Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
File: BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer (raw, json)
Hash identifier: c20X8Jk4PzEU0G+XnaRpP8VCdZz3Clr1W7WKkz8uZ6U=
Subject key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3D42E2D48220E2122E2B53E964CF787EEC81E741
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
caRepository: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Feb 2026 12:16:32 +0000
Certificate not after: Wed 03 Feb 2027 12:21:32 +0000
Subordinate resources: AS: 28220
IP: 45.4.64.0/22
IP: 45.175.188.0/22
IP: 45.232.88.0/22
IP: 45.238.116.0/22
IP: 131.108.228.0/22
IP: 131.196.76.0/22
IP: 131.221.68.0/22
IP: 138.0.100.0/22
IP: 138.117.124.0/22
IP: 138.121.220.0/22
IP: 138.122.236.0/22
IP: 138.255.216.0/22
IP: 143.255.112.0/22
IP: 160.238.220.0/22
IP: 168.121.52.0/22
IP: 168.121.148.0/22
IP: 168.227.44.0/22
IP: 168.227.108.0/22
IP: 168.228.68.0/22
IP: 168.228.128.0/22
IP: 168.232.116.0/22
IP: 170.0.204.0/22
IP: 170.82.92.0/22
IP: 170.82.132.0/22
IP: 170.245.100.0/22
IP: 170.246.68.0/22
IP: 170.247.52.0/22
IP: 177.8.48.0/21
IP: 177.53.128.0/21
IP: 177.55.48.0/20
IP: 177.66.64.0/21
IP: 177.67.0.0/21
IP: 177.70.128.0/20
IP: 177.75.192.0/19
IP: 177.87.144.0/21
IP: 177.89.0.0/16
IP: 177.125.184.0/21
IP: 177.130.192.0/19
IP: 177.137.192.0/20
IP: 179.96.192.0/21
IP: 179.96.240.0/20
IP: 179.190.128.0/17
IP: 179.191.128.0/19
IP: 186.192.16.0/20
IP: 186.193.96.0/20
IP: 186.208.208.0/21
IP: 186.219.144.0/20
IP: 186.233.72.0/21
IP: 186.235.0.0/20
IP: 186.236.192.0/19
IP: 186.251.112.0/21
IP: 187.18.128.0/17
IP: 187.45.48.0/20
IP: 187.49.192.0/20
IP: 187.60.64.0/19
IP: 187.61.128.0/17
IP: 187.73.192.0/19
IP: 187.86.96.0/20
IP: 187.87.112.0/20
IP: 187.95.48.0/20
IP: 187.95.176.0/20
IP: 187.108.64.0/20
IP: 187.108.96.0/20
IP: 187.109.176.0/20
IP: 187.110.208.0/20
IP: 187.111.224.0/19
IP: 189.45.16.0/20
IP: 189.45.64.0/18
IP: 189.50.144.0/20
IP: 189.124.128.0/17
IP: 191.6.80.0/21
IP: 191.37.144.0/21
IP: 191.241.40.0/21
IP: 192.141.196.0/22
IP: 200.9.160.0/22
IP: 200.94.240.0/22
IP: 200.233.80.0/20
IP: 201.148.188.0/22
IP: 201.149.120.0/22
IP: 201.158.40.0/21
IP: 2804:54::/32
IP: 2804:880::/32
IP: 2804:a3c::/32
IP: 2804:fec::/32
IP: 2804:1d2c::/32
IP: 2804:2140::/32
IP: 2804:4f60::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 01:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:42:e2:d4:82:20:e2:12:2e:2b:53:e9:64:cf:78:7e:ec:81:e7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 4 12:16:32 2026 GMT
Not After : Feb 3 12:21:32 2027 GMT
Subject: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:20:e5:96:7f:80:49:4a:2f:0a:d2:a1:77:81:
e2:9d:13:70:15:d2:2a:72:2c:8a:dd:c6:9f:7b:d2:
f4:7c:88:e2:1b:c7:ee:95:12:2e:47:6b:00:c0:62:
ee:fe:2a:cf:28:91:51:c0:18:6d:9c:68:04:f0:7a:
4e:7a:26:81:54:49:e4:e7:93:9b:72:67:75:a0:c3:
ab:37:23:a4:40:a0:c6:02:46:7b:74:e9:cd:9e:50:
