
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EBCAF90C089227D5E38C8F08D8322E5122228BE5.cer
File: EBCAF90C089227D5E38C8F08D8322E5122228BE5.cer (raw, json)
Hash identifier: 3uG7f8lKgtFZZCP06yh98ePbc6Jq67+54ULqllRAj7w=
Subject key identifier: EB:CA:F9:0C:08:92:27:D5:E3:8C:8F:08:D8:32:2E:51:22:22:8B:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: BB52C6969DB0C3636873F85B645159636A1B3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/APxG496FnVATgtxYFUSoQDtEBjspQA2zeGce9BSfLZZJ/0/EBCAF90C089227D5E38C8F08D8322E5122228BE5.mft
caRepository: rsync://rpki-repo.registro.br/repo/APxG496FnVATgtxYFUSoQDtEBjspQA2zeGce9BSfLZZJ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 24 Mar 2026 15:32:13 +0000
Certificate not after: Tue 23 Mar 2027 15:37:13 +0000
Subordinate resources: AS: 273364
IP: 2804:8d8c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 00:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
bb:52:c6:96:9d:b0:c3:63:68:73:f8:5b:64:51:59:63:6a:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 24 15:32:13 2026 GMT
Not After : Mar 23 15:37:13 2027 GMT
Subject: CN=EBCAF90C089227D5E38C8F08D8322E5122228BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:14:38:b0:0c:f3:e6:8f:8a:34:c1:7f:38:
51:da:93:14:75:b3:6e:dd:9e:ee:e6:05:9e:77:4d:
c4:cd:5e:72:7d:ce:2a:01:ca:bc:24:d3:fd:53:e6:
1d:d3:7a:1d:69:b0:82:6c:8d:e9:26:f1:c4:a5:30:
45:16:9b:1b:e3:70:f0:14:78:cb:f6:41:89:58:64:
9a:21:60:4a:7f:ea:ea:ef:f9:27:83:d8:b5:ad:d0:
61:1f:0a:76:41:34:4e:8b:20:1a:86:1d:d2:ad:e9:
45:a8:e8:3e:c7:77:be:f3:33:c6:8e:c4:c3:4c:19:
19:cf:ea:c8:f3:ef:a6:d9:ad:2d:4f:7c:7d:ad:61:
a5:45:8c:62:18:ac:97:e1:21:87:1c:77:94:36:7d:
d9:ff:55:88:6f:3d:e7:15:5e:60:2f:b2:17:e0:28:
0a:be:52:4c:6a:30:34:40:a4:06:19:1e:97:1d:1d:
03:1e:30:55:f3:d2:30:ed:62:06:71:79:e1:63:67:
e6:c4:ce:eb:75:2a:10:55:d9:c6:ac:74:c5:41:59:
d5:72:2a:39:04:74:c3:a6:b5:f2:61:5b:79:f0:f3:
8b:79:65:0e:99:8e:fc:8c:c3:76:7d:ac:2c:21:0f:
8e:85:70:f3:24:76:7d:97:6d:30:53:f5:16:dc:2d:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EB:CA:F9:0C:08:92:27:D5:E3:8C:8F:08:D8:32:2E:51:22:22:8B:E5
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/APxG496FnVATgtxYFUSoQDtEBjspQA2zeGce9BSfLZZJ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/APxG496FnVATgtxYFUSoQDtEBjspQA2zeGce9BSfLZZJ/0/EBCAF90C089227D5E38C8F08D8322E5122228BE5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8d8c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273364
Signature Algorithm: sha256WithRSAEncryption
b2:d7:4a:a6:fe:ea:59:b4:f4:22:5a:ae:26:6c:81:d9:bd:59:
f1:54:98:93:b5:3d:0b:fd:a5:36:dc:6d:f0:48:f0:0f:fa:bc:
f1:48:3b:0a:44:85:99:b2:28:24:f0:92:9a:1f:8e:62:17:25:
99:a6:21:66:f3:b9:b6:51:60:e3:a7:c3:65:5c:e5:94:58:84:
c7:28:59:c2:9d:37:2f:03:6f:1a:b4:fc:06:41:22:7c:cc:ee:
3b:81:0b:5c:df:b8:cd:f1:cf:e7:fc:15:a2:7a:1f:5a:80:43:
ba:7f:db:e1:07:2a:2b:8c:b0:e6:de:1f:43:29:66:15:f5:14:
39:0c:e5:8c:0c:5c:3f:33:77:d1:67:57:3d:a8:11:c2:b9:ba:
cd:e3:8f:de:d8:13:81:7b:fa:67:97:29:bc:1b:cd:81:16:88:
e5:a9:0a:b3:6b:d6:86:20:59:b2:41:3c:5d:d1:04:ca:c9:f8:
90:21:e0:6d:8d:1e:b5:0e:e7:d7:7f:97:54:ce:e0:5d:85:26:
06:2f:f8:0f:79:97:2b:6e:1a:01:ce:f3:ff:e0:7e:a3:e2:bb:
49:7a:fd:79:d9:49:c8:d1:ce:0a:8a:87:04:ac:7d:a3:b0:7c:
e2:13:e1:37:87:59:0e:03:47:1f:da:f6:2d:80:be:2a:95:ce:
03:a5:73:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:54:50 2026 by rpki-client