
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.cer
File: CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.cer (raw, json)
Hash identifier: 1PMmOo2aAKVWFwKJUUqAYVU97WngHDcxJm8apxq7d1M=
Subject key identifier: CA:7A:1F:58:E1:0C:61:CD:F9:AA:91:7F:1B:71:68:A9:BA:99:80:4D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 21E0D5A5583044A2DD3085C20967CE2B916C3314
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.mft
caRepository: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 27 Apr 2026 17:49:58 +0000
Certificate not after: Mon 26 Apr 2027 17:54:58 +0000
Subordinate resources: AS: 270430
IP: 190.111.156.0/22
IP: 2804:6bdc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 12:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e0:d5:a5:58:30:44:a2:dd:30:85:c2:09:67:ce:2b:91:6c:33:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 27 17:49:58 2026 GMT
Not After : Apr 26 17:54:58 2027 GMT
Subject: CN=CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:a0:10:f0:03:7f:4e:e8:55:e1:45:7a:d5:
39:6c:aa:fb:ad:55:92:e8:2a:fc:66:93:3f:55:a3:
86:2f:4b:7f:d7:1a:8f:53:48:96:71:1e:10:ca:57:
14:7a:90:87:65:c2:96:42:ef:e2:0a:2c:66:ee:d3:
87:27:19:a9:bb:1f:73:96:8b:f4:3b:0c:62:0e:1e:
8b:3b:95:d6:e1:86:c1:1a:d1:fa:85:ed:f7:09:40:
00:8f:fd:3b:4d:0b:6a:0d:54:c9:d2:b4:6b:2d:fd:
e6:96:42:b8:28:5a:3b:24:8b:73:97:ce:87:9f:34:
50:2c:15:19:92:91:dc:97:61:02:55:6a:36:2a:81:
18:41:1e:8b:46:ce:d1:60:65:4a:05:f0:30:c0:ce:
26:a0:a4:d9:d8:6c:b8:84:78:27:22:a4:23:f5:fb:
f9:c2:78:f0:14:44:4b:80:80:3f:4e:87:9d:20:19:
41:4c:2e:bf:e6:96:e3:15:19:3f:b3:c9:37:88:d4:
86:70:94:f4:04:b3:57:09:a2:0d:13:3e:4e:ce:3c:
e4:88:5a:16:21:41:3e:b9:da:9a:fd:42:e4:f7:18:
0b:3f:56:9f:cd:08:3d:f1:bb:90:e8:03:7e:cd:5a:
be:6b:9b:e1:ac:69:d2:1f:da:3d:f3:3b:fc:24:ef:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:7A:1F:58:E1:0C:61:CD:F9:AA:91:7F:1B:71:68:A9:BA:99:80:4D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.111.156.0/22
IPv6:
2804:6bdc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270430
Signature Algorithm: sha256WithRSAEncryption
53:72:d8:ed:32:82:8b:f1:be:0a:ac:93:d0:de:dd:81:b6:9a:
66:81:95:0e:12:52:fd:93:35:8e:80:8f:68:02:1c:c7:50:dc:
6a:e4:21:fb:13:51:b8:06:1a:99:59:35:00:55:cc:d0:87:f3:
11:d2:94:da:d9:d6:28:f6:8f:a2:f0:7f:4f:62:fc:4d:56:7c:
e4:0b:b6:09:35:f8:ac:7c:84:b0:b9:f2:9d:76:0c:9e:76:1c:
30:04:ca:d1:6a:17:06:37:f5:64:a4:5e:a2:b1:e4:d5:11:db:
2e:11:27:0e:86:2c:32:c4:26:33:3c:c6:6e:e1:d1:b7:4d:20:
ce:7e:32:cb:7d:bf:95:4b:ed:f2:5a:ba:21:aa:3d:2f:f2:63:
8a:dc:4b:a2:d3:37:91:05:87:d6:0f:1e:62:c6:d0:8f:11:3d:
54:22:38:af:44:55:0e:f0:f7:2c:24:9c:94:ef:d5:78:ef:d5:
9d:e4:b1:ea:92:e4:a1:54:2d:ef:3c:7a:16:31:cd:21:53:96:
d4:56:67:3d:ca:7d:e6:23:ea:b2:f2:57:23:56:62:39:00:8f:
68:64:17:eb:85:4f:03:71:6b:8e:c4:19:68:75:22:f3:fe:52:
a1:d3:47:3d:d1:35:cc:8c:77:43:13:a3:fb:1e:d6:2e:08:7a:
0c:3f:8c:a1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUIeDVpVgwRKLdMIXCCWfOK5FsMxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA0MjcxNzQ5NThaFw0yNzA0MjYxNzU0NThaMDMxMTAvBgNV
BAMTKENBN0ExRjU4RTEwQzYxQ0RGOUFBOTE3RjFCNzE2OEE5QkE5OTgwNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhaAQ8AN/TuhV4UV61Tlsqvut
VZLoKvxmkz9Vo4YvS3/XGo9TSJZxHhDKVxR6kIdlwpZC7+IKLGbu04cnGam7H3OW
i/Q7DGIOHos7ldbhhsEa0fqF7fcJQACP/TtNC2oNVMnStGst/eaWQrgoWjski3OX
zoefNFAsFRmSkdyXYQJVajYqgRhBHotGztFgZUoF8DDAziagpNnYbLiEeCcipCP1
+/nCePAUREuAgD9Oh50gGUFMLr/mluMVGT+zyTeI1IZwlPQEs1cJog0TPk7OPOSI
WhYhQT652pr9QuT3GAs/Vp/NCD3xu5DoA37NWr5rm+GsadIf2j3zO/wk78X/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKeh9Y4Qxhzfmq
kX8bcWipupmATTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWRa
ekF0UFBaQkR3UHFoVUVoR2J3MmVlRkJyNVpoaW5zeUZ3OEp4eHFrVEwvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlk
WnpBdFBQWkJEd1BxaFVFaEdidzJlZUZCcjVaaGluc3lGdzhKeHhxa1RMLzAvQ0E3
QTFGNThFMTBDNjFDREY5QUE5MTdGMUI3MTY4QTlCQTk5ODA0RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvm+cMA0EAgACMAcDBQAoBGvcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgXjANBgkqhkiG9w0BAQsFAAOCAQEAU3LY7TKCi/G+CqyT
0N7dgbaaZoGVDhJS/ZM1joCPaAIcx1DcauQh+xNRuAYamVk1AFXM0IfzEdKU2tnW
KPaPovB/T2L8TVZ85Au2CTX4rHyEsLnynXYMnnYcMATK0WoXBjf1ZKReorHk1RHb
LhEnDoYsMsQmMzzGbuHRt00gzn4yy32/lUvt8lq6Iao9L/JjitxLotM3kQWH1g8e
YsbQjxE9VCI4r0RVDvD3LCSclO/VeO/VneSx6pLkoVQt7zx6FjHNIVOW1FZnPcp9
5iPqsvJXI1ZiOQCPaGQX64VPA3FrjsQZaHUi8/5SodNHPdE1zIx3QxOj+x7WLgh6
DD+MoQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:28:08 2026 by rpki-client