
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BEE85EDFC75269C914F73EF5DF18F12F6B7EED76.cer
File: BEE85EDFC75269C914F73EF5DF18F12F6B7EED76.cer (raw, json)
Hash identifier: CKy/xJVzU3yNHCEF+TO4Rh5oNkMo4s8/OhL//lyGBLc=
Subject key identifier: BE:E8:5E:DF:C7:52:69:C9:14:F7:3E:F5:DF:18:F1:2F:6B:7E:ED:76
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5DE19851F54F5F589D076BD6B0FDFAA9A4EA4A20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/BEE85EDFC75269C914F73EF5DF18F12F6B7EED76.mft
caRepository: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 17 Mar 2026 13:59:43 +0000
Certificate not after: Tue 16 Mar 2027 14:04:43 +0000
Subordinate resources: AS: 264397
IP: 131.161.92.0/22
IP: 164.163.36.0/22
IP: 170.239.96.0/22
IP: 2804:1dd4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 00:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e1:98:51:f5:4f:5f:58:9d:07:6b:d6:b0:fd:fa:a9:a4:ea:4a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 17 13:59:43 2026 GMT
Not After : Mar 16 14:04:43 2027 GMT
Subject: CN=BEE85EDFC75269C914F73EF5DF18F12F6B7EED76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:f9:8c:9d:b9:0a:36:49:b3:a9:47:51:48:
6d:53:d5:9d:ab:01:5d:75:f8:66:43:53:74:c9:cd:
2c:a4:2c:8f:91:6d:ce:b7:28:fa:b6:0c:c2:bc:32:
20:42:c1:2b:b9:b8:40:7d:99:fc:7d:84:f2:bc:74:
51:cc:14:27:3a:59:7e:a9:7f:14:47:73:dd:5c:ec:
0b:07:4e:88:37:79:a2:c2:d0:1a:1b:30:97:41:19:
05:bc:c8:03:6f:6e:e1:00:3a:fd:8d:aa:66:ee:ec:
f5:b8:ac:86:c0:5b:9f:db:47:65:4c:d3:a8:84:a4:
b5:33:5c:cd:b2:2a:2f:3d:d6:d8:3e:1b:74:9f:5c:
02:34:48:64:a6:8c:af:96:c3:2e:31:5e:44:49:5e:
08:49:d2:7c:b9:12:28:43:cb:19:ee:c9:1b:55:f2:
28:c9:03:61:25:6c:a4:03:fc:a8:16:b0:02:e0:29:
44:aa:45:d9:bc:a4:9e:b1:fa:f6:34:ed:34:17:ab:
b0:4b:16:17:d3:2d:57:da:8b:d1:c9:ff:30:6e:90:
44:b0:02:63:ec:e4:8c:9a:d8:d9:61:a5:45:13:d5:
ec:34:7d:3a:a6:a3:a2:57:02:83:d5:2f:fc:5a:60:
6c:ae:21:56:ab:7e:22:1e:c1:fe:70:71:0f:3e:55:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BE:E8:5E:DF:C7:52:69:C9:14:F7:3E:F5:DF:18:F1:2F:6B:7E:ED:76
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/BEE85EDFC75269C914F73EF5DF18F12F6B7EED76.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.92.0/22
164.163.36.0/22
170.239.96.0/22
IPv6:
2804:1dd4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264397
Signature Algorithm: sha256WithRSAEncryption
09:87:72:9d:22:da:04:39:68:93:08:c1:67:30:f1:e8:66:41:
43:1f:44:19:d7:87:7c:b3:e5:3b:0b:23:36:16:d8:98:dc:14:
32:c3:08:10:ac:4c:6f:9e:ea:e8:7a:33:1a:1a:8a:c6:b3:3e:
66:cd:c2:bf:96:b9:59:23:c1:66:31:6a:2b:cd:d6:11:06:99:
3b:60:86:bf:22:c9:11:12:98:ec:8a:b3:0d:14:ad:11:bf:ad:
f4:3a:af:28:bd:98:ce:58:a3:ec:e1:e6:71:30:2d:00:83:19:
d4:75:37:51:a6:5c:67:46:43:fc:0f:bc:f4:31:3f:ff:df:f4:
fb:3a:6a:b3:cd:2a:2b:47:90:12:a0:9d:17:00:b0:e7:40:a0:
06:95:e5:e8:db:66:7e:09:52:f8:82:12:17:b8:72:ba:80:89:
cb:42:df:0c:47:9d:a6:c2:79:16:89:6b:6a:71:2b:37:7a:2d:
f7:35:40:80:e2:7c:c4:a0:b7:5c:50:96:14:88:20:c8:25:80:
01:37:77:15:1d:ab:63:14:0a:40:74:bf:93:fe:da:f4:88:e4:
4a:ed:24:dd:f2:e9:a8:c9:80:e2:c9:0e:56:07:85:48:8f:a9:
2e:ae:70:07:44:a3:68:b5:29:56:90:00:f8:df:30:e6:58:22:
02:e8:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:54 2026 by rpki-client