
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
File: 809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer (raw, json)
Hash identifier: FAMwiQvurI0RqAf9r8nZkP1awNfXB0rfXRnLMHydQdo=
Subject key identifier: 80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4150AB31006948B4212C37797619296E0683A98B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
caRepository: rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 06 Feb 2026 04:36:32 +0000
Certificate not after: Fri 05 Feb 2027 04:41:32 +0000
Subordinate resources: AS: 28219
IP: 186.236.224.0/20
IP: 189.124.16.0/20
IP: 2804:29a0::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 15:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:50:ab:31:00:69:48:b4:21:2c:37:79:76:19:29:6e:06:83:a9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 6 04:36:32 2026 GMT
Not After : Feb 5 04:41:32 2027 GMT
Subject: CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:f0:1b:b2:98:1e:24:72:2e:94:69:b7:9d:
cb:a2:da:d4:e1:44:1a:7c:f2:4b:e3:f0:09:4d:60:
08:5b:98:81:9d:ab:94:ea:8f:c2:35:71:4e:55:9e:
b8:40:0d:48:55:a6:94:26:d7:9b:43:a5:0b:01:de:
8f:40:4c:30:85:f3:52:fe:ed:7a:8c:f8:fd:78:01:
96:ad:02:2f:f8:02:a8:1b:08:d6:62:03:42:f8:5b:
7e:90:7d:46:a8:18:ce:6f:f5:75:37:95:80:f3:2b:
19:d1:ab:9b:d5:34:71:1b:ae:a9:19:16:c9:ff:73:
86:7a:66:12:2e:ad:38:31:34:e1:7e:42:b2:20:aa:
07:ea:7d:d0:8f:9f:a0:e5:79:9b:2a:d4:c4:78:77:
01:5e:aa:c0:cd:1b:28:ec:9f:ad:02:63:e2:48:77:
85:ed:2e:c5:b8:cc:71:29:e5:6c:97:37:7b:f8:c5:
f0:fe:32:ea:82:c2:89:0d:b7:34:62:d7:4e:f4:14:
44:1e:62:7d:28:36:6f:a0:7b:d4:f7:4e:1c:66:2d:
22:cd:dd:b6:aa:63:0a:c0:ab:ef:a7:20:17:62:45:
bb:07:0d:5c:06:15:8d:b1:29:82:b9:02:f3:fc:3e:
77:89:27:3c:e0:34:74:64:a7:ac:56:ec:43:4c:09:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.236.224.0/20
189.124.16.0/20
IPv6:
2804:29a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28219
Signature Algorithm: sha256WithRSAEncryption
d3:24:2c:ea:56:dd:89:fb:cc:5f:07:ca:ac:ef:df:62:bf:e8:
1c:c0:aa:8a:ed:f7:da:7d:fe:fc:a8:31:ad:fc:74:28:18:93:
b5:6d:5a:af:35:d5:ed:66:0c:d1:e8:92:aa:9a:04:0a:bf:0b:
5a:2b:ce:d9:06:b4:c5:c1:65:66:8f:2c:a4:d5:d8:00:37:31:
85:d5:35:b8:2d:02:74:07:c8:15:db:20:e5:e9:95:15:82:1a:
b2:45:72:a8:52:d2:6f:31:ba:10:59:ba:2f:87:12:c8:ff:85:
f0:48:81:2a:98:90:92:d3:e2:13:c8:e8:61:d3:ab:cc:e7:61:
05:52:af:c1:83:32:8a:86:ae:ed:ab:87:ac:a6:6f:82:95:0a:
00:3b:11:21:4b:29:82:15:ca:2c:43:8d:bd:81:c9:c0:f0:4e:
a8:9a:5f:85:e6:ff:f2:57:4b:5e:36:7d:b8:df:db:87:1e:fb:
a0:85:74:73:a9:40:e6:94:0f:a6:66:9c:66:41:4d:de:d7:ae:
df:43:ff:d1:fb:3b:32:28:92:e1:2c:99:bf:5c:f5:00:73:4f:
fe:47:4b:13:66:99:ed:47:5d:04:a8:42:ea:49:7d:74:b7:01:
06:cd:f2:c2:2a:d9:78:e3:3f:1e:e6:3c:9e:46:af:46:82:75:
b0:48:f4:9e
-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgIUQVCrMQBpSLQhLDd5dhkpbgaDqYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAyMDYwNDM2MzJaFw0yNzAyMDUwNDQxMzJaMDMxMTAvBgNV
BAMTKDgwOUQ5RkQyRjc0MUNEMkM2RUFDQTkxQkNBOEQyOTU4MjQ5NDg1NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyvAbspgeJHIulGm3ncui2tTh
RBp88kvj8AlNYAhbmIGdq5Tqj8I1cU5VnrhADUhVppQm15tDpQsB3o9ATDCF81L+
7XqM+P14AZatAi/4AqgbCNZiA0L4W36QfUaoGM5v9XU3lYDzKxnRq5vVNHEbrqkZ
Fsn/c4Z6ZhIurTgxNOF+QrIgqgfqfdCPn6DleZsq1MR4dwFeqsDNGyjsn60CY+JI
d4XtLsW4zHEp5WyXN3v4xfD+MuqCwokNtzRi1070FEQeYn0oNm+ge9T3ThxmLSLN
3baqYwrAq++nIBdiRbsHDVwGFY2xKYK5AvP8PneJJzzgNHRkp6xW7ENMCaN9AgMB
AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSAnZ/S90HNLG6s
qRvKjSlYJJSFbDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1Vm
N3FKMVFWcDhIZG9GN2I2VW5QUjI1QzdnZjNoemNCRk5FSDNkNDRDZG4vMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1Vm
N3FKMVFWcDhIZG9GN2I2VW5QUjI1QzdnZjNoemNCRk5FSDNkNDRDZG4vMS84MDlE
OUZEMkY3NDFDRDJDNkVBQ0E5MUJDQThEMjk1ODI0OTQ4NTZDLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB
Af8EJTAjMBIEAgABMAwDBAS67OADBAS9fBAwDQQCAAIwBwMFACgEKaAwGQYIKwYB
BQUHAQgBAf8ECjAIoAYwBAICbjswDQYJKoZIhvcNAQELBQADggEBANMkLOpW3Yn7
zF8Hyqzv32K/6BzAqort99p9/vyoMa38dCgYk7VtWq811e1mDNHokqqaBAq/C1or
ztkGtMXBZWaPLKTV2AA3MYXVNbgtAnQHyBXbIOXplRWCGrJFcqhS0m8xuhBZui+H
Esj/hfBIgSqYkJLT4hPI6GHTq8znYQVSr8GDMoqGru2rh6ymb4KVCgA7ESFLKYIV
yixDjb2BycDwTqiaX4Xm//JXS142fbjf24ce+6CFdHOpQOaUD6ZmnGZBTd7Xrt9D
/9H7OzIokuEsmb9c9QBzT/5HSxNmme1HXQSoQupJfXS3AQbN8sIq2XjjPx7mPJ5G
r0aCdbBI9J4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:32:51 2026 by rpki-client