
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/BCF164423C31F706BBCFAC64A8699B70E19DE775.cer
File: BCF164423C31F706BBCFAC64A8699B70E19DE775.cer (raw, json)
Hash identifier: 4mv3XI+Uasz07tInFPpKD+o2n+tq4CzP4pGdBRIfBSE=
Subject key identifier: BC:F1:64:42:3C:31:F7:06:BB:CF:AC:64:A8:69:9B:70:E1:9D:E7:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 40330A312B20EF8541AEEFE9C8CB9A174CFFB1B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/BCF164423C31F706BBCFAC64A8699B70E19DE775.mft
caRepository: rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 05 Sep 2026 03:56:01 +0000
Certificate not after: Sat 04 Sep 2027 04:01:01 +0000
Subordinate resources: AS: 264378
IP: 131.161.128.0/22
IP: 2804:1d90::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 20:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:33:0a:31:2b:20:ef:85:41:ae:ef:e9:c8:cb:9a:17:4c:ff:b1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 5 03:56:01 2026 GMT
Not After : Sep 4 04:01:01 2027 GMT
Subject: CN=BCF164423C31F706BBCFAC64A8699B70E19DE775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:62:f4:5a:3b:40:d6:6f:19:c3:02:cf:27:
e8:db:6c:68:48:54:c5:33:3e:3f:25:60:cb:d5:07:
66:06:01:41:06:d1:71:5f:1c:04:76:0f:67:cb:51:
8a:c0:7b:ac:87:5b:ab:de:ba:1d:1b:4e:ca:84:d9:
c3:5c:64:2e:ed:06:a2:c5:a5:d5:87:6d:48:20:10:
28:a2:31:bd:ee:6c:37:10:69:7c:7f:c5:e2:f7:13:
e3:df:01:c7:63:d3:14:37:52:ec:73:80:59:dc:8f:
45:76:f0:25:11:a6:88:e9:26:98:97:58:1e:21:df:
76:b3:b3:4c:44:f9:c0:e1:dc:37:91:2b:80:06:d0:
44:cf:b2:33:de:2e:bf:a9:60:a0:59:4c:ee:cb:95:
02:d3:55:bf:01:3f:5c:a6:82:ce:3c:3a:d3:4b:22:
ae:01:3c:55:3d:67:4d:a9:30:a7:d4:e0:59:be:3c:
e3:9c:c7:d9:be:c8:25:d4:0a:2b:fe:93:4d:70:41:
9e:28:60:24:3d:7e:cc:75:63:ad:27:2a:3f:f5:ff:
fb:41:c2:52:8d:dc:c4:92:56:dd:f0:f3:84:0b:a1:
c0:98:c2:ef:6f:9f:e4:6a:e5:37:41:97:6f:ce:c4:
54:c7:a3:52:7d:c2:d7:9d:73:80:d0:0a:6a:20:22:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BC:F1:64:42:3C:31:F7:06:BB:CF:AC:64:A8:69:9B:70:E1:9D:E7:75
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/BCF164423C31F706BBCFAC64A8699B70E19DE775.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.128.0/22
IPv6:
2804:1d90::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264378
Signature Algorithm: sha256WithRSAEncryption
71:26:bc:64:5e:8f:3d:13:b7:1c:2c:67:cc:25:3b:0a:95:a7:
a6:e1:5e:1d:a3:be:80:f5:a0:f7:88:01:ee:e7:2d:7b:dd:ab:
d9:02:ce:7f:1f:af:16:e6:eb:e3:fb:a6:57:79:a6:8c:44:a9:
f1:87:48:08:f4:7a:50:c3:2f:4d:23:fa:93:ef:e3:3f:92:07:
97:51:ba:02:cf:59:10:76:a2:09:f0:ba:43:8d:62:e1:87:6d:
93:7c:89:b7:f8:70:ae:f3:49:c3:72:2e:17:54:d6:76:09:6f:
27:d4:40:41:b7:44:d0:f7:78:47:28:e7:4f:83:31:df:9b:09:
a6:72:ca:fa:e4:f7:fa:0a:e4:6d:b0:cc:1d:b5:f1:69:c3:3f:
9f:32:f4:38:81:9c:b9:fe:c8:72:f9:47:23:9d:a3:be:ba:c8:
7f:fd:52:54:15:10:28:b5:53:72:cc:1f:72:a8:df:72:d6:2a:
a0:39:3b:03:fb:f0:4e:a4:22:a2:de:75:3e:c2:44:87:41:84:
5a:7d:66:d0:b2:89:04:fe:3a:ea:43:54:92:f0:5e:d1:6f:9d:
57:cd:24:7f:a0:5f:39:69:00:2f:5c:9d:5a:66:5e:1b:7e:a0:
d3:a4:75:50:3a:58:b1:22:54:bd:a7:86:fd:d1:46:0a:cb:b1:
01:39:f6:a8
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUQDMKMSsg74VBru/pyMuaF0z/sbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA5MDUwMzU2MDFaFw0yNzA5MDQwNDAxMDFaMDMxMTAvBgNV
BAMTKEJDRjE2NDQyM0MzMUY3MDZCQkNGQUM2NEE4Njk5QjcwRTE5REU3NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNz2L0WjtA1m8ZwwLPJ+jbbGhI
VMUzPj8lYMvVB2YGAUEG0XFfHAR2D2fLUYrAe6yHW6veuh0bTsqE2cNcZC7tBqLF
pdWHbUggECiiMb3ubDcQaXx/xeL3E+PfAcdj0xQ3UuxzgFncj0V28CURpojpJpiX
WB4h33azs0xE+cDh3DeRK4AG0ETPsjPeLr+pYKBZTO7LlQLTVb8BP1ymgs48OtNL
Iq4BPFU9Z02pMKfU4Fm+POOcx9m+yCXUCiv+k01wQZ4oYCQ9fsx1Y60nKj/1//tB
wlKN3MSSVt3w84QLocCYwu9vn+Rq5TdBl2/OxFTHo1J9wtedc4DQCmogIowDAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS88WRCPDH3BrvP
rGSoaZtw4Z3ndTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUVn
MkJQdkV6NlBLTmIzNzdIbzhhVHBjNlNqYU1iMmpBRW9CRWM0UDI2NlAvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlF
ZzJCUHZFejZQS05iMzc3SG84YVRwYzZTamFNYjJqQUVvQkVjNFAyNjZQLzAvQkNG
MTY0NDIzQzMxRjcwNkJCQ0ZBQzY0QTg2OTlCNzBFMTlERTc3NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCg6GAMA0EAgACMAcDBQAoBB2QMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQIujANBgkqhkiG9w0BAQsFAAOCAQEAcSa8ZF6PPRO3HCxn
zCU7CpWnpuFeHaO+gPWg94gB7ucte92r2QLOfx+vFubr4/umV3mmjESp8YdICPR6
UMMvTSP6k+/jP5IHl1G6As9ZEHaiCfC6Q41i4Ydtk3yJt/hwrvNJw3IuF1TWdglv
J9RAQbdE0Pd4RyjnT4Mx35sJpnLK+uT3+grkbbDMHbXxacM/nzL0OIGcuf7IcvlH
I52jvrrIf/1SVBUQKLVTcswfcqjfctYqoDk7A/vwTqQiot51PsJEh0GEWn1m0LKJ
BP466kNUkvBe0W+dV80kf6BfOWkAL1ydWmZeG36g06R1UDpYsSJUvaeG/dFGCsux
ATn2qA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:51:43 2026 by rpki-client