
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
File: B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer (raw, json)
Hash identifier: JF74xJ/iG+QV6S+A27N5bcc29xd68b4/86xfg2kPmTc=
Subject key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 132C836EBC8F59282622B7783D7C24C85604141F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
caRepository: rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Feb 2026 18:45:03 +0000
Certificate not after: Wed 03 Feb 2027 18:50:03 +0000
Subordinate resources: AS: 28292
IP: 177.54.48.0/20
IP: 179.127.80.0/20
IP: 189.28.176.0/20
IP: 189.124.112.0/20
IP: 2001:12a0::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 09:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:2c:83:6e:bc:8f:59:28:26:22:b7:78:3d:7c:24:c8:56:04:14:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 4 18:45:03 2026 GMT
Not After : Feb 3 18:50:03 2027 GMT
Subject: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:f2:4a:d7:df:1d:96:49:53:09:a9:89:4d:
81:76:c0:2e:bb:33:08:00:23:8a:f4:50:89:50:03:
c3:a2:fa:e4:b3:ed:87:03:12:14:ca:b4:33:94:85:
56:9b:1f:e3:6a:d9:20:dd:62:b8:e9:03:ab:29:1d:
2d:67:85:01:63:67:c1:b3:f6:35:51:dd:97:f5:d4:
f1:23:95:4a:17:bf:fc:92:98:f0:2d:ce:dd:ec:1c:
7a:d1:fb:5c:b8:56:e6:c8:6f:86:2a:27:f2:52:4c:
b5:2c:04:83:eb:7b:fa:bb:8f:6a:46:7f:f6:8f:95:
3e:4a:a6:97:4d:a3:89:36:90:a9:4d:3d:a7:47:1b:
33:6f:77:ef:8f:21:c9:0f:11:64:9d:45:d3:4d:79:
7d:24:71:34:2c:8a:07:29:e8:81:74:a1:36:32:e6:
b3:f6:50:69:f7:12:11:a4:87:83:d2:48:76:4b:6c:
7b:0a:7e:c9:9b:a0:79:33:9a:c0:33:a8:67:5d:61:
51:03:25:59:72:79:97:64:87:c3:48:a1:ec:f5:28:
7f:0c:71:12:d8:f6:2e:a5:57:da:f9:f5:6c:3a:38:
1e:bd:58:0d:0a:00:ca:8a:c5:af:23:1c:89:b7:72:
6b:24:4a:09:3b:bc:a4:34:a2:96:65:b0:19:5c:c6:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.54.48.0/20
179.127.80.0/20
189.28.176.0/20
189.124.112.0/20
IPv6:
2001:12a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28292
Signature Algorithm: sha256WithRSAEncryption
89:c7:03:7e:bd:9d:f2:42:e0:73:57:2b:5f:47:91:26:ec:7f:
32:05:f5:1f:c8:cb:b5:64:31:26:b8:92:2a:e7:93:06:25:99:
13:e7:07:e7:f6:d3:39:b7:60:bc:c2:ba:99:7b:ca:63:08:a0:
92:2e:7b:22:7c:8c:31:ee:e1:ef:c4:66:4a:b6:91:24:f3:92:
aa:42:c5:e6:4d:bc:14:41:05:da:b1:f5:33:3c:c3:08:eb:0a:
ba:73:fa:4b:0b:4d:0a:61:f1:eb:cb:0f:a5:47:27:6e:ed:be:
f0:11:6f:c7:8a:16:52:4a:84:7e:c2:a0:6a:43:43:c2:77:f2:
80:79:1e:bb:a4:14:02:14:47:8e:a9:eb:a0:8c:04:59:77:fb:
26:31:f3:ac:46:b1:f5:e8:40:f1:ca:7d:ad:7e:f4:52:31:56:
60:fb:67:40:13:35:7a:2e:2d:77:b4:68:97:ff:6c:e6:2d:98:
2e:15:fe:d3:e3:38:b2:78:22:ac:9b:a5:e8:e9:9f:58:36:3f:
b0:c6:42:bf:62:da:f4:da:4c:9a:e9:77:92:e0:02:3a:f5:f1:
5e:4c:1a:12:4c:0b:0e:68:cf:24:1f:88:df:7f:c7:86:bc:2d:
9e:26:e9:5a:6a:8f:05:31:85:da:73:ae:ed:14:75:7f:ab:39:
d4:7e:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:18:48 2026 by rpki-client