
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer
File: CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer (raw, json)
Hash identifier: LrvYSGIcZ/Hu/ZZZoOGBkbyh7ZX/CAnl+9ZTGNQSaEM=
Subject key identifier: CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 756FE01AE0AE5C5CC26FD466E6CF70DC4874E0F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft
caRepository: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 09 Feb 2026 21:14:49 +0000
Certificate not after: Mon 08 Feb 2027 21:19:49 +0000
Subordinate resources: AS: 61613
IP: 45.171.60.0/22
IP: 200.192.152.0/22
IP: 2804:5964::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 04:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6f:e0:1a:e0:ae:5c:5c:c2:6f:d4:66:e6:cf:70:dc:48:74:e0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 9 21:14:49 2026 GMT
Not After : Feb 8 21:19:49 2027 GMT
Subject: CN=CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b0:7b:0f:3c:51:a7:e2:28:07:d4:f7:fe:76:
6c:63:99:c8:53:52:61:5d:6f:d1:db:5e:1c:bf:32:
28:c5:b0:36:dd:65:1a:d2:03:63:d3:e5:2a:fc:43:
3d:ce:42:4d:a3:53:2e:98:e0:89:8f:01:c2:5f:c5:
25:5c:67:4f:d2:58:9b:a8:f2:ba:81:b4:c0:9a:42:
c0:2f:b0:61:e3:a6:36:e6:de:03:95:e1:7f:4f:77:
16:cd:bb:03:d8:cf:c8:4c:7a:7f:84:0c:18:ef:4d:
07:77:fa:c5:d0:a1:50:a0:53:36:74:e0:43:4d:69:
94:f2:65:63:09:fa:00:51:4e:fd:33:bf:3b:55:75:
9f:30:41:4e:56:27:cb:0a:db:dd:63:66:04:4f:de:
72:89:1e:03:cc:af:3b:5a:93:23:71:0f:9c:30:32:
ae:63:b4:8b:10:3e:85:dd:0c:94:c7:1b:50:6f:b0:
57:2c:2f:08:27:e5:23:f6:72:f9:e9:3e:08:bd:f6:
c2:cb:b2:d1:28:58:03:69:84:56:69:4f:28:7a:73:
3d:79:41:8d:b4:f3:5b:7b:ec:18:98:0e:e5:77:d1:
7f:78:a7:cb:51:0f:5b:d6:f4:10:6e:27:13:b2:d9:
9f:89:0e:04:01:3d:43:6b:b2:1e:a1:e1:ae:01:cb:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.60.0/22
200.192.152.0/22
IPv6:
2804:5964::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61613
Signature Algorithm: sha256WithRSAEncryption
91:08:fe:83:19:1f:5e:04:9e:77:cf:7a:cc:d8:55:5a:0c:f2:
47:17:78:3c:a7:4e:32:90:e4:ab:f5:2a:ee:5e:9a:5b:55:e7:
eb:a6:77:e0:2d:c1:e0:73:3c:c1:a2:9f:58:f7:e1:69:62:8d:
2d:5c:02:06:02:83:d3:e1:eb:46:91:ee:02:ca:8e:6a:b9:c8:
ca:af:2c:d9:4c:98:09:ce:9d:86:2a:bf:6d:ae:2f:0f:00:17:
5b:14:08:59:e0:a3:4c:39:24:a1:6d:39:b6:0e:54:4e:90:50:
3b:e8:bc:21:2d:94:57:36:d7:2a:e4:25:b8:ad:5f:95:fb:c4:
f3:cb:5b:23:76:2a:a3:1c:45:0e:6d:d3:7c:26:08:d2:3b:0b:
1d:61:6d:05:bf:af:85:1a:a1:0d:7e:2f:48:00:34:b4:4e:9e:
d6:14:2f:87:2a:41:69:e6:82:e6:3a:7e:88:01:7e:e9:b0:51:
bc:d1:3f:a7:c8:54:6a:67:51:1e:10:5b:2f:4e:f5:e2:c7:ae:
da:6a:7f:29:1c:bd:ce:66:0d:09:d6:df:99:07:c8:40:15:13:
4c:0a:49:2c:c3:ec:1d:38:bb:35:59:a4:91:84:9a:1e:99:c7:
55:6c:fc:4e:51:df:9d:9b:17:37:16:79:b9:86:d0:51:4f:b6:
fc:b8:a4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:19:19 2026 by rpki-client