
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer
File: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer (raw, json)
Hash identifier: GgghMGghV5WGHwlnO+STbjxvwaq262AyVXf8VfdxVmo=
Subject key identifier: 9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5DDC5411CE958A9941493C9662E4AC66132E77A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft
caRepository: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 06 Feb 2026 07:19:28 +0000
Certificate not after: Fri 05 Feb 2027 07:24:28 +0000
Subordinate resources: AS: 262474
IP: 177.53.168.0/21
IP: 177.154.20.0/22
IP: 2804:4dc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 04:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:dc:54:11:ce:95:8a:99:41:49:3c:96:62:e4:ac:66:13:2e:77:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 6 07:19:28 2026 GMT
Not After : Feb 5 07:24:28 2027 GMT
Subject: CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:ae:29:69:ac:e0:17:89:3c:15:fb:b4:24:
cd:9f:b6:9a:a6:b4:28:98:79:e4:dc:de:42:79:94:
3a:6e:f9:b3:2a:08:06:e3:8f:36:b2:02:47:41:38:
95:99:59:21:51:ce:c1:77:f0:89:15:e8:49:f5:a1:
8a:6b:31:67:ed:e5:a0:ea:af:76:d4:bc:a6:7e:27:
36:ea:11:8b:71:e6:88:19:58:3b:8d:b4:1d:d2:58:
8c:82:5f:2f:36:f3:ca:8b:28:55:26:d3:be:b8:11:
f2:90:85:c1:59:35:a6:14:07:dd:e5:60:68:ac:d7:
87:3e:57:0f:92:89:6e:d4:8d:35:fa:47:ea:ae:1e:
4c:9a:32:ac:4d:09:d8:9a:4e:e7:1b:36:cf:92:b6:
e0:1e:9d:5d:28:e1:8f:c9:c1:5e:f4:a9:90:81:35:
95:52:c6:ea:5d:2d:7b:37:e4:b4:5e:5e:14:eb:d5:
da:ba:7d:3e:e1:18:79:c0:bf:a7:88:8d:35:c9:8d:
18:74:4f:76:64:3b:5c:58:5e:29:45:df:eb:af:8f:
95:60:ec:8c:b4:26:1c:c2:11:d1:6a:20:2e:14:f8:
51:fb:49:af:ee:30:00:a1:38:43:96:3e:f4:e3:63:
39:56:e9:8e:f5:61:2d:52:f9:62:4b:e1:09:54:1d:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.53.168.0/21
177.154.20.0/22
IPv6:
2804:4dc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262474
Signature Algorithm: sha256WithRSAEncryption
9c:4a:77:ab:94:d6:b1:90:fb:f0:ab:34:30:52:ec:7c:74:ad:
6f:43:6e:fd:79:37:9b:53:a1:f4:2a:27:71:1c:bc:2f:61:42:
30:45:3a:1d:40:99:be:75:49:52:2d:b3:18:87:a3:b8:2d:0c:
37:ed:5c:8f:ac:37:52:42:fb:0e:1f:bc:6b:85:4f:05:2e:0e:
02:44:b4:97:75:ea:f1:59:17:2a:b4:f0:00:50:25:27:9f:07:
e6:2c:e3:26:9c:39:1a:51:7c:c6:91:0f:71:86:6b:f9:77:61:
df:e8:f3:bc:4e:09:b6:bd:5f:00:62:54:02:49:85:06:93:7d:
93:77:a1:4a:2f:11:4c:ee:cb:f9:86:85:48:2f:1c:85:90:8f:
b9:1c:00:40:62:d5:42:98:4c:1d:e7:e4:1c:46:13:6e:4c:95:
a7:bf:8b:c8:cb:3d:5a:10:53:19:a6:f1:e1:f1:b5:2a:21:93:
c8:36:fd:1a:a4:d1:dc:e1:29:68:76:b4:33:a1:45:eb:20:d6:
92:ce:8b:0f:3a:5a:55:c4:05:c7:da:1c:a5:e2:b0:98:2d:6e:
86:50:1c:d9:20:af:0d:92:93:4b:58:ec:48:32:ff:ec:5a:66:
d0:3d:fb:23:0c:b9:55:2e:3d:70:7e:e2:dd:22:61:80:bd:45:
db:3f:1f:8a
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUXdxUEc6ViplBSTyWYuSsZhMud6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAyMDYwNzE5MjhaFw0yNzAyMDUwNzI0MjhaMDMxMTAvBgNV
BAMTKDlBODgyODdGMERBNjdDNzRDQzI0MzAxMzhDOUU2OTlBOEQ5QkMzMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMq4paazgF4k8Ffu0JM2ftpqm
tCiYeeTc3kJ5lDpu+bMqCAbjjzayAkdBOJWZWSFRzsF38IkV6En1oYprMWft5aDq
r3bUvKZ+JzbqEYtx5ogZWDuNtB3SWIyCXy8288qLKFUm0764EfKQhcFZNaYUB93l
YGis14c+Vw+SiW7UjTX6R+quHkyaMqxNCdiaTucbNs+StuAenV0o4Y/JwV70qZCB
NZVSxupdLXs35LReXhTr1dq6fT7hGHnAv6eIjTXJjRh0T3ZkO1xYXilF3+uvj5Vg
7Iy0JhzCEdFqIC4U+FH7Sa/uMAChOEOWPvTjYzlW6Y71YS1S+WJL4QlUHWNFAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSaiCh/DaZ8dMwk
MBOMnmmajZvDDDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMld3
dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtDeFQvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMld3
dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtDeFQvMS85QTg4
Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB
Af8EJTAjMBIEAgABMAwDBAOxNagDBAKxmhQwDQQCAAIwBwMFACgEBNwwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDBAFKMA0GCSqGSIb3DQEBCwUAA4IBAQCcSnerlNax
kPvwqzQwUux8dK1vQ279eTebU6H0KidxHLwvYUIwRTodQJm+dUlSLbMYh6O4LQw3
7VyPrDdSQvsOH7xrhU8FLg4CRLSXderxWRcqtPAAUCUnnwfmLOMmnDkaUXzGkQ9x
hmv5d2Hf6PO8Tgm2vV8AYlQCSYUGk32Td6FKLxFM7sv5hoVILxyFkI+5HABAYtVC
mEwd5+QcRhNuTJWnv4vIyz1aEFMZpvHh8bUqIZPINv0apNHc4SlodrQzoUXrINaS
zosPOlpVxAXH2hyl4rCYLW6GUBzZIK8NkpNLWOxIMv/sWmbQPfsjDLlVLj1wfuLd
ImGAvUXbPx+K
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:05 2026 by rpki-client