
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer
File: 0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer (raw, json)
Hash identifier: KvdA1uVo/yQz1taQUgtduJJ32ZmWbcrkdzl5OPJUzQQ=
Subject key identifier: 0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 17AD9AD78A7B1DE5F15097DAC8E2436D70E050D1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft
caRepository: rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 26 Sep 2025 14:33:57 +0000
Certificate not after: Fri 25 Sep 2026 14:38:57 +0000
Subordinate resources: AS: 264523
IP: 131.255.72.0/22
IP: 2804:20f4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ad:9a:d7:8a:7b:1d:e5:f1:50:97:da:c8:e2:43:6d:70:e0:50:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 26 14:33:57 2025 GMT
Not After : Sep 25 14:38:57 2026 GMT
Subject: CN=0E8D4D28751C71CE312B11C82E2188BC7F54FB05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:bb:c6:38:24:00:a2:0a:69:73:14:05:17:
2c:96:91:a7:19:4a:ef:cf:e2:bb:e4:60:f0:1e:45:
40:85:0d:fb:6f:10:80:42:47:1a:0c:20:35:ea:86:
e0:a6:4b:44:d9:3d:0a:1b:80:db:8a:bb:85:9d:b3:
cc:a9:a2:d4:09:10:33:ec:1f:3d:3d:1b:5a:a2:aa:
86:5d:eb:95:48:ef:1c:7b:4d:96:1d:bd:ec:e5:67:
da:5d:5a:b9:11:13:c5:b5:19:bf:ca:d5:14:51:aa:
62:27:27:b4:f3:63:c2:d0:5d:6b:fd:35:5a:c0:55:
ca:58:23:3f:00:e6:ad:91:7e:47:84:40:f9:2c:5b:
09:83:bc:6c:eb:65:08:c0:78:e3:e6:0f:8d:b8:a5:
8f:cc:e3:d0:1c:78:74:ed:70:0b:3d:21:91:cf:be:
f6:d4:08:a4:06:6a:e0:74:29:99:bc:eb:62:00:c8:
95:43:72:ad:8b:0e:f6:2e:4e:21:67:79:0e:4d:92:
38:50:18:17:d1:4f:36:57:3d:a6:d6:8a:0e:3a:7e:
7d:94:2b:e1:5b:24:fe:2f:6f:d7:d4:d6:10:f2:80:
04:83:93:e0:06:1c:11:e7:38:5d:fa:28:d1:dd:d4:
a7:c0:08:32:2a:cd:c8:42:22:7c:c2:ac:06:bb:80:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.72.0/22
IPv6:
2804:20f4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264523
Signature Algorithm: sha256WithRSAEncryption
b3:e9:bf:0b:65:27:49:ca:02:3b:a5:39:68:5f:78:b9:02:60:
64:9b:99:ea:e1:0b:f0:ec:68:9d:1f:ff:7f:a1:1c:5b:6d:1e:
b5:c2:c4:56:9e:f5:f0:33:17:d1:ee:1f:76:2d:8f:40:18:4d:
31:8d:0c:be:63:fb:ee:94:a3:ca:1f:3e:f9:b5:c8:8e:0e:d4:
95:44:dc:5e:f6:10:b1:92:f7:34:65:72:11:a9:ac:eb:d2:37:
10:43:8f:76:5f:85:75:ab:a2:d7:84:cd:6a:54:2e:e0:1e:80:
c2:1e:25:f3:15:c3:a2:3f:5c:2b:95:19:bc:80:97:2d:15:e2:
bd:53:bb:64:3b:e5:a5:d9:18:1a:35:9d:45:fc:69:74:e4:07:
a6:8f:b6:c7:b0:03:ae:9d:33:b6:ee:34:06:43:49:6e:45:18:
82:5d:20:c1:2e:f3:6d:35:2a:a5:35:b0:93:1f:a4:8b:1a:6d:
f4:c4:90:7a:a1:2d:e0:22:df:1b:f1:fc:17:50:f6:c7:96:26:
b2:65:47:da:0f:54:f3:8b:8a:fa:53:24:e8:e9:67:6c:76:e2:
7e:86:9b:1b:ce:cd:e8:fd:50:bf:9c:ad:3e:fd:1c:84:bd:fd:
13:35:6b:83:67:23:a8:a4:bd:68:61:ac:56:6d:1b:c1:1f:a6:
ec:2e:3b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:19:23 2025 by rpki-client