
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.cer
File: 1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.cer (raw, json)
Hash identifier: 4s3b3EfI6c9bZrUS/phRzS0rbbYjheqy2ELMuQqC8xk=
Subject key identifier: 1A:69:4A:79:E3:F9:AD:8C:80:24:F5:A8:0C:4E:A8:97:9E:DA:27:B8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5843E8CB0263E2CCB8507A442A61622FECB30AF1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft
caRepository: rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 28 Oct 2025 03:22:12 +0000
Certificate not after: Tue 27 Oct 2026 03:27:12 +0000
Subordinate resources: AS: 61620
IP: 2804:90d0::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:43:e8:cb:02:63:e2:cc:b8:50:7a:44:2a:61:62:2f:ec:b3:0a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 28 03:22:12 2025 GMT
Not After : Oct 27 03:27:12 2026 GMT
Subject: CN=1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:8d:56:55:a1:fd:09:15:bf:6a:b4:e0:79:
d0:79:3e:5d:a6:c5:53:10:ad:84:26:d9:bc:72:48:
0b:82:19:22:e0:cf:86:3d:93:a2:5a:2b:d4:50:48:
e6:27:ea:9a:64:62:ce:c6:47:7c:7e:cc:5a:16:6f:
31:a8:79:99:c5:96:48:b1:ae:26:d3:05:3d:4e:25:
7b:68:fe:41:88:17:c1:0c:f1:cb:4e:ed:08:5d:b8:
98:87:d1:b5:2a:24:6e:75:ec:73:9f:d7:75:1c:47:
4e:5d:e2:96:78:9d:65:98:11:25:cd:d2:4e:aa:0f:
41:2a:82:40:13:29:51:e3:c7:c4:ed:1d:c8:01:23:
42:80:c4:4b:1f:2f:e3:24:76:71:bd:86:14:2d:c7:
91:df:d3:9b:54:0c:23:d4:76:4a:8c:42:3f:67:89:
d5:7f:b5:2b:77:57:43:28:03:c3:a2:e6:64:df:bb:
20:2a:74:bc:0e:5e:e7:0d:8d:02:6e:ce:97:2e:43:
09:b7:77:cc:ca:fe:d1:b4:6b:74:5f:2e:47:8b:35:
0e:b3:65:ce:3a:f2:2a:0a:b9:75:66:fc:f1:16:0d:
85:10:73:95:4e:4f:f0:8a:86:ec:4e:36:9d:be:e7:
59:54:a3:04:e6:4d:6c:ac:c7:26:2c:b1:bb:f6:19:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1A:69:4A:79:E3:F9:AD:8C:80:24:F5:A8:0C:4E:A8:97:9E:DA:27:B8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90d0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61620
Signature Algorithm: sha256WithRSAEncryption
7b:f1:a5:6b:28:6d:af:2b:3f:bb:a1:b0:95:ba:97:6c:ed:db:
75:81:76:89:51:30:d6:c7:e7:92:98:74:6b:58:dd:02:f1:29:
b5:84:2e:45:83:f1:03:16:11:db:e2:a8:86:5d:9c:08:1f:0b:
d2:01:6b:02:c0:6f:9f:7e:96:5e:8c:9b:c7:f0:ba:9d:b0:91:
a9:5c:3f:dc:c5:e4:bd:53:b0:d9:17:a9:ed:5b:bf:e5:45:fc:
4f:c3:72:a7:3e:ab:67:16:2f:47:3e:66:ca:0b:81:17:0d:3b:
59:1c:d3:fb:06:2c:0d:d8:ec:d4:ff:92:ce:8a:cb:77:8f:53:
32:ab:f7:84:e4:3e:72:47:f3:23:ee:76:14:11:6a:a5:23:7e:
58:2e:e9:44:60:a4:00:60:bf:20:cc:6f:97:11:90:f2:84:c9:
28:db:8c:26:c0:7a:74:ff:f9:71:d4:d6:ec:1f:8a:f8:62:1e:
f9:ca:37:84:a6:9e:a1:8a:b2:12:42:98:2f:b1:c7:72:e9:b0:
3d:78:c1:6a:18:b9:e3:a1:fe:29:29:25:f5:a4:34:0c:e9:7f:
5e:fa:5d:d1:77:b9:e6:7b:4b:1b:13:69:d3:f3:61:1b:48:5b:
a4:e3:e4:e6:f6:1f:ab:f0:c4:b5:ad:4b:70:26:bb:1d:c7:f5:
05:8d:6e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:20:49 2025 by rpki-client