
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.cer (raw, json)
Hash identifier: SDJTiuVSXODm4msJJkWU3LMIMOFk96TsaMS/U5osYk4=
Subject key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7657F406036CF268011886D02E1EA269D5578321
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
caRepository: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 06 Feb 2026 05:48:05 +0000
Certificate not after: Fri 05 Feb 2027 05:53:05 +0000
Subordinate resources: AS: 264233
IP: 138.117.116.0/22
IP: 170.80.100.0/22
IP: 2804:249c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 13:34:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:57:f4:06:03:6c:f2:68:01:18:86:d0:2e:1e:a2:69:d5:57:83:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 6 05:48:05 2026 GMT
Not After : Feb 5 05:53:05 2027 GMT
Subject: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:c3:47:98:f5:73:f7:a7:55:78:2f:4f:59:
ba:ba:f9:55:ac:e9:e0:11:9f:14:42:60:f6:bf:eb:
b8:ad:3e:f1:e1:44:0d:57:00:8d:2c:7c:c6:8a:ab:
76:fb:06:a2:b6:5c:b6:90:0e:71:bc:8b:a7:4a:dc:
05:b4:c0:48:c4:ad:20:44:45:89:1a:43:c4:64:ad:
8d:ed:0a:8e:15:4c:fe:18:37:52:dc:30:7f:53:34:
b9:35:a5:fb:76:c7:61:70:b0:89:8c:15:83:30:0c:
63:3c:4f:42:60:b2:5a:54:f3:1f:fe:69:19:bf:e1:
2c:f7:57:6b:2c:87:b1:09:ab:6d:1f:0d:56:ec:39:
86:1a:58:45:ac:b8:f5:e5:d7:69:05:ec:fd:ba:43:
ed:6b:16:89:b7:9a:02:73:85:80:5d:3c:1b:35:05:
9f:36:fd:44:16:a7:2c:8d:c8:cc:e1:ea:37:b1:24:
88:d0:e9:4e:f8:97:22:31:f4:36:31:5b:80:04:6d:
a9:db:cf:31:ae:22:5a:bf:6a:32:b8:6b:be:fc:cb:
be:51:16:ef:f6:2a:12:d6:0c:8b:4f:49:d3:dd:25:
46:57:de:27:99:c5:a4:42:8c:cc:86:c9:fa:12:e9:
6b:f1:18:e2:f1:03:e6:7a:1e:4e:6c:09:0c:29:cb:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.116.0/22
170.80.100.0/22
IPv6:
2804:249c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264233
Signature Algorithm: sha256WithRSAEncryption
ab:54:e4:8f:04:e3:ba:29:15:54:49:2e:65:5c:45:77:fd:d1:
68:4a:dd:52:94:c4:7b:e5:24:8f:13:5a:78:e1:31:bb:e4:c7:
a0:9d:94:fc:d0:f6:96:6b:78:b3:98:e0:bc:10:02:d9:c9:51:
fc:53:37:ce:ab:cf:ea:66:51:be:d9:ef:20:26:de:2a:4d:ae:
51:67:5f:d0:38:e7:9d:ed:7f:d2:38:94:53:e7:7b:42:35:2b:
90:10:bb:ea:c8:f2:0e:82:55:e1:f0:77:b0:23:88:59:b5:bc:
90:09:b2:d9:36:c6:b2:02:24:8f:f7:c0:c9:4b:2c:88:b4:c5:
fd:11:89:eb:cc:e4:fb:68:f3:74:40:d4:a8:bf:55:40:cb:e9:
c4:c3:22:9d:a3:20:28:62:6a:c5:5e:62:2f:03:4e:32:e9:ab:
37:09:c7:90:0a:66:e2:21:e2:87:82:88:77:e1:f8:10:1a:cf:
7d:d4:8a:a2:6c:1c:4c:d9:55:67:a2:5c:9d:d1:26:af:8e:3e:
28:dd:87:31:60:4a:8d:c6:f5:06:ed:da:88:25:12:24:9d:fa:
e5:3b:eb:06:e6:0c:e7:a9:cf:55:f4:04:aa:32:e3:18:fc:d1:
e0:2d:30:b4:ce:fc:ca:de:fa:a2:da:d1:56:f2:86:fe:4a:d9:
df:53:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:23 2026 by rpki-client