
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/288267D3244089D185E376664BAE168B0EB28E94.cer
File: 288267D3244089D185E376664BAE168B0EB28E94.cer (raw, json)
Hash identifier: YQ2YwEbC/sa9R2IoIYsH5Dupzz6sIZ9EH2yKufxx7eg=
Subject key identifier: 28:82:67:D3:24:40:89:D1:85:E3:76:66:4B:AE:16:8B:0E:B2:8E:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 33B68962A64259573495714D434BD7F1EC37DA10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/288267D3244089D185E376664BAE168B0EB28E94.mft
caRepository: rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 15 Sep 2026 17:53:43 +0000
Certificate not after: Tue 14 Sep 2027 17:58:43 +0000
Subordinate resources: AS: 262779
IP: 186.227.240.0/20
IP: 2804:3210::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 13:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b6:89:62:a6:42:59:57:34:95:71:4d:43:4b:d7:f1:ec:37:da:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 15 17:53:43 2026 GMT
Not After : Sep 14 17:58:43 2027 GMT
Subject: CN=288267D3244089D185E376664BAE168B0EB28E94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:17:36:4f:8c:70:57:ae:db:6b:ae:91:d3:
39:4d:7b:b1:f9:e3:94:f8:ce:0d:15:48:71:6d:02:
0c:1e:64:ab:98:b5:a8:31:f6:b0:66:79:a1:1f:bf:
e0:1c:ec:d6:2f:cc:07:14:0a:44:58:a1:6a:a3:4d:
2b:f9:ad:97:67:61:f3:d3:8b:ae:44:b6:68:8d:88:
ec:17:30:95:3c:90:04:7e:8a:a8:8c:b1:10:68:14:
fb:3e:bb:3d:78:3c:52:0f:fb:3a:4b:58:f5:35:f2:
b0:42:c1:dc:0e:27:04:ae:3e:c8:b8:83:43:17:b5:
a2:b4:15:35:39:f0:8a:34:0e:1b:4a:2b:96:24:24:
67:95:c7:cd:62:8e:49:95:df:e7:af:48:30:40:74:
44:16:a6:ec:d8:a8:4d:a7:58:c3:d8:76:57:0e:32:
15:45:cc:09:91:b1:af:ce:df:ea:24:bf:e3:7c:b0:
68:ec:0a:f5:de:26:76:c0:2b:ae:b7:82:29:2b:46:
90:31:09:d1:69:84:b6:c2:ff:14:90:de:54:f5:93:
97:00:f8:f0:06:d6:c2:38:3b:4d:fe:00:3f:03:ad:
f5:62:ac:42:d1:b9:a7:be:a9:39:65:cd:8d:99:14:
91:74:ba:d0:e9:67:85:1a:0f:70:38:e6:6c:6e:28:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
28:82:67:D3:24:40:89:D1:85:E3:76:66:4B:AE:16:8B:0E:B2:8E:94
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/288267D3244089D185E376664BAE168B0EB28E94.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.227.240.0/20
IPv6:
2804:3210::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262779
Signature Algorithm: sha256WithRSAEncryption
0b:79:5e:fb:2b:d2:24:56:1c:bf:4c:63:f6:4b:b5:54:99:f5:
83:cb:b6:77:00:e4:5f:64:a3:86:da:22:59:dd:2e:5d:21:37:
58:5d:12:b6:5f:9b:e2:e5:f7:64:a1:6b:bd:4b:f5:dd:28:89:
57:e4:6c:2e:7d:a1:ef:69:df:38:35:f9:f4:e8:2c:24:af:49:
7e:68:f1:ae:56:68:aa:4e:6e:3d:da:38:f7:1c:76:27:be:da:
d6:02:b3:ab:ec:4a:29:d5:1c:22:f7:81:c9:40:3e:55:1e:48:
e7:df:24:9e:e6:61:33:72:84:e5:d5:71:82:08:39:4f:80:d3:
86:d8:7b:23:54:7c:c2:7e:32:2f:10:76:ce:02:77:e7:82:b6:
f7:cd:7c:07:9e:7f:c1:a5:b5:20:64:f3:e7:74:6b:a5:bd:0a:
5e:a3:f9:4c:6d:43:9d:ad:7c:43:df:a5:c5:f5:70:d9:ec:41:
d3:6e:a0:b7:51:b1:71:53:7b:26:2d:4c:0d:bb:77:b8:58:0d:
89:13:b9:1a:f5:cd:70:7e:d9:e3:f4:c6:32:e3:8a:a8:84:94:
9c:c3:73:ce:98:6c:79:46:a6:5d:8a:1f:45:3c:49:ed:b7:0e:
41:aa:65:7f:d8:66:69:10:63:2f:79:bb:86:ef:2f:8e:cd:bf:
73:64:e1:20
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUM7aJYqZCWVc0lXFNQ0vX8ew32hAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA5MTUxNzUzNDNaFw0yNzA5MTQxNzU4NDNaMDMxMTAvBgNV
BAMTKDI4ODI2N0QzMjQ0MDg5RDE4NUUzNzY2NjRCQUUxNjhCMEVCMjhFOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHRc2T4xwV67ba66R0zlNe7H5
45T4zg0VSHFtAgweZKuYtagx9rBmeaEfv+Ac7NYvzAcUCkRYoWqjTSv5rZdnYfPT
i65EtmiNiOwXMJU8kAR+iqiMsRBoFPs+uz14PFIP+zpLWPU18rBCwdwOJwSuPsi4
g0MXtaK0FTU58Io0DhtKK5YkJGeVx81ijkmV3+evSDBAdEQWpuzYqE2nWMPYdlcO
MhVFzAmRsa/O3+okv+N8sGjsCvXeJnbAK663gikrRpAxCdFphLbC/xSQ3lT1k5cA
+PAG1sI4O03+AD8DrfVirELRuae+qTllzY2ZFJF0utDpZ4UaD3A45mxuKIm5AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQogmfTJECJ0YXj
dmZLrhaLDrKOlDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkdR
MkJHQXpTTXFEeG9OQTJOalJzUWVKbkpHZks3QktLdFRZYzhOVmpvNzEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JH
UTJCR0F6U01xRHhvTkEyTmpSc1FlSm5KR2ZLN0JLS3RUWWM4TlZqbzcxLzAvMjg4
MjY3RDMyNDQwODlEMTg1RTM3NjY2NEJBRTE2OEIwRUIyOEU5NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEuuPwMA0EAgACMAcDBQAoBDIQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQCezANBgkqhkiG9w0BAQsFAAOCAQEAC3le+yvSJFYcv0xj
9ku1VJn1g8u2dwDkX2SjhtoiWd0uXSE3WF0Stl+b4uX3ZKFrvUv13SiJV+RsLn2h
72nfODX59OgsJK9JfmjxrlZoqk5uPdo49xx2J77a1gKzq+xKKdUcIveByUA+VR5I
598knuZhM3KE5dVxggg5T4DThth7I1R8wn4yLxB2zgJ354K29818B55/waW1IGTz
53Rrpb0KXqP5TG1Dna18Q9+lxfVw2exB026gt1GxcVN7Ji1MDbt3uFgNiRO5GvXN
cH7Z4/TGMuOKqISUnMNzzphseUamXYofRTxJ7bcOQaplf9hmaRBjL3m7hu8vjs2/
c2ThIA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:14:54 2026 by rpki-client