
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
File: FB296CB95D657097D81AFC78BE6A40AC2591E349.cer (raw, json)
Hash identifier: LNbzRTUW+cO+r/PcnxOcsKg8tEDxoZgXj/oMumnswiM=
Subject key identifier: FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 29F14B50BC56AF51B75F5AF71A78D9C380D8ED19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft
caRepository: rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Feb 2026 18:45:07 +0000
Certificate not after: Wed 03 Feb 2027 18:50:07 +0000
Subordinate resources: AS: 265234
IP: 45.172.68.0/22
IP: 168.0.96.0/22
IP: 2804:2cac::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 09:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f1:4b:50:bc:56:af:51:b7:5f:5a:f7:1a:78:d9:c3:80:d8:ed:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 4 18:45:07 2026 GMT
Not After : Feb 3 18:50:07 2027 GMT
Subject: CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:97:9a:92:ea:f0:f4:c9:10:d6:be:69:97:56:
da:5a:23:fd:00:77:15:f0:a7:05:79:c3:fc:e5:e9:
6f:db:d1:f0:88:71:be:17:c4:1e:49:74:2b:9c:74:
0f:46:85:74:4d:23:00:09:33:3e:24:77:72:4b:76:
70:7d:37:63:5a:89:11:87:29:c5:f1:a1:4a:a6:e3:
9e:98:cf:e3:49:5c:1c:a9:94:6e:32:e4:bc:a9:07:
92:61:f5:b1:6e:11:a6:62:44:90:2e:74:59:9a:5a:
21:44:77:c8:00:ad:c4:fe:a0:83:3d:73:6b:a1:9c:
15:0f:2d:8f:31:7a:e9:f0:36:5e:ed:18:26:fa:a8:
89:62:81:ea:aa:59:ac:2d:9c:2c:3c:f4:5c:2d:d1:
ec:00:3c:06:7d:83:7a:25:64:8f:7a:0b:73:5d:52:
46:5b:db:f0:69:1f:ac:ce:67:d7:95:0a:d9:6d:3b:
73:a2:21:5a:fa:2d:61:95:23:e6:fe:15:1b:a7:96:
b6:b6:f0:9e:8f:9a:5f:84:84:10:ad:c0:c3:5b:18:
9e:f4:9f:e1:c8:3a:a1:31:77:ec:55:1b:18:f1:9f:
cb:e6:e3:5a:1b:bf:6c:fc:0f:ed:3f:c9:8a:f2:c7:
0d:cc:2c:6e:5e:7e:50:1a:1b:de:51:49:0b:2e:99:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.68.0/22
168.0.96.0/22
IPv6:
2804:2cac::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265234
Signature Algorithm: sha256WithRSAEncryption
ae:c7:8e:35:45:e7:50:21:69:a4:93:3c:23:fc:aa:f7:5a:9e:
02:42:29:c1:6c:de:02:22:9f:b8:59:b8:40:95:6c:73:ec:c9:
a3:84:49:9c:7d:2d:29:b5:e6:48:2d:98:40:75:75:1a:7a:f3:
59:af:7c:ed:f7:c9:6d:37:ef:a7:c8:d9:e6:7c:19:bc:f5:d9:
01:23:6a:ee:21:5a:c1:1a:38:93:da:19:f4:4b:ea:97:6c:c5:
61:b3:e4:62:9a:9e:ac:9b:3e:06:9d:76:e1:f2:ae:14:3c:88:
84:99:02:20:4b:cf:00:ce:f9:a7:71:33:5a:44:02:53:30:a8:
1a:71:8b:d8:d0:45:fa:b5:f1:78:ee:09:d0:ad:87:e0:51:fb:
d7:66:5f:f7:cc:64:d8:9e:55:ef:ac:f1:cf:6c:e4:74:31:22:
b5:09:53:bb:74:b5:08:bf:8c:b7:7b:cb:8c:12:0e:01:52:d1:
12:d1:20:7c:07:08:c7:99:ab:d8:07:95:76:6d:8b:b4:8e:c5:
4a:37:cc:70:b9:03:75:31:c2:8d:30:6c:34:d2:8b:22:c3:e6:
af:c7:08:ac:f4:6e:3c:ba:56:d5:77:b6:c4:c5:d6:c2:ac:aa:
e0:c0:26:46:d6:92:3b:ac:6b:d4:35:8e:f1:e3:2c:8b:01:7e:
89:dc:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:41:27 2026 by rpki-client