
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/20674F90DF856F3F8739700240DF50D6A305643F.cer
File: 20674F90DF856F3F8739700240DF50D6A305643F.cer (raw, json)
Hash identifier: EUPJyh1yV8LiQMAtwAc/m342W+sIWE3hrtZsaufSM+k=
Subject key identifier: 20:67:4F:90:DF:85:6F:3F:87:39:70:02:40:DF:50:D6:A3:05:64:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 773E1B6885EABFF59D3BF6135ADE88A921EFD6FB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/20674F90DF856F3F8739700240DF50D6A305643F.mft
caRepository: rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 28 Sep 2026 19:51:32 +0000
Certificate not after: Mon 27 Sep 2027 19:56:32 +0000
Subordinate resources: AS: 275648
IP: 191.227.142.0/23
IP: 2804:97d4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 08 Oct 2026 15:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:3e:1b:68:85:ea:bf:f5:9d:3b:f6:13:5a:de:88:a9:21:ef:d6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 28 19:51:32 2026 GMT
Not After : Sep 27 19:56:32 2027 GMT
Subject: CN=20674F90DF856F3F8739700240DF50D6A305643F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:c0:cd:0a:53:ac:ed:ed:b0:4b:f7:62:c6:
d6:4f:21:1c:05:e8:95:9a:9d:d5:c1:07:98:a1:94:
40:dd:2f:b6:ed:21:92:bb:dd:2f:dd:6d:31:de:41:
89:c3:13:67:1d:7a:32:ed:2f:11:1c:78:7d:36:ec:
9e:4d:8a:8b:8c:ef:b6:df:f6:15:b8:0b:7a:94:71:
04:7c:7b:1b:9c:2b:ea:44:28:b3:d4:0c:bb:d6:ce:
64:81:49:0b:ad:dc:30:5c:71:2a:ac:33:b8:a9:5e:
db:0a:41:1c:92:20:de:74:bb:a1:8c:ce:d0:e1:f3:
24:a4:59:53:2f:47:57:1c:71:19:d7:87:15:57:f6:
54:6e:1e:cd:63:a1:7d:26:5f:cf:f1:01:fe:a9:37:
da:b0:f6:35:a2:03:f8:57:02:91:6d:32:df:9d:6e:
8b:e6:df:e9:0e:ed:a3:55:db:fe:fc:57:a8:20:0f:
2c:89:e7:4f:ff:26:f0:56:e7:d9:31:4a:61:42:ef:
3f:a2:11:40:71:36:4d:46:84:19:ba:dc:fe:21:81:
9e:a6:ab:f9:53:5e:12:27:bb:21:40:bd:90:2d:17:
eb:1b:ed:95:c6:39:67:33:42:68:56:93:3f:7a:4e:
46:80:00:5d:37:04:88:c1:e1:5d:a0:5f:0d:b0:67:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
20:67:4F:90:DF:85:6F:3F:87:39:70:02:40:DF:50:D6:A3:05:64:3F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/20674F90DF856F3F8739700240DF50D6A305643F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.227.142.0/23
IPv6:
2804:97d4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
275648
Signature Algorithm: sha256WithRSAEncryption
c5:c6:b5:6d:cd:1d:ef:21:c9:86:35:de:0e:c0:95:f1:04:94:
b2:e2:62:7b:7e:48:d4:35:77:88:ec:e8:41:00:4f:c4:64:bf:
68:26:80:d3:32:e9:71:9d:9a:5e:af:d0:aa:fa:a3:64:47:60:
e3:71:ed:c8:26:b3:dd:cf:f2:ed:c6:da:b4:03:86:b6:3e:36:
0e:61:f5:a2:86:aa:4a:3a:ca:e4:14:3e:fe:af:7f:ef:33:91:
b0:b1:5e:67:b4:0f:dc:ed:97:8f:97:42:2c:74:08:f4:1c:6f:
82:50:b9:ec:97:ba:1a:e5:be:21:c5:09:c1:4a:94:dd:74:57:
f1:35:24:dd:ea:34:00:64:62:0a:08:80:85:cc:e3:b4:c3:b9:
cd:14:17:6f:e7:c9:70:75:b5:2e:fa:dc:a3:01:30:3f:25:f0:
40:7b:54:4b:88:c4:da:84:d2:7a:03:1f:25:d4:7c:01:45:bd:
c9:c2:69:e5:bc:7e:92:5d:4d:4c:1a:9e:4f:85:f4:31:4b:7b:
ad:87:9b:6e:ab:dd:8e:df:0f:3e:54:10:26:68:cc:49:b0:75:
94:08:bf:02:11:1f:ab:9b:a9:bf:f3:ac:93:e4:da:4d:81:83:
fa:ec:83:93:84:38:fb:75:56:a9:64:6a:8a:99:51:c7:9b:8a:
c8:3a:d5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:39:52 2026 by rpki-client