
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
File: D23AEA3BF9686D794967BECAC226FA9648876870.cer (raw, json)
Hash identifier: juGv14dkWN8bjGrZVT/wD2qxDP3b0mKXp3wPVKbdD3Q=
Subject key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 06AF0E2DCB62107E39428AB0EDF10916A403CF89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
caRepository: rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 02 Apr 2026 06:06:16 +0000
Certificate not after: Thu 01 Apr 2027 06:11:16 +0000
Subordinate resources: AS: 270437
IP: 200.11.104.0/22
IP: 2804:6bf8::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:af:0e:2d:cb:62:10:7e:39:42:8a:b0:ed:f1:09:16:a4:03:cf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 2 06:06:16 2026 GMT
Not After : Apr 1 06:11:16 2027 GMT
Subject: CN=D23AEA3BF9686D794967BECAC226FA9648876870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6e:75:46:c2:d3:70:6b:48:42:5c:c2:46:96:
bf:72:43:48:3b:0c:3f:af:23:a9:6e:42:07:93:0f:
95:80:46:38:80:0a:ff:50:13:7c:21:ed:48:14:a5:
8c:4b:19:fb:e5:4f:10:bb:32:e3:33:ec:c6:ee:ff:
59:4f:90:1f:ee:7a:4d:87:58:d9:c5:6e:4e:67:40:
45:98:37:75:05:27:10:d9:2f:d1:5a:3c:f5:0a:4a:
28:31:e8:8f:ee:5c:e0:d6:d2:97:ef:f3:cd:25:c4:
6c:2d:62:76:6b:df:33:e1:11:00:ff:31:6c:48:d6:
55:96:2b:80:16:ea:50:be:d8:59:37:73:3b:45:2f:
69:2f:42:ad:36:fc:46:34:da:38:c8:6d:41:6e:34:
f4:24:3b:d4:f9:5f:43:8b:e1:0e:98:33:29:70:ed:
67:c3:90:5a:da:d0:9f:8f:ea:82:07:60:bb:2f:79:
46:c3:09:41:5c:6b:c7:03:a2:a1:b5:f9:ba:15:6f:
a2:66:61:bb:42:c5:52:1a:f1:9c:13:74:da:80:db:
47:4c:77:59:57:a2:2a:7d:5a:89:39:09:3f:65:80:
70:32:fd:fc:ed:00:0b:9f:9e:3e:1f:f2:be:ec:fe:
bf:f4:b6:50:d9:cf:a8:2a:81:19:8f:34:01:ac:b1:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.11.104.0/22
IPv6:
2804:6bf8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270437
Signature Algorithm: sha256WithRSAEncryption
66:6e:0b:b2:af:97:ec:ef:8a:ab:c7:f7:07:34:8e:5e:2e:6c:
4e:13:55:a7:29:a4:81:9d:b2:2d:c6:56:d3:f2:69:dd:14:10:
a7:71:28:f3:25:d8:e9:60:ac:89:7a:c6:50:36:f9:94:f0:e1:
b3:99:11:4d:0e:b2:da:6f:ee:8c:6e:31:92:e6:02:00:0c:01:
1e:dc:4b:e3:e2:30:f9:d0:4a:c5:7f:ad:50:31:70:d9:84:73:
be:6b:43:00:4b:fa:66:b7:38:e0:85:7e:ee:02:b9:d2:42:d3:
cb:d4:2a:a8:3d:8a:0d:b6:58:97:a8:75:89:5d:dd:6b:fb:84:
7a:5b:cb:9d:9d:64:1b:b8:97:e8:ef:bc:c1:99:72:a5:24:c2:
ce:81:af:f7:56:7c:ab:7f:03:39:c0:2a:83:c3:62:3b:5e:82:
91:98:26:88:d5:1a:e1:b7:ea:be:b3:2d:52:fd:33:38:a7:85:
b1:63:8f:01:4d:0c:a4:16:d0:7c:3f:59:5b:32:e3:23:07:ca:
9d:7d:e8:10:64:db:46:07:84:22:49:71:90:0e:57:2e:4a:f1:
28:39:46:e3:32:d2:ab:b5:bd:83:a4:4a:5d:92:37:2b:dc:e7:
a2:d2:95:8c:02:e6:76:e3:72:ae:0d:13:25:0c:97:68:40:4d:
a2:db:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:12:59 2026 by rpki-client