
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
File: D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer (raw, json)
Hash identifier: VGlc7SCnFGsYIvckxiX7bnxUv7MwJRIPFHPRRtdkTvw=
Subject key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 40F7098ABECA84F35834EC88C0EFE5ED544915F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
caRepository: rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Feb 2026 11:41:36 +0000
Certificate not after: Wed 03 Feb 2027 11:46:36 +0000
Subordinate resources: AS: 52612
IP: 170.79.250.0/23
IP: 177.124.20.0/22
IP: 2804:22fc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 01:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f7:09:8a:be:ca:84:f3:58:34:ec:88:c0:ef:e5:ed:54:49:15:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 4 11:41:36 2026 GMT
Not After : Feb 3 11:46:36 2027 GMT
Subject: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:d4:34:16:09:a4:1b:3e:ec:0a:93:c9:29:
bd:12:96:27:39:a7:dd:f2:93:e0:d2:fe:cc:ea:8a:
23:37:6a:6c:8b:37:52:e8:56:0d:44:80:fb:d5:cb:
0e:c0:a2:21:04:2e:03:14:cc:60:32:7f:b9:17:0c:
7c:aa:88:11:90:01:d8:dc:64:87:03:cd:e9:a1:e2:
8c:50:09:f0:e5:3c:38:70:8e:bb:9e:12:34:ad:3d:
98:9a:e6:f8:58:81:d1:b0:48:f4:88:a5:49:42:c6:
1d:f9:af:21:cf:ad:62:8d:aa:d1:89:f6:48:21:77:
11:f9:d5:ea:d9:69:fb:d4:28:d4:de:90:e4:bb:f2:
4c:5e:a1:82:65:5f:03:5c:c5:58:f3:29:5e:f1:19:
07:29:f9:0a:d4:b2:92:ac:54:b7:30:9d:2c:f2:93:
cd:bf:53:3d:b5:ad:78:37:90:88:6c:68:81:3b:b0:
e2:8a:31:db:9b:2c:69:0c:b2:f0:73:7f:68:5a:1f:
d7:3e:89:c2:4b:16:6d:6d:82:17:02:b1:8b:51:bd:
67:d2:d9:38:59:5d:39:08:05:7b:8d:62:f5:af:51:
07:f7:8c:c8:5a:f3:53:a5:86:c7:aa:5b:7b:9d:59:
e9:bc:37:0d:eb:32:bd:d7:d3:31:e4:e7:81:c2:d5:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.250.0/23
177.124.20.0/22
IPv6:
2804:22fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52612
Signature Algorithm: sha256WithRSAEncryption
56:d6:81:b6:ee:90:83:b0:bf:ce:9f:bc:ec:67:e4:bd:43:1e:
6d:2e:44:80:fb:f5:a6:61:da:e9:95:40:b1:3a:3d:54:2f:b1:
d4:d9:67:0e:39:89:2c:09:53:0a:ca:72:d1:87:00:c2:47:dd:
fe:53:63:6e:61:9b:91:52:08:f4:d8:46:0e:90:e9:4f:0d:3e:
a3:ca:8d:0b:4d:62:ed:50:11:de:67:27:e1:e0:b5:27:e0:1c:
8e:1b:c2:62:e7:62:ab:ee:0e:9e:90:9d:4e:7d:ff:81:cb:63:
eb:c0:4d:92:d1:96:98:9e:a1:bb:ac:c4:43:dc:5f:a1:7b:20:
a2:0f:04:d8:54:e8:67:c4:65:33:05:68:b6:f5:2b:ac:0f:b5:
3f:17:17:a9:ac:ce:cd:c9:f3:63:d5:c9:8c:f8:87:fc:00:72:
42:3f:b3:14:30:86:ed:68:ff:f1:dc:05:19:66:3a:89:7e:c7:
76:c1:f1:9f:5f:60:50:42:6a:32:af:02:a2:58:70:7c:30:e0:
15:6a:3c:a6:03:26:a4:02:fb:d2:85:56:15:9b:50:d1:08:61:
cf:7f:eb:24:f4:77:2c:96:bb:6b:78:66:5d:b1:0d:6b:c3:95:
5e:a4:84:c8:03:70:ea:56:4b:f7:60:51:f7:38:ef:ad:31:84:
50:b1:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:18:08 2026 by rpki-client