33:a9:ee:11:28:fa:ce:2c:1e:93:78:99:e9:eb:0b:
96:db:69:f4:ef:d0:21:3f:f8:7d:40:fc:4c:6e:41:
a4:a4:87:18:f0:53:06:52:ad:2b:f9:bf:b4:87:67:
5e:90:d7:30:ed:82:ad:a0:14:d0:4f:c6:2a:24:70:
c5:be:57:03:8f:8b:02:c9:b5:c1:78:34:4c:57:02:
90:c0:25:85:1b:7c:8b:9e:61:59:4d:64:01:19:7e:
38:94:b0:b9:a6:bc:09:7a:6c:0f:54:f5:6e:31:0f:
22:91:fb:cf:52:67:ce:af:0e:57:6c:39:64:c0:b7:
d8:20:6d:a5:da:e0:2b:24:04:cc:c3:8d:0e:e2:ca:
33:82:74:8c:0b:62:3a:e5:87:65:87:6c:54:e5:17:
fd:ad:d3:98:a0:48:c0:42:d6:7c:9a:a8:51:c5:b1:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.64.0/22
45.175.188.0/22
45.232.88.0/22
45.238.116.0/22
131.108.228.0/22
131.196.76.0/22
131.221.68.0/22
138.0.100.0/22
138.117.124.0/22
138.121.220.0/22
138.122.236.0/22
138.255.216.0/22
143.255.112.0/22
160.238.220.0/22
168.121.52.0/22
168.121.148.0/22
168.227.44.0/22
168.227.108.0/22
168.228.68.0/22
168.228.128.0/22
168.232.116.0/22
170.0.204.0/22
170.82.92.0/22
170.82.132.0/22
170.245.100.0/22
170.246.68.0/22
170.247.52.0/22
177.8.48.0/21
177.53.128.0/21
177.55.48.0/20
177.66.64.0/21
177.67.0.0/21
177.70.128.0/20
177.75.192.0/19
177.87.144.0/21
177.89.0.0/16
177.125.184.0/21
177.130.192.0/19
177.137.192.0/20
179.96.192.0/21
179.96.240.0/20
179.190.128.0/17
179.191.128.0/19
186.192.16.0/20
186.193.96.0/20
186.208.208.0/21
186.219.144.0/20
186.233.72.0/21
186.235.0.0/20
186.236.192.0/19
186.251.112.0/21
187.18.128.0/17
187.45.48.0/20
187.49.192.0/20
187.60.64.0/19
187.61.128.0/17
187.73.192.0/19
187.86.96.0/20
187.87.112.0/20
187.95.48.0/20
187.95.176.0/20
187.108.64.0/20
187.108.96.0/20
187.109.176.0/20
187.110.208.0/20
187.111.224.0/19
189.45.16.0/20
189.45.64.0/18
189.50.144.0/20
189.124.128.0/17
191.6.80.0/21
191.37.144.0/21
191.241.40.0/21
192.141.196.0/22
200.9.160.0/22
200.94.240.0/22
200.233.80.0/20
201.148.188.0/22
201.149.120.0/22
201.158.40.0/21
IPv6:
2804:54::/32
2804:880::/32
2804:a3c::/32
2804:fec::/32
2804:1d2c::/32
2804:2140::/32
2804:4f60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28220
Signature Algorithm: sha256WithRSAEncryption
a1:28:f5:be:e6:c3:a6:c0:d4:26:74:8d:73:d3:ea:65:6d:f8:
93:61:bb:ed:74:ec:3b:78:16:89:07:a7:9d:97:c7:9f:31:a6:
00:15:36:76:ab:00:61:66:3f:bd:fc:0b:ff:05:07:18:74:4a:
ca:be:d5:e8:95:7f:23:5b:da:a0:e6:92:b5:42:98:39:4c:f8:
04:26:be:9e:f1:14:97:04:f5:de:75:a2:99:2b:e8:64:8f:d0:
bf:cc:13:50:6f:7e:a7:29:3f:97:f5:37:76:07:bc:ca:8f:fb:
47:43:10:48:9f:8c:5c:ec:1a:3d:1a:3c:79:a8:39:27:04:7b:
99:f1:04:f4:47:fc:0d:6a:04:fe:c3:4e:63:0d:80:29:ad:7b:
b0:80:33:7a:ff:28:63:27:0c:10:d4:98:b4:3a:36:a4:23:8b:
ab:50:b4:39:20:87:8f:20:3d:81:f0:0b:e6:e2:0f:05:1f:62:
61:47:5a:39:35:b0:33:6b:e8:ae:aa:9c:ee:3c:12:bf:e0:a1:
34:b7:e9:49:4d:33:4b:89:16:06:5f:2e:cb:35:a0:10:3b:85:
85:7e:98:9d:80:17:f1:15:d5:ba:f4:5c:23:d0:62:d5:d0:fc:
3e:13:35:9b:b6:fa:da:51:3a:a9:e6:bc:36:0a:d6:2b:cd:1f:
67:3b:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:59:08 2026 by rpki-client