
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
File: 237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer (raw, json)
Hash identifier: 8NpJqqirdKw3Ij+WG4EDfIJbEGZBVY4c2hYbzO81WzM=
Subject key identifier: 23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0D7FFC72D3E36BB98247724B16D8270C580E7D50
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
caRepository: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 01 Oct 2025 18:02:13 +0000
Certificate not after: Wed 30 Sep 2026 18:07:13 +0000
Subordinate resources: AS: 271607
IP: 190.9.104.0/22
IP: 2804:7e2c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:7f:fc:72:d3:e3:6b:b9:82:47:72:4b:16:d8:27:0c:58:0e:7d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 1 18:02:13 2025 GMT
Not After : Sep 30 18:07:13 2026 GMT
Subject: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:01:25:0f:cf:15:60:93:45:91:9a:4f:87:
61:f3:62:9d:b3:00:12:34:d7:55:da:07:2b:70:40:
02:af:6a:88:44:57:a8:a5:ba:0d:01:0f:ba:f2:e9:
47:31:d7:43:aa:18:e7:8d:80:d1:26:13:4a:24:e3:
72:cd:6b:77:80:27:46:29:80:a4:b8:fa:d3:0b:80:
12:a2:1e:c7:93:b8:6d:d5:e1:a0:99:99:f2:49:ad:
05:a5:04:57:39:94:a7:04:b8:fb:67:ca:8f:02:58:
f4:a9:57:ae:e6:20:54:0f:35:7b:19:f1:21:8b:17:
f6:d4:8e:68:f3:65:39:1f:92:6f:13:34:7a:01:d6:
d9:7e:55:a6:19:cf:d6:2b:35:8a:1a:e9:b8:5d:18:
15:dd:d7:1d:b7:68:a3:db:5d:67:04:1c:3a:82:9d:
94:41:3e:3f:d4:c8:a5:02:41:51:23:ae:de:9a:cf:
62:d8:02:55:cc:67:93:3e:c7:56:53:29:c6:50:b4:
b2:6c:22:d8:51:8c:3b:16:2c:e6:56:06:13:eb:ac:
c1:6d:05:b7:5e:c7:85:93:e5:05:81:d6:45:11:c3:
4a:85:3b:52:c3:26:6f:31:83:86:9c:a9:ea:75:ee:
79:f1:ec:56:bc:ed:1a:94:f9:4a:fd:80:10:9f:b8:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.104.0/22
IPv6:
2804:7e2c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271607
Signature Algorithm: sha256WithRSAEncryption
82:5a:e8:c4:b2:78:c5:63:b8:e5:c0:46:4b:4d:ab:18:a4:2d:
82:d7:51:0d:ba:f6:dd:8c:5e:3a:d4:6e:6b:17:54:e2:7a:fe:
da:b4:2a:5f:a1:2d:43:db:7c:51:e4:dd:0f:4d:10:3c:5e:44:
18:4c:b4:ef:b0:84:5f:83:c6:ff:14:aa:e7:85:73:35:b6:3c:
67:68:4b:40:87:eb:07:3f:8a:df:cc:df:1d:55:b7:0f:20:24:
53:7d:ba:1a:c8:d9:e7:59:30:6f:3a:83:9d:d0:ce:33:a2:b7:
06:a3:53:2c:ec:c9:53:0c:59:ab:7f:9a:b1:b8:88:93:a9:52:
c3:4a:b7:3f:9a:03:d3:28:df:2b:61:ec:56:6c:d5:7c:be:43:
71:1a:fb:56:f3:aa:81:3a:f2:50:7e:90:f5:8a:bb:ed:1e:03:
68:08:a4:4f:67:e6:90:0f:76:1b:70:81:4f:03:f0:7d:da:f7:
92:be:48:bb:69:b4:cb:43:57:d2:a5:f8:1b:6d:64:52:4f:8d:
64:94:75:1a:66:45:5f:dd:86:bb:1d:13:83:9f:9c:d0:cb:19:
13:fd:dc:e6:f2:5c:31:1b:c1:33:24:9c:a7:1d:5e:7f:e6:de:
d2:8b:2e:f5:7e:09:76:86:bb:04:46:c1:50:72:08:01:90:99:
b5:83:b8:8f
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUDX/8ctPja7mCR3JLFtgnDFgOfVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMDExODAyMTNaFw0yNjA5MzAxODA3MTNaMDMxMTAvBgNV
BAMTKDIzN0NCN0YxQ0Q0NUFFREQ2MUM5MzQ5RjQxMUI5QzlDQUYwQzFERTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxQElD88VYJNFkZpPh2HzYp2z
ABI011XaBytwQAKvaohEV6ilug0BD7ry6Ucx10OqGOeNgNEmE0ok43LNa3eAJ0Yp
gKS4+tMLgBKiHseTuG3V4aCZmfJJrQWlBFc5lKcEuPtnyo8CWPSpV67mIFQPNXsZ
8SGLF/bUjmjzZTkfkm8TNHoB1tl+VaYZz9YrNYoa6bhdGBXd1x23aKPbXWcEHDqC
nZRBPj/UyKUCQVEjrt6az2LYAlXMZ5M+x1ZTKcZQtLJsIthRjDsWLOZWBhPrrMFt
Bbdex4WT5QWB1kURw0qFO1LDJm8xg4acqep17nnx7Fa87RqU+Ur9gBCfuNuRAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjfLfxzUWu3WHJ
NJ9BG5ycrwwd6TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2ky
YXNQOTJlcUxjd3JkTEVCbnRiZUZlcGNtSlZUeDdqVXNaSmRjY1pTRy8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2ky
YXNQOTJlcUxjd3JkTEVCbnRiZUZlcGNtSlZUeDdqVXNaSmRjY1pTRy8wLzIzN0NC
N0YxQ0Q0NUFFREQ2MUM5MzQ5RjQxMUI5QzlDQUYwQzFERTkubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAr4JaDANBAIAAjAHAwUAKAR+LDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEJPcwDQYJKoZIhvcNAQELBQADggEBAIJa6MSyeMVjuOXARktN
qxikLYLXUQ269t2MXjrUbmsXVOJ6/tq0Kl+hLUPbfFHk3Q9NEDxeRBhMtO+whF+D
xv8UqueFczW2PGdoS0CH6wc/it/M3x1Vtw8gJFN9uhrI2edZMG86g53QzjOitwaj
UyzsyVMMWat/mrG4iJOpUsNKtz+aA9Mo3yth7FZs1Xy+Q3Ea+1bzqoE68lB+kPWK
u+0eA2gIpE9n5pAPdhtwgU8D8H3a95K+SLtptMtDV9Kl+BttZFJPjWSUdRpmRV/d
hrsdE4OfnNDLGRP93ObyXDEbwTMknKcdXn/m3tKLLvV+CXaGuwRGwVByCAGQmbWD
uI8=
-----END CERTIFICATE-----
Generated at Mon Nov 3 05:25:03 2025 by rpki-client