
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/70620B1C61C863D5C9CBBD460F66E1351DF8915F.cer
File: 70620B1C61C863D5C9CBBD460F66E1351DF8915F.cer (raw, json)
Hash identifier: FGseSUNkGUn3SRBrjHfWJ+43I+AMlldxQK1s2wMme2M=
Subject key identifier: 70:62:0B:1C:61:C8:63:D5:C9:CB:BD:46:0F:66:E1:35:1D:F8:91:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1FD82049703C05EEFF1DFBE7195198F37F7BA3F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/70620B1C61C863D5C9CBBD460F66E1351DF8915F.mft
caRepository: rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 20 Mar 2026 13:33:49 +0000
Certificate not after: Fri 19 Mar 2027 13:38:49 +0000
Subordinate resources: AS: 266143
IP: 160.20.20.0/22
IP: 186.251.206.0/23
IP: 2804:3b58::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 22:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d8:20:49:70:3c:05:ee:ff:1d:fb:e7:19:51:98:f3:7f:7b:a3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 20 13:33:49 2026 GMT
Not After : Mar 19 13:38:49 2027 GMT
Subject: CN=70620B1C61C863D5C9CBBD460F66E1351DF8915F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:d6:27:90:71:c3:e7:36:59:1b:f0:26:be:
b5:52:28:a6:ee:38:8b:8c:8e:cf:93:12:f0:2b:6b:
10:f1:f3:82:04:7d:49:25:b8:b4:a1:95:fe:a4:41:
8a:0a:3c:ae:fb:83:bb:ff:a4:83:c7:b0:dd:92:bd:
f6:5e:56:14:10:dd:9c:91:2c:4e:43:47:6b:80:19:
1d:be:e9:22:c4:76:69:f3:30:ec:95:44:54:4c:bc:
e2:b4:bf:2e:5b:6a:72:a5:ab:b8:26:df:16:16:a9:
55:41:02:5d:1c:33:61:2b:3c:63:ea:5f:f1:23:31:
73:3d:d1:47:23:e3:86:5f:06:10:30:2a:87:2b:08:
76:50:19:b7:5f:b5:ae:d2:e4:63:65:80:c9:fe:a8:
92:a8:d3:f2:0d:b4:45:11:35:51:0b:95:cb:0b:a1:
06:6b:8b:e7:79:5a:ac:bc:ca:2f:61:35:98:59:e2:
53:3f:86:6d:2f:c6:85:ad:3b:de:f4:ca:a4:3b:45:
c3:ee:77:d1:16:ac:ce:9a:9f:b1:0e:6f:35:76:f1:
5f:5c:6e:8d:c2:e6:4e:c7:e4:ae:02:38:b0:4b:52:
e7:87:54:17:b5:20:db:d5:06:7c:59:2c:c0:f0:59:
fe:2e:7e:0a:04:ad:45:a5:20:11:56:b0:77:e5:d2:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
70:62:0B:1C:61:C8:63:D5:C9:CB:BD:46:0F:66:E1:35:1D:F8:91:5F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/70620B1C61C863D5C9CBBD460F66E1351DF8915F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.20.0/22
186.251.206.0/23
IPv6:
2804:3b58::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266143
Signature Algorithm: sha256WithRSAEncryption
c8:7d:66:8f:f3:19:c1:09:2d:71:27:e3:20:1d:b1:8a:05:b2:
7e:b9:19:05:6a:cb:45:74:97:43:e2:6b:ed:98:ce:ed:88:97:
e4:09:d5:d1:19:5a:11:5c:97:3f:a8:31:15:2f:60:dc:ca:03:
59:6a:6f:e6:ba:f7:b0:4d:b9:5b:8d:ff:69:5b:cd:e2:18:a1:
88:d9:fd:41:7c:3a:7b:0d:87:2e:07:7a:30:cf:42:2f:1b:40:
c6:4c:c1:21:7e:f0:49:0a:69:3a:bd:0d:9a:67:40:dc:4b:fd:
22:b7:32:c6:7d:99:9c:cf:36:72:19:a7:a3:cc:25:15:0c:b1:
72:44:69:7d:dd:4a:e9:ec:47:3f:a8:4d:60:2c:56:46:47:ef:
05:68:5a:2f:7e:a7:fc:0d:de:0e:ca:07:74:6e:ad:06:77:0f:
f6:18:e5:e2:f6:7c:f1:e6:29:ed:fc:48:b0:d1:21:87:f7:5c:
a2:17:b0:0f:c9:9e:88:25:a0:b9:7c:2e:e0:bb:a6:e0:13:4c:
25:f6:11:3b:ec:47:cc:d6:e5:8d:51:e1:e5:fc:6c:04:8b:50:
31:f1:37:14:c5:c2:66:0c:31:29:20:1e:3a:5e:95:02:8a:67:
a4:24:e6:31:b6:18:d6:84:ca:c5:af:67:e4:2a:db:85:15:7a:
3a:7c:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:30:03 2026 by rpki-client