
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/1C4F4FFD7DE9053F92294A51020F26D7645D7DFA.cer
File: 1C4F4FFD7DE9053F92294A51020F26D7645D7DFA.cer (raw, json)
Hash identifier: nHyk1SsV0/eAcCNTsIQZEPKENR44tuQgcrbMhfdkD2c=
Subject key identifier: 1C:4F:4F:FD:7D:E9:05:3F:92:29:4A:51:02:0F:26:D7:64:5D:7D:FA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4CEA8C53EE67740A9836D7F833D9B0274D3F0208
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/1C4F4FFD7DE9053F92294A51020F26D7645D7DFA.mft
caRepository: rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 15 Aug 2026 01:07:13 +0000
Certificate not after: Sat 14 Aug 2027 01:12:13 +0000
Subordinate resources: AS: 264433
IP: 131.221.148.0/22
IP: 2804:1e84::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ea:8c:53:ee:67:74:0a:98:36:d7:f8:33:d9:b0:27:4d:3f:02:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 15 01:07:13 2026 GMT
Not After : Aug 14 01:12:13 2027 GMT
Subject: CN=1C4F4FFD7DE9053F92294A51020F26D7645D7DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:d2:1c:3d:32:29:2e:c1:2d:c2:2e:d2:2d:
4e:2f:e9:8c:2a:55:61:73:96:f0:68:80:78:09:fa:
7a:7d:24:89:fb:ee:3d:1f:8c:cd:e7:27:d4:33:ef:
ae:85:54:ef:80:c7:a0:e3:86:26:24:35:12:b7:44:
f1:e6:be:a7:46:bb:a2:a3:4c:e0:ad:f1:d3:6c:57:
b5:3e:7a:f8:cc:df:45:5f:96:e7:18:96:6a:15:96:
05:42:f1:1d:2c:da:ed:ef:ea:90:c6:fa:dd:63:51:
9b:ea:71:99:93:0b:e1:05:6c:7d:dc:91:38:a8:f8:
fa:b1:0c:6e:f6:56:70:89:09:9e:f6:1a:cf:5b:e9:
e0:bd:d9:2f:97:cf:4f:da:0b:a8:30:1f:5b:7a:df:
78:55:da:23:64:a3:f8:ac:7b:ab:a5:76:88:e5:76:
52:06:f9:09:e6:9c:13:65:17:23:01:85:38:5a:f4:
d4:3a:a3:79:47:0e:f3:f9:6e:ba:db:c9:1c:f3:88:
01:1f:00:a3:59:4f:8d:f2:bb:8c:dd:c8:14:ce:e2:
1b:40:e7:c8:08:a2:bb:70:e8:a6:c7:5c:4b:95:bc:
d0:44:71:ca:ec:c9:d9:a6:40:f7:45:60:fe:3f:36:
60:19:bb:dc:ef:0a:7c:aa:6c:5f:c7:76:fe:09:b3:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1C:4F:4F:FD:7D:E9:05:3F:92:29:4A:51:02:0F:26:D7:64:5D:7D:FA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/1C4F4FFD7DE9053F92294A51020F26D7645D7DFA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.148.0/22
IPv6:
2804:1e84::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264433
Signature Algorithm: sha256WithRSAEncryption
a0:e7:d9:35:e1:b2:bf:3f:01:ca:e7:58:b1:af:be:f9:d7:d1:
0c:77:d9:26:ab:54:22:6d:53:95:ac:45:7d:0b:f1:4f:fe:0e:
ab:0f:b3:bf:7a:65:0e:61:b3:3d:66:72:4d:a3:25:c7:77:48:
2c:fa:d5:64:3b:8e:4c:b7:25:f7:04:55:4b:86:38:b0:27:06:
4d:81:69:94:81:e2:25:26:35:6a:38:6c:63:01:6c:56:62:3f:
f7:8f:c4:1f:88:c7:af:a3:ef:ab:3f:12:1a:03:7e:c2:44:2c:
25:35:22:89:1b:75:18:cc:ae:f9:3c:c7:50:e7:6b:c6:2b:f9:
b5:5c:ea:fe:aa:c8:63:4e:1b:86:0a:73:21:22:20:9d:96:be:
51:10:f4:6c:a9:7c:4e:eb:98:d5:bf:f9:39:32:13:f5:93:4b:
41:1f:25:66:8e:c0:97:50:f5:9d:79:42:05:d0:cb:5c:61:96:
1c:46:01:86:a3:7d:07:6e:f7:81:69:73:6f:d0:e3:06:67:f6:
99:eb:fc:8b:24:9a:1e:6a:65:99:45:18:b8:c3:17:9e:96:78:
68:6a:04:14:be:f3:53:56:ab:38:b9:15:d0:f8:a6:91:e1:8f:
6e:d3:be:f8:f7:fb:b9:94:39:03:13:3d:c7:b2:07:f1:8b:b5:
2b:06:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:01:59 2026 by rpki-client