
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D196CBB7864C30EC3736D079A81944C128A22071.cer
File: D196CBB7864C30EC3736D079A81944C128A22071.cer (raw, json)
Hash identifier: +vbhRx7OaZWGzTO5XiE/oQyFs8pb8E124K5soaxFPkk=
Subject key identifier: D1:96:CB:B7:86:4C:30:EC:37:36:D0:79:A8:19:44:C1:28:A2:20:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 70F201918469112628B00067E7B4FC9E1A385021
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/D196CBB7864C30EC3736D079A81944C128A22071.mft
caRepository: rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 26 Aug 2026 20:00:11 +0000
Certificate not after: Wed 25 Aug 2027 20:05:11 +0000
Subordinate resources: AS: 266506
IP: 170.244.180.0/22
IP: 2804:38dc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 05 Sep 2026 07:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f2:01:91:84:69:11:26:28:b0:00:67:e7:b4:fc:9e:1a:38:50:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 26 20:00:11 2026 GMT
Not After : Aug 25 20:05:11 2027 GMT
Subject: CN=D196CBB7864C30EC3736D079A81944C128A22071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:35:8d:2b:9f:6d:14:12:f2:27:71:2b:38:
37:8f:7f:e2:20:16:a2:97:76:fc:ac:cd:80:3d:bd:
3b:68:86:df:96:53:21:cc:ef:57:aa:ed:62:17:f8:
70:d7:76:f3:06:6f:c8:ae:ec:34:55:a7:74:76:0c:
6f:0b:fd:85:4d:db:44:e1:54:e5:39:b2:7e:49:d1:
da:9e:2c:7c:0a:34:39:6a:c8:93:b2:ad:e7:78:18:
6d:9c:e4:9b:6b:e4:f5:71:d6:69:44:e3:2e:43:ac:
e8:f3:bd:8a:27:11:c4:32:c7:d8:3c:eb:75:b5:63:
ec:9b:6f:67:3e:fc:89:26:30:78:d6:06:cc:39:87:
31:3e:3f:04:2c:b1:2c:46:bf:a2:86:43:cf:4c:5a:
2b:42:d6:30:96:27:88:55:10:53:2b:c6:8b:92:d6:
c5:f6:c6:d4:6f:43:a3:3f:3e:62:c6:b7:76:24:9e:
ae:35:cc:21:46:99:c2:f5:eb:5b:f5:39:86:d1:c5:
8a:61:e9:33:a3:32:c9:63:d4:0e:e5:af:2f:54:35:
91:49:f9:2f:93:a9:ef:6f:d1:82:05:d3:6a:2a:ad:
65:1a:3a:26:9e:f9:f4:d2:a4:2f:a2:ac:c5:57:ef:
31:1e:f0:b2:50:d1:82:8c:74:82:3b:77:c0:86:d3:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D1:96:CB:B7:86:4C:30:EC:37:36:D0:79:A8:19:44:C1:28:A2:20:71
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/D196CBB7864C30EC3736D079A81944C128A22071.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.180.0/22
IPv6:
2804:38dc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266506
Signature Algorithm: sha256WithRSAEncryption
ba:56:30:36:f7:d4:c8:5f:32:c8:29:de:fa:55:a6:93:b4:33:
58:15:7f:01:e3:f9:d2:c3:ae:2b:66:6f:d2:73:2c:03:63:41:
67:07:f1:6b:15:58:c6:7a:49:74:78:79:2e:ea:65:6e:ed:d3:
13:80:1f:b6:55:83:3d:3b:4e:7d:3b:b5:3d:15:46:c6:5c:2c:
d6:4b:28:bf:da:91:50:ff:78:0a:92:62:27:d4:ac:50:a6:88:
26:9c:04:37:7a:96:6c:2c:54:00:1d:34:23:ce:f4:df:14:87:
c3:e3:91:f1:e1:c6:e0:e6:ae:32:c9:bd:18:14:43:44:1a:7f:
a9:ab:01:19:6f:6f:eb:cf:71:7b:6d:a5:bf:7d:f0:0f:5c:74:
d8:be:72:e0:c5:c9:df:15:b5:61:38:66:16:7d:92:76:99:41:
e7:17:ab:d1:97:f7:6b:35:18:1e:89:30:c0:fc:c6:e2:0d:e9:
56:9e:58:c5:7a:cb:46:54:15:c6:63:e7:22:2d:83:25:b2:2b:
a0:10:c6:81:da:b3:d1:eb:47:df:c9:4d:30:6e:ce:ae:de:0a:
be:f8:a8:6f:9e:d0:ed:0d:f3:d7:5d:c7:28:18:a5:fd:35:82:
78:38:f2:2c:51:d9:d2:d7:39:d5:9c:43:75:9e:04:0f:f5:dd:
a3:6c:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:52:25 2026 by rpki-client