
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer
File: E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer (raw, json)
Hash identifier: IiQk/8lvHGUkMxhtg56qzXoUTph5QqFskIdxCCe+4S8=
Subject key identifier: E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 197106238A5B798240E6F2ED66B26F36F0589A0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.mft
caRepository: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 06 Feb 2026 03:58:22 +0000
Certificate not after: Fri 05 Feb 2027 04:03:22 +0000
Subordinate resources: AS: 264025
IP: 143.137.32.0/22
IP: 168.197.56.0/22
IP: 2804:299c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 07:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:71:06:23:8a:5b:79:82:40:e6:f2:ed:66:b2:6f:36:f0:58:9a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 6 03:58:22 2026 GMT
Not After : Feb 5 04:03:22 2027 GMT
Subject: CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:5b:62:e0:84:af:15:ab:97:ff:2d:c0:af:
83:12:a4:0c:47:35:85:21:bd:aa:bf:82:7e:dd:ec:
a2:37:d4:66:f2:a2:30:b2:24:d4:1a:c1:7f:14:93:
45:10:65:b6:97:ad:74:ec:cf:36:11:54:de:72:22:
86:22:da:72:60:1e:98:8f:84:a8:2a:2a:34:45:e0:
ea:58:29:59:0b:2f:25:5f:cf:b6:10:ad:85:1d:45:
8e:89:db:08:e6:13:21:79:91:c4:b2:b1:2e:60:ea:
1d:e2:03:15:a4:0c:85:2f:e8:a3:58:b7:16:56:16:
5f:51:1b:41:26:b7:92:ea:4a:a0:fe:e4:82:57:01:
dd:48:53:f9:02:10:d8:15:c2:71:81:a8:bc:1c:06:
c1:73:a3:f9:da:bc:32:42:49:bd:5c:85:ea:b5:3e:
4c:b8:5e:3a:45:2a:dc:3c:39:e0:e9:57:de:32:f8:
2d:19:8b:73:49:6a:9c:47:d1:07:af:dc:2b:28:d7:
d4:0b:15:83:b3:3c:10:4d:67:d8:06:08:ae:98:bd:
39:6c:ba:23:0f:b8:ca:c0:a6:a5:52:32:2b:cc:89:
2d:1a:95:3c:be:39:31:01:19:9b:fb:a1:c4:95:3f:
d9:93:50:9f:90:6e:48:96:12:ec:66:87:2a:de:80:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.32.0/22
168.197.56.0/22
IPv6:
2804:299c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264025
Signature Algorithm: sha256WithRSAEncryption
a2:a1:5d:f4:ad:93:f3:0f:99:85:c7:d9:0e:fd:7d:f0:ce:ca:
bd:d3:81:34:50:6c:19:d4:5c:3b:4e:be:8c:10:28:af:7e:1f:
0a:53:2f:d9:1a:e0:79:f0:6d:db:21:34:4d:9c:0e:19:67:da:
c2:b1:f9:d6:61:32:44:25:96:1e:53:b6:af:03:36:17:2a:5e:
fa:ac:28:a3:11:88:46:eb:e7:63:f6:df:3f:91:d8:3c:fc:b3:
bd:01:14:0d:b6:11:bf:42:dd:17:30:8b:6d:63:90:f6:b9:34:
56:64:ce:a6:ca:4b:0c:59:8b:8e:77:a4:92:40:07:12:e2:46:
1a:2b:f2:19:be:77:b6:41:b0:d8:35:ed:27:a2:12:a4:1b:de:
3b:c3:94:46:6c:11:2a:df:08:dc:ce:71:ac:2c:a3:c6:ea:e9:
06:82:02:db:9a:dc:53:be:a4:92:af:aa:e1:93:71:2f:52:15:
ec:b2:03:21:15:03:00:29:82:26:f5:09:28:67:69:ae:f7:89:
a0:38:2e:5f:7d:ac:0d:4b:d1:b3:73:6a:ae:b5:c6:a6:31:24:
98:07:ce:75:70:f7:dd:6b:1a:ce:16:10:3e:12:bc:41:b0:7d:
8c:b0:de:38:1d:f6:45:72:20:5c:61:60:f2:c3:97:38:c9:c7:
fe:47:a8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:41 2026 by rpki-client