
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer
File: 624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer (raw, json)
Hash identifier: RUtHhNv07K9fqGON0oqsmYDyVApypihe/hp74VuqC9c=
Subject key identifier: 62:4F:04:68:FC:71:4C:C3:7A:D7:B5:31:FC:42:ED:69:C2:5A:DF:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1250B6FD0F1ACC98B3DCC23AE86C4066194C7401
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.mft
caRepository: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 06 Apr 2026 15:40:42 +0000
Certificate not after: Mon 05 Apr 2027 15:45:42 +0000
Subordinate resources: AS: 11432
IP: 200.155.128.0/18
IP: 200.170.192.0/18
IP: 200.194.248.0/21
IP: 200.201.128.0/19
IP: 2804:138::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 13:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:50:b6:fd:0f:1a:cc:98:b3:dc:c2:3a:e8:6c:40:66:19:4c:74:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 6 15:40:42 2026 GMT
Not After : Apr 5 15:45:42 2027 GMT
Subject: CN=624F0468FC714CC37AD7B531FC42ED69C25ADF2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:80:41:8e:cf:1a:3f:bc:19:0c:1a:e2:7f:
bd:00:81:57:03:0c:0c:87:68:20:0a:df:fc:0b:21:
18:c7:22:39:21:14:6a:3e:c9:80:06:35:25:a9:24:
e0:4c:d2:71:f0:93:dc:f8:eb:77:4d:e6:24:b9:70:
38:f7:60:13:0c:26:6d:15:6b:ff:4d:35:02:e2:79:
3c:46:45:51:90:45:fd:88:37:52:ad:7f:97:36:f6:
e6:5e:f3:b8:24:48:95:32:e7:19:7d:fd:13:0c:57:
79:57:df:f5:c2:ab:7c:6e:21:34:5b:4a:80:9d:64:
3a:8d:68:4a:c4:d6:a1:e2:29:db:73:fa:3e:df:b4:
f0:e6:ee:16:ad:63:3c:d9:a8:8c:b0:c8:07:f2:02:
b7:2b:32:a8:51:ff:7c:e8:73:0c:11:82:99:87:8d:
78:8a:ce:46:52:56:39:b1:04:1d:7d:d4:c3:b6:fe:
46:be:c9:ed:31:43:83:78:ab:7c:b1:5b:68:bc:10:
6d:b7:36:17:13:cb:42:48:be:d1:7d:f4:0f:ed:d6:
49:cc:63:b3:06:87:27:c3:e5:cf:8d:22:c2:60:e0:
8c:13:28:cf:66:87:ca:fb:17:82:bf:ae:1d:be:26:
d3:68:e8:53:52:d5:ee:02:55:f9:82:6e:17:c2:2a:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
62:4F:04:68:FC:71:4C:C3:7A:D7:B5:31:FC:42:ED:69:C2:5A:DF:2C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.155.128.0/18
200.170.192.0/18
200.194.248.0/21
200.201.128.0/19
IPv6:
2804:138::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11432
Signature Algorithm: sha256WithRSAEncryption
d4:96:ba:71:3e:2f:c6:12:19:48:44:47:38:e8:60:cc:9c:b6:
e9:1c:af:11:85:8c:a3:0c:1a:a6:5f:94:2e:d0:49:d1:f4:e3:
63:31:85:80:aa:63:bc:c0:38:d0:9f:d9:65:e1:e2:00:96:bb:
58:b4:76:7f:bf:d9:02:bb:82:f6:e8:fd:88:20:13:51:0c:fc:
81:8b:6a:cd:21:29:3f:8b:74:f9:fd:8e:96:15:ba:d4:87:ef:
d2:d3:19:c5:1e:b7:f6:85:87:10:88:59:b7:b8:db:a3:79:b6:
bd:f8:0f:73:f9:c1:31:52:f2:3a:e6:6b:9f:6d:9c:39:61:39:
44:76:6f:40:c1:a4:68:8f:dd:a1:6d:67:62:f8:db:da:c4:db:
7f:3e:cf:f6:35:aa:a6:94:6f:fb:72:ea:d9:e7:71:2c:91:53:
b3:97:78:20:b1:7a:15:24:94:8a:5a:25:58:26:7c:dd:70:20:
0c:16:8b:09:2a:22:f1:72:fd:7c:d5:d4:5a:96:0c:a0:7d:86:
c6:3a:94:6b:44:91:8c:11:dd:89:8a:d4:88:37:82:1f:f6:d6:
bf:5b:97:ef:3a:0e:0d:27:9d:2d:31:7b:eb:65:58:33:0e:0d:
e0:38:a2:e0:95:06:e3:2d:1f:ce:5a:1e:e6:43:a0:99:e3:6c:
f4:1e:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:16 2026 by rpki-client