
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer (raw, json)
Hash identifier: Qr43fQAp5+B3M15s8O4FpAlxEFSM28ooFDehNo/PIrg=
Subject key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 75CA8122C05F71D252742F3B35097BE7B2BA960B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
caRepository: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 06 Feb 2026 19:48:20 +0000
Certificate not after: Fri 05 Feb 2027 19:53:20 +0000
Subordinate resources: AS: 61616
IP: 2804:8ec8::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 09:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ca:81:22:c0:5f:71:d2:52:74:2f:3b:35:09:7b:e7:b2:ba:96:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 6 19:48:20 2026 GMT
Not After : Feb 5 19:53:20 2027 GMT
Subject: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cb:e1:7c:99:bb:46:56:a7:1b:84:f8:99:b6:
c2:b5:4f:1d:49:99:c4:97:9b:84:d8:62:c9:be:88:
d7:ac:77:6a:9f:77:da:88:38:93:68:e3:aa:9a:fa:
5e:db:15:6e:e9:71:80:22:e7:a7:40:46:5d:36:86:
dd:04:7e:e4:29:d7:41:58:74:8f:79:31:9e:10:3c:
38:4a:f8:08:87:11:7a:af:84:b5:04:06:3f:f2:0f:
58:40:e8:f3:09:e0:b7:d4:7e:4e:65:29:51:8e:e1:
6b:d6:79:15:98:16:bb:10:05:8f:b2:b4:d5:9b:be:
3c:1c:c4:48:61:15:67:08:ad:63:fb:11:8c:a2:de:
b0:1e:9c:00:ea:04:3e:f7:02:82:c7:16:e7:f8:cd:
ed:87:de:cd:39:f3:97:2e:60:49:ca:d2:29:a5:eb:
a7:2f:60:73:01:f2:da:80:c9:c7:b6:f6:65:2e:b5:
c2:4d:2a:4f:9b:66:a9:d9:c1:aa:6c:8f:24:ed:ce:
b3:37:cb:a1:7d:42:31:89:47:0c:bb:20:09:e8:87:
bc:03:f5:24:f0:5b:cc:da:a2:9e:65:75:0d:ae:66:
36:7d:fe:ca:3f:b1:a5:0d:08:a4:24:b5:01:35:46:
62:20:3d:b0:fb:49:7c:c5:8f:f8:ee:50:f5:59:a5:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8ec8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61616
Signature Algorithm: sha256WithRSAEncryption
98:46:f4:c8:54:55:71:63:24:ed:ea:f1:50:2f:8a:f0:c7:ee:
f4:81:08:75:84:78:8e:9a:34:14:40:23:45:2f:07:2e:bd:78:
65:d2:5b:84:28:49:38:40:2b:f6:69:6a:6a:83:8a:54:d5:5f:
ee:c5:0e:a8:ca:60:24:97:b3:47:bb:06:c5:fc:6b:57:ed:f2:
85:12:a9:8f:f0:8d:d7:75:ae:f3:91:25:a7:a3:1c:97:72:9a:
f6:85:5c:97:01:47:7f:81:05:29:a7:0e:a6:1d:2f:87:aa:fe:
f7:9a:13:31:88:b2:d4:34:9c:86:65:2f:73:b4:b1:2e:5a:c3:
82:37:03:60:a2:62:a9:7b:e8:80:3c:c0:01:9f:ea:89:66:16:
be:0b:54:fb:b9:c1:1c:e0:63:c4:18:e1:d0:e9:f9:ac:5b:18:
64:f6:53:d1:0c:eb:91:32:6f:1b:69:f8:65:b0:31:ac:6a:19:
b0:e4:0e:7c:25:0b:db:be:19:f8:15:67:6a:f5:e8:57:32:0c:
a8:73:d7:f6:ce:84:07:a6:74:d1:bd:6d:35:48:72:a0:bf:44:
cd:15:ea:49:c4:8e:6b:c0:48:79:30:d8:da:23:ca:e5:5a:d8:
d6:ec:15:91:9e:a8:15:01:f6:02:69:a5:da:73:85:db:13:40:
e0:e2:ad:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:19:41 2026 by rpki-client