
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4930CFE9CF816668BB4D76B60E1D1E09201266DA.cer
File: 4930CFE9CF816668BB4D76B60E1D1E09201266DA.cer (raw, json)
Hash identifier: HpHsCyyAkrHmHIDmmhwyO2kUAYMrHuD5xJOz57UAS8s=
Subject key identifier: 49:30:CF:E9:CF:81:66:68:BB:4D:76:B6:0E:1D:1E:09:20:12:66:DA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6B13DA7C89C0F855C2BF68BCC61CBEDE8970C2E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/4930CFE9CF816668BB4D76B60E1D1E09201266DA.mft
caRepository: rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 31 Jan 2026 21:08:55 +0000
Certificate not after: Sat 30 Jan 2027 21:13:55 +0000
Subordinate resources: AS: 266435
IP: 45.187.164.0/22
IP: 170.82.76.0/22
IP: 2804:37c4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 21:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:13:da:7c:89:c0:f8:55:c2:bf:68:bc:c6:1c:be:de:89:70:c2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 31 21:08:55 2026 GMT
Not After : Jan 30 21:13:55 2027 GMT
Subject: CN=4930CFE9CF816668BB4D76B60E1D1E09201266DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:a0:75:15:21:a6:22:c2:e2:33:c7:e5:21:
b1:34:0a:f1:b2:16:ee:fa:2a:b1:82:ae:62:20:5b:
4e:0c:b7:6e:69:16:83:d0:f3:5e:9f:fd:28:3d:14:
b2:4c:8a:2b:3e:77:83:ec:e2:c7:5c:d9:4a:58:c0:
c8:f4:d3:8d:e4:e6:61:1c:e1:94:95:00:32:d3:aa:
7e:81:b7:be:40:a6:27:be:14:87:f5:e1:3b:0e:cf:
6d:27:a3:6a:13:cb:c6:48:b7:ad:dd:c4:49:2c:83:
47:ed:f6:0e:ae:00:dc:ba:30:a5:10:0e:68:a1:49:
d7:52:ca:d0:7d:4d:87:40:3c:3d:51:3a:8c:c8:4a:
78:d9:67:7f:47:05:2b:ed:6c:34:28:ca:14:ab:8a:
8b:84:da:30:7c:2b:be:07:e1:4c:d2:d5:50:76:77:
2f:00:9c:39:d0:b3:60:a0:2c:e8:e6:4e:35:bb:6b:
ce:47:60:d4:94:d7:ff:cd:11:41:23:e8:e5:df:38:
f4:2f:ad:2b:88:fc:bd:79:fc:fa:de:0f:58:74:01:
7b:9c:52:b9:67:0e:1a:47:5a:5f:c1:c4:28:f5:b5:
c0:ee:5d:56:f9:75:22:f8:ab:34:a5:f7:b0:e8:4b:
7f:9d:c3:53:03:a9:bb:12:54:3e:dd:c8:63:35:2f:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
49:30:CF:E9:CF:81:66:68:BB:4D:76:B6:0E:1D:1E:09:20:12:66:DA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/4930CFE9CF816668BB4D76B60E1D1E09201266DA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.164.0/22
170.82.76.0/22
IPv6:
2804:37c4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266435
Signature Algorithm: sha256WithRSAEncryption
87:4a:de:16:9a:d8:34:bd:ec:2c:df:90:2e:8c:98:f4:e8:ba:
0a:0d:3a:ed:1e:e5:fc:3f:b7:5c:7f:6f:c1:66:69:28:09:c3:
b9:1b:12:d5:9f:6e:9f:0d:35:f0:14:e2:5c:a1:1a:9d:fd:0a:
a2:55:16:7a:75:04:ba:77:da:07:25:ed:87:01:32:b9:b3:cc:
95:7e:a6:45:47:ea:ad:fb:80:13:1a:f9:e4:0d:40:8f:8e:66:
e8:85:87:2d:b2:fb:6b:7f:68:99:4d:93:cb:ee:b4:c4:a4:37:
ac:74:74:9b:a8:ae:cf:72:f6:d3:19:eb:8c:d6:45:e0:67:27:
39:71:ed:77:d1:2d:cf:63:1c:a5:c5:f8:e1:82:1d:fa:ac:ed:
31:01:4e:72:91:12:69:bc:2c:4d:72:cb:f5:4e:ce:54:e0:0a:
7b:f2:07:63:7a:d2:c0:55:f8:54:82:a4:c9:51:1c:2b:d3:bd:
18:f3:eb:65:47:de:b4:95:ed:66:2d:d3:bf:ba:b5:cd:9c:4a:
2b:c0:1e:b7:e7:21:3e:6f:db:3c:24:c9:a2:45:36:ec:55:96:
8f:7d:06:83:1a:e0:68:32:e6:e5:b7:f6:9e:2f:d9:23:52:cc:
39:c1:1f:41:0d:02:d6:99:60:07:99:b8:39:9e:34:fe:d2:2b:
9d:b7:c0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:03 2026 by rpki-client