
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
File: 020AFECF727CE88A459FCBC17D694507CE9ADE22.cer (raw, json)
Hash identifier: C1qtFkSSPOXlq1DHpl+BwFNNyB9Pn8QVwnY7WfX+TuU=
Subject key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4E2FDDC6FF1EF88F2066615C7C64D336BEB4C7B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
caRepository: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 23 Oct 2026 06:30:28 +0000
Certificate not after: Fri 22 Oct 2027 06:35:28 +0000
Subordinate resources: AS: 268239
IP: 45.236.36.0/22
IP: 2804:4e18::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2f:dd:c6:ff:1e:f8:8f:20:66:61:5c:7c:64:d3:36:be:b4:c7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 23 06:30:28 2026 GMT
Not After : Oct 22 06:35:28 2027 GMT
Subject: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:13:f3:f0:92:bf:2e:1d:42:27:be:e5:77:f5:
35:a7:07:25:fc:77:b6:5b:99:2b:e1:db:98:cb:c2:
c3:3b:a9:3f:5a:a9:e0:42:9a:b1:06:9b:60:cf:34:
dc:70:5c:c0:85:9f:e9:8f:45:23:1e:88:1b:a2:05:
ca:29:e9:31:42:32:d0:d3:ff:de:74:20:c3:b9:2f:
62:a1:01:7e:a2:fa:9b:60:c6:cf:6f:4a:7c:5e:3f:
46:5f:f1:6d:84:15:07:bc:42:35:1e:72:3b:83:8e:
9e:0e:07:ce:55:d2:5a:17:e0:2a:b7:76:5a:8e:0b:
49:7f:31:0c:e7:50:97:c9:25:d8:97:dc:1c:69:4b:
c9:b7:b1:94:a2:b7:36:0f:0f:9f:c6:78:42:8f:82:
a4:53:25:67:bd:9b:12:c0:b7:bd:74:d3:32:77:50:
22:7e:f9:d9:10:f6:f8:28:46:65:f0:ee:4b:cb:26:
38:94:62:87:f6:f5:0c:70:a3:bd:f0:85:bf:7a:62:
c2:8e:e8:c4:64:1e:df:03:b4:1f:a4:1a:45:aa:2d:
38:25:88:53:95:fc:a2:b1:1c:f5:13:f5:a5:4e:73:
a2:3c:cc:40:ce:18:0e:7b:82:ac:0d:2b:6c:b3:53:
5c:90:ed:ac:09:a9:60:b7:25:64:a9:15:54:f9:41:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.36.0/22
IPv6:
2804:4e18::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268239
Signature Algorithm: sha256WithRSAEncryption
b6:45:a6:3e:5b:8f:d2:ef:c1:95:28:96:6c:84:4a:f2:f3:61:
e2:c4:e0:34:b0:a3:98:c5:df:24:fa:da:9f:03:f5:18:e9:f1:
7a:37:1e:d9:f9:32:48:b3:67:e8:49:b7:00:d8:8b:ca:46:30:
29:b5:1f:9c:3a:1f:fa:76:e7:a6:92:55:47:0a:d1:7b:d9:c6:
81:33:ee:83:c7:2c:df:1c:24:a1:23:78:17:70:31:d0:d2:9f:
86:f9:b3:c3:6d:ec:0d:6d:6f:a4:af:27:c8:b0:3f:86:b5:8a:
ce:35:8f:c1:45:a9:13:c0:38:de:35:a8:6a:38:6f:54:2d:94:
98:5a:91:61:98:ea:b0:d8:e2:8b:fc:8a:ba:25:8a:11:74:af:
1c:87:53:9c:95:91:e6:5e:f2:cc:85:5f:18:eb:28:d1:94:46:
41:17:50:09:16:7b:e4:00:39:1a:51:d0:56:94:4c:f3:8b:54:
82:8c:74:64:6b:93:d9:7c:fa:b1:ff:2a:03:ce:f8:85:65:4e:
58:7a:63:fe:21:1e:14:4f:f6:ee:45:38:c1:04:32:61:20:fc:
40:d1:0c:6e:6c:06:a7:e4:51:4f:70:02:fd:b4:23:fb:93:e6:
31:c6:ea:15:13:7f:71:98:85:be:47:27:1a:ec:65:74:56:42:
80:f1:a2:0a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUTi/dxv8e+I8gZmFcfGTTNr60x7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjEwMjMwNjMwMjhaFw0yNzEwMjIwNjM1MjhaMDMxMTAvBgNV
BAMTKDAyMEFGRUNGNzI3Q0U4OEE0NTlGQ0JDMTdENjk0NTA3Q0U5QURFMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaE/Pwkr8uHUInvuV39TWnByX8
d7ZbmSvh25jLwsM7qT9aqeBCmrEGm2DPNNxwXMCFn+mPRSMeiBuiBcop6TFCMtDT
/950IMO5L2KhAX6i+ptgxs9vSnxeP0Zf8W2EFQe8QjUecjuDjp4OB85V0loX4Cq3
dlqOC0l/MQznUJfJJdiX3BxpS8m3sZSitzYPD5/GeEKPgqRTJWe9mxLAt7100zJ3
UCJ++dkQ9vgoRmXw7kvLJjiUYof29Qxwo73whb96YsKO6MRkHt8DtB+kGkWqLTgl
iFOV/KKxHPUT9aVOc6I8zEDOGA57gqwNK2yzU1yQ7awJqWC3JWSpFVT5QZ41AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCCv7PcnzoikWf
y8F9aUUHzpreIjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRURn
OFdHWlA0R0JzeGJZVTI1TnBIb3EyTkE0RzJ0Nlh5QjN6YjJDZWduYUYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VE
ZzhXR1pQNEdCc3hiWVUyNU5wSG9xMk5BNEcydDZYeUIzemIyQ2VnbmFGLzAvMDIw
QUZFQ0Y3MjdDRTg4QTQ1OUZDQkMxN0Q2OTQ1MDdDRTlBREUyMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLewkMA0EAgACMAcDBQAoBE4YMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQXzzANBgkqhkiG9w0BAQsFAAOCAQEAtkWmPluP0u/BlSiW
bIRK8vNh4sTgNLCjmMXfJPranwP1GOnxejce2fkySLNn6Em3ANiLykYwKbUfnDof
+nbnppJVRwrRe9nGgTPug8cs3xwkoSN4F3Ax0NKfhvmzw23sDW1vpK8nyLA/hrWK
zjWPwUWpE8A43jWoajhvVC2UmFqRYZjqsNjii/yKuiWKEXSvHIdTnJWR5l7yzIVf
GOso0ZRGQRdQCRZ75AA5GlHQVpRM84tUgox0ZGuT2Xz6sf8qA874hWVOWHpj/iEe
FE/27kU4wQQyYSD8QNEMbmwGp+RRT3AC/bQj+5PmMcbqFRN/cZiFvkcnGuxldFZC
gPGiCg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 20:43:16 2026 by rpki-client