
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
File: 2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer (raw, json)
Hash identifier: SQAGdQsaa8s3s51g2oJdsao0/ZMJ89PgLjaVsrHrF8g=
Subject key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6BDDFEEFB55C0507ECEA5A665F715F585A82F536
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft
caRepository: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 07 May 2025 20:54:40 +0000
Certificate not after: Wed 06 May 2026 20:59:40 +0000
Subordinate resources: AS: 264397
IP: 131.161.92.0/22
IP: 164.163.36.0/22
IP: 170.239.96.0/22
IP: 2804:1dd4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:dd:fe:ef:b5:5c:05:07:ec:ea:5a:66:5f:71:5f:58:5a:82:f5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 7 20:54:40 2025 GMT
Not After : May 6 20:59:40 2026 GMT
Subject: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:94:9a:42:53:74:fd:60:76:e1:f0:ac:f0:
7c:15:3b:32:9c:16:51:c9:16:65:b5:58:15:2c:1a:
2e:26:13:f2:60:28:c0:50:ef:d5:79:f1:2e:73:13:
a9:e7:21:40:c9:ce:ed:eb:16:b3:d8:bd:f9:61:a8:
33:01:b4:b5:5f:4d:90:fd:7b:cf:fd:71:4e:d7:57:
21:c0:74:25:e4:df:a8:c3:71:b1:5e:be:bb:46:c5:
9b:82:22:73:67:0d:bb:52:72:d0:77:0f:f5:76:ac:
89:52:f3:c5:07:aa:41:5f:d3:c5:a8:e7:f6:50:41:
d1:59:08:b2:82:83:f4:11:26:44:00:2c:dc:37:8e:
9c:0b:79:e7:4c:7d:c0:42:fe:d9:a8:c6:65:cd:68:
05:a0:47:f7:76:4d:7e:cc:58:f1:84:8f:7c:7a:cb:
2b:b9:65:f6:7a:a5:a6:69:e3:81:6a:b8:bd:22:25:
e9:59:c6:8d:15:6c:74:f5:df:b4:f9:8f:f0:85:e3:
c7:38:d7:6d:76:74:42:f8:20:dd:7a:20:27:e4:31:
3c:ee:92:f3:a6:1b:46:fc:1e:5a:da:42:3b:ae:44:
89:a6:9c:0f:f5:f3:03:a5:0f:7c:4c:1d:ad:d8:2d:
d2:a9:f1:b1:72:7f:91:31:9e:4b:f7:58:7d:ea:08:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.92.0/22
164.163.36.0/22
170.239.96.0/22
IPv6:
2804:1dd4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264397
Signature Algorithm: sha256WithRSAEncryption
1d:15:d5:b4:14:cc:2d:dd:62:c1:52:b6:93:1c:2a:77:dc:60:
4c:95:10:83:a0:56:93:5f:fc:57:9b:42:b7:d5:ec:2b:f9:2d:
d6:fc:53:11:62:b2:df:4e:af:6d:f7:33:57:e5:d8:54:36:20:
47:e9:6a:a3:bb:a8:71:bd:21:06:83:8b:8b:18:29:36:d8:92:
d8:e0:79:c0:20:e3:a6:39:7d:01:ac:c8:25:14:a1:84:06:b4:
fa:b8:dd:a6:3f:58:05:09:4c:1a:97:cf:70:d5:cc:69:d0:28:
af:99:75:5f:df:c6:96:8c:1a:b1:63:20:6f:16:f8:4e:16:3a:
12:99:14:53:be:d6:ff:08:b6:7c:b3:19:ae:8f:b0:6e:0f:fe:
39:4a:f4:a6:8b:d8:7a:a5:84:30:dc:6c:d8:ae:94:a8:48:b3:
ef:fc:20:55:51:47:ec:85:c1:1a:71:92:33:8b:86:94:7a:b1:
a5:c5:62:fd:84:44:27:03:86:2f:e5:42:0e:04:24:71:25:18:
64:62:7b:6e:1a:7b:3c:1c:80:44:60:55:74:d8:d1:83:3f:f3:
ce:dd:7c:a6:49:dc:4a:07:15:a1:90:95:e7:b7:11:09:fa:a5:
c9:67:6f:f7:bc:ab:19:bf:b8:24:0f:f4:da:47:b1:56:4b:29:
1e:9c:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:30:53 2025 by rpki-client