
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
File: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer (raw, json)
Hash identifier: CJ+rWozfSdrprov8yK6Wo6BmcjJ4NCNHHgnV0hgaKks=
Subject key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2FC07931533592D9FB520A54A29C1F5063A00C80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
caRepository: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Feb 2026 18:54:40 +0000
Certificate not after: Wed 03 Feb 2027 18:59:40 +0000
Subordinate resources: AS: 267251
IP: 45.232.72.0/22
IP: 2804:4a98::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c0:79:31:53:35:92:d9:fb:52:0a:54:a2:9c:1f:50:63:a0:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 4 18:54:40 2026 GMT
Not After : Feb 3 18:59:40 2027 GMT
Subject: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:88:c7:8b:48:24:94:e4:bf:3d:66:b4:33:
48:4a:64:d0:56:d7:1a:b4:c9:26:b5:27:ef:b4:ab:
d6:75:a5:45:45:09:86:b9:60:e0:c4:5d:1d:71:cd:
81:71:a8:55:6d:b9:33:fe:1e:da:21:32:e7:a3:24:
93:7c:58:29:ad:03:7d:e4:dd:d3:df:92:75:14:7d:
d9:85:38:f1:1a:a0:50:f2:2f:b6:02:7a:cf:11:ff:
14:2c:a1:fd:33:e9:f5:df:6b:80:f9:6f:97:cc:71:
ab:c9:e7:41:31:8b:ba:ff:38:23:77:44:b8:2c:7e:
1d:e5:35:ab:af:ff:f4:36:00:69:90:54:e7:16:42:
d5:ea:fa:63:c4:ec:63:7d:5e:5b:56:62:5a:a4:56:
3c:46:bc:aa:64:9e:dc:13:45:b5:5f:31:1c:3b:20:
70:94:d1:33:f2:d7:6c:06:a7:35:2f:7b:83:55:73:
45:93:c1:3d:90:9e:49:72:b1:00:68:cc:5c:29:8f:
ae:d7:9f:71:b2:c6:ab:c3:d3:2b:3d:08:05:29:91:
29:19:14:a5:3b:70:07:d2:88:ca:e2:ef:53:5b:96:
f6:09:36:46:1b:25:ca:85:66:69:74:8f:0e:5d:2b:
15:54:b7:32:f9:6f:b4:e7:5f:49:ec:1a:80:6f:08:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.72.0/22
IPv6:
2804:4a98::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267251
Signature Algorithm: sha256WithRSAEncryption
db:e4:f1:d3:ab:9f:e1:f2:58:71:7b:b9:e6:98:0a:76:9e:91:
63:02:73:5f:96:59:f1:84:7d:96:1a:f7:cb:c2:e6:8b:8e:60:
4e:1f:1a:19:55:84:84:78:12:3f:da:e0:7b:0b:2e:34:66:69:
2c:b3:09:6a:e0:fd:38:8a:fd:18:5d:14:0e:c4:7c:92:85:b7:
f3:24:5a:86:25:56:19:71:14:f9:96:a2:9e:d8:d8:82:22:0c:
cc:0b:d9:6c:05:ef:6d:2c:c0:a0:35:d8:cc:38:b7:d2:c0:63:
7a:19:55:3a:8a:47:ca:d3:7e:c7:e6:b3:f3:a4:40:43:86:b5:
06:30:b0:f1:68:25:0f:1d:89:0a:31:1a:78:a4:53:3f:3c:39:
4e:44:11:5d:b2:91:79:da:2a:92:69:e3:ef:4a:a3:5a:00:c1:
de:eb:ff:88:24:12:ea:5b:bb:39:63:e5:a9:d7:b3:84:fb:56:
5e:cf:bc:f7:6b:1e:b8:66:5a:6a:67:39:cc:fa:71:5f:13:fa:
04:54:6e:3b:64:44:26:2c:1e:27:34:06:0b:c0:a3:17:0c:c0:
8a:0c:a7:3a:a2:47:78:d5:90:fd:c6:69:9c:bf:da:df:5d:89:
85:14:1e:3c:5b:c3:da:fd:86:da:28:95:05:a7:3f:9d:1a:ce:
a3:2f:dc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:54:17 2026 by rpki-client