
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer
File: 1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer (raw, json)
Hash identifier: ErFESOyt2KfHGh86DoeJEelriei6wmvQKbAeorCiflQ=
Subject key identifier: 1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4FD36077A838AC24E707467E336EC7EC7291B43B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft
caRepository: rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 22 Aug 2026 20:55:05 +0000
Certificate not after: Sat 21 Aug 2027 21:00:05 +0000
Subordinate resources: AS: 270605
IP: 177.200.228.0/22
IP: 2804:6e90::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 13:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d3:60:77:a8:38:ac:24:e7:07:46:7e:33:6e:c7:ec:72:91:b4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 22 20:55:05 2026 GMT
Not After : Aug 21 21:00:05 2027 GMT
Subject: CN=1C4067D9FC8880CD844526B4C8268B525C75BAEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:84:5f:17:48:f4:4e:88:3e:72:81:15:08:
75:b5:e7:ba:33:e6:fb:44:50:73:19:de:c3:2d:ac:
63:e9:67:cf:a4:74:eb:29:1d:80:c2:e0:d2:18:43:
0b:34:d9:87:5b:06:41:40:d7:64:30:52:47:79:f8:
78:4f:dc:c8:02:40:2d:25:61:5b:61:a3:a6:26:a5:
06:5f:31:d7:f9:7f:f8:d1:f0:45:67:59:23:6e:05:
fe:b4:e8:00:cf:fb:75:a2:4b:68:75:a3:72:f2:22:
2f:04:ac:cb:eb:f5:1b:62:55:81:18:de:5b:58:74:
3a:48:31:f0:a4:0b:be:04:7a:44:d0:4a:b3:6f:e4:
1a:c6:9e:81:7b:6d:23:7d:73:78:73:5d:56:bf:cc:
16:4f:de:41:36:ef:65:c4:8d:d5:bd:48:f3:4f:30:
db:a2:af:7e:c8:2e:c0:f4:ea:88:5b:f7:0e:bb:1d:
f3:2b:44:a3:c7:cc:4f:fd:a7:18:43:d8:e3:f4:11:
aa:d9:ed:86:74:0d:b8:92:d6:6a:c2:0c:a0:74:f9:
d4:9c:90:d3:6a:80:62:66:f4:1f:f8:b9:7c:ae:b3:
db:a9:4b:f8:c5:43:71:79:2a:ba:f7:df:2b:ee:3d:
27:d7:58:fc:bb:bd:27:87:1a:db:69:5c:dc:ed:64:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.200.228.0/22
IPv6:
2804:6e90::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270605
Signature Algorithm: sha256WithRSAEncryption
47:92:20:43:7a:86:45:15:b2:f1:f9:85:f5:30:f0:07:2c:4a:
4f:87:62:63:7c:db:68:c9:32:62:bd:a9:29:90:65:51:a1:67:
8a:30:27:f1:01:d3:3a:c3:4d:c0:36:eb:01:66:07:5a:a9:2c:
f7:ed:71:45:98:bf:e4:cb:15:c8:6d:a7:dc:b6:2f:7b:63:72:
9e:39:76:ed:67:05:00:65:71:0c:57:eb:bc:4e:5a:ba:c6:23:
34:cd:11:79:94:1d:8b:6e:bc:7a:6d:58:33:23:8f:6d:18:b5:
61:ba:c6:9f:c1:e4:29:1b:a5:31:07:23:8e:fd:15:35:11:f0:
77:d8:5c:a9:26:5b:ae:aa:1b:c3:b3:9d:16:62:6f:66:6f:ae:
06:74:13:96:d5:b3:a4:28:3d:bd:32:26:6d:53:89:a6:d3:e5:
c2:52:98:67:7b:70:fd:d7:10:43:df:0f:bc:52:2e:63:01:23:
50:5a:f9:d3:94:ab:ad:cb:9a:e1:ee:b8:c7:06:ce:a2:c7:28:
23:8d:74:58:3e:33:1c:97:4b:f9:90:8e:94:fd:de:02:5c:e6:
5d:e2:54:86:a6:60:e6:83:19:b3:74:34:cf:df:90:d6:95:fe:
33:5b:af:92:3c:e2:b0:b1:11:b8:8a:c0:fe:15:2c:89:1b:a6:
2f:95:07:16
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUT9Ngd6g4rCTnB0Z+M27H7HKRtDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA4MjIyMDU1MDVaFw0yNzA4MjEyMTAwMDVaMDMxMTAvBgNV
BAMTKDFDNDA2N0Q5RkM4ODgwQ0Q4NDQ1MjZCNEM4MjY4QjUyNUM3NUJBRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXiIRfF0j0Tog+coEVCHW157oz
5vtEUHMZ3sMtrGPpZ8+kdOspHYDC4NIYQws02YdbBkFA12QwUkd5+HhP3MgCQC0l
YVtho6YmpQZfMdf5f/jR8EVnWSNuBf606ADP+3WiS2h1o3LyIi8ErMvr9RtiVYEY
3ltYdDpIMfCkC74EekTQSrNv5BrGnoF7bSN9c3hzXVa/zBZP3kE272XEjdW9SPNP
MNuir37ILsD06ohb9w67HfMrRKPHzE/9pxhD2OP0EarZ7YZ0DbiS1mrCDKB0+dSc
kNNqgGJm9B/4uXyus9upS/jFQ3F5Krr33yvuPSfXWPy7vSeHGttpXNztZHcLAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQcQGfZ/IiAzYRF
JrTIJotSXHW67zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVg5
QWk0ZDdaY25zQlJaV1FNc2hxanVNaU0zZFdRU3JtSzROdExmcmFmRGovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VY
OUFpNGQ3WmNuc0JSWldRTXNocWp1TWlNM2RXUVNybUs0TnRMZnJhZkRqLzAvMUM0
MDY3RDlGQzg4ODBDRDg0NDUyNkI0QzgyNjhCNTI1Qzc1QkFFRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCscjkMA0EAgACMAcDBQAoBG6QMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQhDTANBgkqhkiG9w0BAQsFAAOCAQEAR5IgQ3qGRRWy8fmF
9TDwByxKT4diY3zbaMkyYr2pKZBlUaFnijAn8QHTOsNNwDbrAWYHWqks9+1xRZi/
5MsVyG2n3LYve2Nynjl27WcFAGVxDFfrvE5ausYjNM0ReZQdi268em1YMyOPbRi1
YbrGn8HkKRulMQcjjv0VNRHwd9hcqSZbrqobw7OdFmJvZm+uBnQTltWzpCg9vTIm
bVOJptPlwlKYZ3tw/dcQQ98PvFIuYwEjUFr505Srrcua4e64xwbOoscoI410WD4z
HJdL+ZCOlP3eAlzmXeJUhqZg5oMZs3Q0z9+Q1pX+M1uvkjzisLERuIrA/hUsiRum
L5UHFg==
-----END CERTIFICATE-----
Generated at Sun Aug 23 15:09:57 2026 by rpki-client