
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF845836CD675ECCA3381B3A31A70928AE8515EE.cer
File: CF845836CD675ECCA3381B3A31A70928AE8515EE.cer (raw, json)
Hash identifier: r/uP3pEf/qpBkEjqLMZ/n3ZdLvd+A4BJijykr3ENVeM=
Subject key identifier: CF:84:58:36:CD:67:5E:CC:A3:38:1B:3A:31:A7:09:28:AE:85:15:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 332275F6D690FED2C5649B29401457E89BE2618C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/CF845836CD675ECCA3381B3A31A70928AE8515EE.mft
caRepository: rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 11 Mar 2026 11:36:41 +0000
Certificate not after: Wed 10 Mar 2027 11:41:41 +0000
Subordinate resources: AS: 266096
IP: 45.5.104.0/22
IP: 2804:3a90::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 00:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:22:75:f6:d6:90:fe:d2:c5:64:9b:29:40:14:57:e8:9b:e2:61:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 11 11:36:41 2026 GMT
Not After : Mar 10 11:41:41 2027 GMT
Subject: CN=CF845836CD675ECCA3381B3A31A70928AE8515EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:5b:84:4f:4b:8c:aa:b6:34:20:b3:fa:ca:
1e:0f:2c:9f:2a:72:03:ec:ef:ac:3e:40:1d:65:24:
70:ac:f2:3f:59:0a:a4:88:85:7e:ab:86:f9:cc:0b:
90:e9:05:7f:ba:8a:50:2f:f6:93:10:af:15:48:4c:
40:0a:2f:9c:c0:55:af:9a:cf:12:4f:77:3e:4b:72:
c4:b7:c6:48:47:d2:c8:74:ea:b5:57:b2:bb:d6:a2:
4b:96:c4:ea:19:d3:29:fc:5f:47:da:1e:ff:ed:7b:
b8:3a:b8:b0:28:68:a3:45:47:a8:87:90:df:c4:12:
58:d1:5f:ed:b7:d4:bb:b6:be:29:4b:33:29:bd:1d:
e8:e6:e6:43:d1:64:f5:55:62:f3:6d:74:d9:33:7a:
76:dd:b5:ef:81:ad:8e:e1:c5:d8:b5:c8:50:6b:67:
4e:62:c5:7e:48:ce:d0:14:c9:f1:ba:9c:a8:0a:c5:
64:3f:23:53:fc:c6:f8:a9:14:55:0f:c7:b2:15:ca:
59:5c:21:5e:af:d5:dd:cf:60:e9:6e:86:fd:34:3b:
de:43:c9:91:31:11:1f:e3:58:36:cc:e2:52:9e:fc:
93:4d:5e:7d:56:45:cc:30:55:21:51:e5:7d:18:b1:
ea:3d:cf:41:80:a3:48:04:62:1e:33:30:b7:2d:d4:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CF:84:58:36:CD:67:5E:CC:A3:38:1B:3A:31:A7:09:28:AE:85:15:EE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/CF845836CD675ECCA3381B3A31A70928AE8515EE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.104.0/22
IPv6:
2804:3a90::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266096
Signature Algorithm: sha256WithRSAEncryption
87:32:a7:21:9e:cc:9a:8b:68:38:58:ea:e6:fe:59:00:05:52:
af:65:ec:0a:dd:f7:74:ec:d0:97:6c:61:88:65:93:55:6b:a0:
83:cf:c5:76:dd:5f:fa:01:d0:94:43:14:03:11:04:f5:e1:c2:
14:73:a6:62:a0:80:ec:fa:b3:31:10:8e:d4:95:09:bd:8a:e6:
99:b6:b4:54:d2:11:13:97:52:d5:06:bf:2c:5b:6b:74:a0:17:
e2:bd:d5:15:7f:b8:23:a0:d5:be:6b:13:d8:e8:f0:66:46:c1:
92:16:7c:38:d9:95:b8:df:8b:ba:4d:ca:23:d4:9a:d2:7e:c8:
b3:29:f3:ef:14:e5:e7:49:a0:e2:d6:63:4f:34:90:74:aa:fc:
cc:69:1e:6f:60:20:df:38:e2:81:b6:c8:47:e5:44:64:dc:c0:
d0:8f:bf:df:22:a2:19:1e:32:44:80:63:8e:6c:4c:cb:4c:8d:
aa:6e:d8:1e:ef:1f:4e:0c:c0:a4:f3:06:ee:9e:d5:b7:af:4f:
4e:4f:4c:77:89:ab:c4:71:ac:92:ed:e3:a4:ab:bd:20:04:72:
ea:2d:08:e6:83:d0:06:f3:b2:1b:96:7d:10:e3:df:1c:c8:95:
3d:8e:4b:69:71:7d:42:6b:fb:66:8b:73:7c:33:47:d9:6b:c5:
a9:3b:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:54:41 2026 by rpki-client