
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
File: 8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer (raw, json)
Hash identifier: 5Epm/YU0rliXXjHo1Y4FUfT/jiakbqvi2nKW+e5/07M=
Subject key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 02E803421FB83DE254A30AB7E2F03661E7A7A356
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
caRepository: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 06 Feb 2026 00:05:58 +0000
Certificate not after: Fri 05 Feb 2027 00:10:58 +0000
Subordinate resources: AS: 28639
IP: 177.129.68.0/22
IP: 191.6.232.0/21
IP: 2804:dd0::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 05:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e8:03:42:1f:b8:3d:e2:54:a3:0a:b7:e2:f0:36:61:e7:a7:a3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 6 00:05:58 2026 GMT
Not After : Feb 5 00:10:58 2027 GMT
Subject: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:fd:24:e4:ff:84:4d:53:86:8a:ac:3f:2c:
57:67:45:3e:01:de:ab:5a:6e:63:b6:2f:e2:16:66:
cd:bb:ef:36:fa:76:f5:eb:9b:90:49:cd:bd:4b:e5:
7d:a6:fe:56:f3:87:c2:04:b8:c1:12:a5:5c:a4:29:
f7:6c:8f:43:5b:a7:d7:d8:24:04:c0:53:4d:7c:b1:
82:41:c9:cf:bc:70:6d:d1:54:30:ae:c7:b4:16:22:
de:65:94:3c:72:95:b5:47:98:c3:3c:c7:e4:53:81:
f6:56:6f:43:09:74:fe:19:f6:3b:d1:a5:32:36:e9:
72:32:48:3d:90:e5:f2:a3:4a:2f:f3:af:7c:17:f6:
4d:ff:48:13:45:28:1a:63:75:77:d1:d4:82:df:22:
dd:33:9b:08:40:0a:02:9c:56:18:f5:c9:6d:2f:54:
f2:20:b7:1e:e0:34:3c:87:e8:cd:3c:ae:24:fb:b8:
8e:e5:f2:da:eb:48:3d:a1:04:8c:e0:0f:61:38:58:
20:b1:c3:90:ea:f7:0a:e4:b1:95:cb:c6:eb:82:27:
d3:02:ee:57:56:3a:aa:e8:00:9b:f8:3b:c0:cc:44:
66:b1:b0:fb:bf:8c:21:3f:23:ba:d2:9c:ff:ae:91:
3c:09:6c:3f:f3:8f:8a:68:b4:79:19:1c:f3:95:ec:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.68.0/22
191.6.232.0/21
IPv6:
2804:dd0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28639
Signature Algorithm: sha256WithRSAEncryption
66:79:70:a3:4e:82:19:aa:c8:76:3e:a7:61:00:4c:11:d1:0a:
7b:80:d9:a7:e1:1b:50:36:cc:11:e5:ba:c0:2e:cb:b7:94:76:
08:f3:da:9e:ee:bc:84:80:27:6f:f2:4e:34:61:f7:12:d7:d9:
08:d0:50:c0:3c:35:f2:0e:f4:5c:17:23:28:ee:ee:c8:cb:11:
d4:00:56:d0:d5:98:03:22:d4:b1:44:cf:fd:c9:88:13:20:d1:
1f:df:09:90:3a:fb:b2:2a:1c:30:b4:0a:7b:f3:95:98:6a:bc:
e7:0d:fe:e7:40:eb:29:c8:96:1a:75:ad:17:b2:b9:09:c4:7d:
48:d0:64:61:8f:f7:3d:3f:c8:64:eb:61:37:94:ae:54:1c:14:
86:20:29:5e:7a:4d:f7:50:44:8b:c5:02:9b:99:0f:2a:d2:46:
b7:af:a9:dc:74:47:d9:26:59:9d:cc:e1:f9:11:9c:a1:d1:4d:
40:39:40:89:be:b8:39:d3:eb:b4:03:67:56:bc:4d:14:8f:d7:
d3:b3:f3:75:05:ea:50:ac:97:d0:6c:d2:28:35:77:dc:7d:22:
6a:c5:e1:e5:ca:c3:a8:a0:d6:b2:a2:2b:f1:b6:77:8b:2f:15:
a8:d5:6b:a4:e4:34:92:c4:71:f6:f7:92:15:1d:c8:b6:65:af:
b5:e7:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:19:16 2026 by rpki-client