:fb:15:b3:11:4f:3c:5a:12:9a:5b:8c:5e:8f:
ad:e2:be:b5:27:2b:01:6e:47:c7:69:54:fb:7c:33:
3e:6e:50:76:3a:3f:ad:06:e0:3f:d8:88:f1:4c:17:
35:bd:0a:b6:6b:31:79:df:70:18:b1:ff:3e:f6:87:
0e:bd:08:7b:d0:f6:e2:08:8a:56:6b:a3:41:7a:a5:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.96.0/22
179.189.0.0/20
187.44.64.0/20
189.38.32.0/20
IPv6:
2804:16c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28309
Signature Algorithm: sha256WithRSAEncryption
c5:41:34:11:75:d1:16:a9:7b:65:75:f0:4a:e6:f2:74:ca:97:
49:c2:bf:25:d6:eb:48:15:af:ce:35:39:51:b5:c2:ad:36:53:
7a:e0:a2:d6:b6:2e:40:88:11:44:b2:af:e0:1a:b6:b4:4a:81:
ca:6e:40:cf:a5:8a:04:42:2b:ae:2e:6b:89:5d:9c:fc:1b:5d:
1c:7d:f7:00:17:8c:5c:17:fa:9e:c5:f1:00:a8:4f:4b:1a:a3:
b1:0e:44:62:a4:95:d0:82:ad:c4:c3:0b:24:18:50:c3:b1:b7:
95:43:74:e9:a6:cc:e7:e3:91:34:2f:78:43:00:b6:a4:a0:3a:
99:b7:31:5d:3f:ee:2c:3a:20:a9:b8:8f:ec:d7:cc:ab:1f:da:
23:14:99:65:74:06:0c:d6:45:25:23:91:35:7c:a2:00:d9:54:
5c:51:6a:01:c6:74:ed:d8:07:9a:fd:58:f6:80:c7:99:7b:c3:
c9:ee:7a:89:22:a8:77:25:ce:87:87:b2:ea:fd:ef:fb:ef:f3:
1d:fe:f0:68:18:a7:86:dc:cc:9b:6a:22:37:b6:e6:4a:06:2d:
7c:30:4c:87:f4:52:84:f9:d2:f3:16:c1:78:3b:85:89:c5:e0:
2d:32:a9:77:84:24:19:d0:3b:a3:ca:c1:44:ce:f7:f0:7f:70:
c4:88:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:15:50 2026 by rpki-client