
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
File: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer (raw, json)
Hash identifier: 9EjLUPI6r3d0sMK+A9EdanhRRiXawF3EgXCh9gH0/Vw=
Subject key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0922CA484B31999699312691080AB7F4E5DC6BF8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
caRepository: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 22 Aug 2026 00:30:31 +0000
Certificate not after: Sat 21 Aug 2027 00:35:31 +0000
Subordinate resources: AS: 264517
IP: 132.255.172.0/22
IP: 138.117.164.0/22
IP: 2804:20dc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 13:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:22:ca:48:4b:31:99:96:99:31:26:91:08:0a:b7:f4:e5:dc:6b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 22 00:30:31 2026 GMT
Not After : Aug 21 00:35:31 2027 GMT
Subject: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:b1:64:41:54:ee:8e:94:6f:2a:83:12:1a:
f5:79:e4:db:97:75:d2:bf:9c:3d:a7:c1:0e:17:9e:
19:56:55:d7:60:4e:d2:c1:a9:ad:9f:18:3f:51:47:
04:3b:22:61:26:a8:95:c0:84:57:f6:cf:30:a6:78:
8d:9d:93:fc:43:43:36:bc:05:9a:ca:c1:99:65:01:
58:49:9d:a6:15:e3:15:dc:e8:d1:5e:0c:00:5b:a6:
55:4d:1c:e1:1e:af:8f:a8:38:ac:2f:f0:07:fa:fb:
e7:c7:cb:08:32:b5:2e:68:82:01:e2:33:74:2b:3c:
a9:80:74:b2:12:94:af:df:8c:68:f6:d5:c5:66:61:
66:ab:db:1e:31:57:f8:8e:66:b8:e1:2f:cf:92:64:
9b:d0:39:1a:dc:a2:8d:ea:6f:a5:aa:4f:75:46:d7:
4f:ce:0a:97:d7:95:70:7c:31:b6:99:a9:1e:e8:72:
aa:63:d9:a0:d9:76:9a:01:32:fa:f9:e9:70:ef:c3:
af:db:b4:5e:6d:1f:6d:16:26:80:cc:71:0c:65:3b:
14:9b:4d:80:c4:1b:16:af:11:28:21:e8:3c:32:cd:
e6:65:b5:87:6f:61:fc:00:b5:08:ba:10:82:b8:39:
9c:ad:02:da:7a:93:ca:a3:c6:57:37:40:a2:00:b5:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.172.0/22
138.117.164.0/22
IPv6:
2804:20dc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264517
Signature Algorithm: sha256WithRSAEncryption
ba:1f:77:b8:d8:ee:15:72:3f:f2:f6:2f:6e:18:54:eb:47:28:
dd:75:9d:b2:89:9e:09:af:2c:b0:94:9e:00:19:e6:64:fe:19:
27:7b:fd:e6:83:ed:85:59:05:2a:3a:3d:cb:20:1b:2f:54:36:
08:ff:03:f8:45:8d:29:60:de:16:f4:46:69:2c:b0:7b:cf:e6:
23:2e:13:ff:7e:b9:82:08:af:5b:8f:fc:aa:9a:28:36:e9:65:
93:32:eb:de:10:e1:56:d1:ce:14:2a:c3:e4:58:87:6e:0e:93:
59:40:20:40:94:16:17:ae:7a:12:5e:1d:2e:73:17:b0:68:5a:
ee:f0:fe:72:0a:8a:e0:6f:b7:0c:eb:0f:f4:96:e7:27:c0:1d:
07:2d:72:6b:76:d5:9a:82:80:d0:14:c6:8b:c5:73:e3:5a:0c:
a7:f9:0e:a6:8f:92:06:c6:1a:04:0f:c8:8a:95:42:02:d2:cc:
05:bb:22:67:75:d2:80:df:22:55:9b:fe:d4:15:06:bc:37:37:
15:02:4a:7a:96:fb:f7:40:45:7a:01:2e:e2:ba:a4:97:be:7d:
9d:e4:43:f2:aa:06:bf:d6:96:8e:76:fa:36:4f:22:c8:b5:4f:
5a:d3:37:58:42:ee:d2:e5:17:ff:d8:dc:9f:5f:a7:3f:18:23:
f1:0e:5c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:59:38 2026 by rpki-client