
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
File: B87E403FD04360E1BA519D841853FF5C9E675A23.cer (raw, json)
Hash identifier: gPpxWDap/bwf4uxM2TJeWYd7rTsgXqJAMdReC6VPg3I=
Subject key identifier: B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 51C495E4491D1E0AAF66E5DFDC2AB3125AAA5AD6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
caRepository: rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Feb 2026 18:45:03 +0000
Certificate not after: Wed 03 Feb 2027 18:50:03 +0000
Subordinate resources: AS: 53175
IP: 168.90.120.0/22
IP: 186.225.224.0/19
IP: 2804:1ac::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 12:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c4:95:e4:49:1d:1e:0a:af:66:e5:df:dc:2a:b3:12:5a:aa:5a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 4 18:45:03 2026 GMT
Not After : Feb 3 18:50:03 2027 GMT
Subject: CN=B87E403FD04360E1BA519D841853FF5C9E675A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:80:df:9f:53:58:0c:af:7d:a0:3e:40:b5:
c1:6c:22:54:bd:44:b0:1b:8e:bc:ed:a8:15:43:a3:
a6:a8:e6:90:70:33:96:d1:a7:68:5d:37:e2:17:be:
2e:c3:6d:fc:9a:fc:0d:fb:73:a4:ee:0a:91:f5:09:
47:7a:5c:7a:1d:98:72:17:4d:bd:59:22:1e:e5:90:
c7:0c:5b:9e:ba:06:28:02:c1:96:92:74:67:60:b9:
08:93:47:13:8f:59:a5:72:17:6c:d7:35:d0:ba:1b:
05:24:ac:d3:3b:9e:01:12:9d:7c:fa:a1:e9:95:dd:
19:fa:32:e0:b4:a8:41:f1:a5:2f:79:0e:6e:5f:3f:
01:f4:42:f8:19:92:ca:d9:ff:d7:a4:70:7f:5c:0e:
11:00:43:39:57:39:2a:e9:c1:c1:8e:d3:97:83:92:
86:96:12:d1:96:c8:1f:f7:0e:b5:74:b9:a3:5c:67:
4f:c9:73:59:e6:17:25:f2:97:1a:90:32:0f:34:7d:
dc:fe:64:24:e7:83:07:b4:3b:d9:fe:39:57:fa:43:
71:b9:9e:f2:fe:75:96:0e:c6:57:57:b7:83:44:15:
75:e9:3a:55:24:11:37:7c:95:ae:aa:aa:3b:c5:bc:
fd:af:28:77:30:49:e0:34:c6:c6:f3:a2:d3:6d:a3:
3b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.120.0/22
186.225.224.0/19
IPv6:
2804:1ac::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53175
Signature Algorithm: sha256WithRSAEncryption
48:f1:1b:6f:23:41:70:3c:04:0c:ca:c6:7a:21:c2:25:00:dd:
00:d4:34:1a:ca:9d:36:e9:7b:2f:1e:65:08:b9:a9:b6:2d:c5:
0a:15:45:07:88:59:3b:e1:28:7f:67:c5:d0:20:09:32:d7:a6:
2c:25:54:30:fe:b4:0e:f0:db:2f:a2:12:e7:80:24:10:55:28:
d2:d9:ce:37:e6:b5:f9:3b:93:2c:79:7f:12:7f:91:c3:a9:96:
57:ee:ec:bf:cc:a4:de:d9:23:dd:ce:61:33:01:93:1a:8f:60:
ba:3c:84:a7:4f:c6:9f:e3:0d:02:c5:8b:1d:1b:2e:2b:8f:dc:
61:45:7c:d7:63:bb:0c:d6:d9:83:c9:85:6e:3e:82:b4:48:2b:
cf:10:fe:9a:96:46:e7:7f:f9:08:fe:c7:b0:8f:81:5d:a1:18:
fb:0b:ae:37:3e:68:a6:23:49:8f:90:20:8d:60:fa:7e:43:9c:
2a:80:76:74:df:74:58:c7:a0:e5:af:bd:e5:f2:72:5c:c4:d2:
60:77:0c:8b:7c:d0:18:bb:97:ed:b6:2c:d7:44:1f:50:81:1e:
7a:d3:a3:cf:60:91:da:10:f3:a3:d9:a5:82:d0:7f:95:5f:5d:
75:b2:a5:67:67:1e:88:d8:b6:71:14:e2:af:d3:89:63:2e:02:
51:53:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:25 2026 by rpki-client