
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32932D9CD5760D8DDD1E9BB55DFD3D8B33465BE6.cer
File: 32932D9CD5760D8DDD1E9BB55DFD3D8B33465BE6.cer (raw, json)
Hash identifier: dxrWglUCEo9kZUmWC16YQE/8iN/50mPELGGo3EGD+rA=
Subject key identifier: 32:93:2D:9C:D5:76:0D:8D:DD:1E:9B:B5:5D:FD:3D:8B:33:46:5B:E6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3D9D0AD233AE9B915F56C5C00005B3C2855AA411
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4FDM4Nmg9nS72dt9U4MHmn1qdrMnQRizH21i3aDK3o7b/0/32932D9CD5760D8DDD1E9BB55DFD3D8B33465BE6.mft
caRepository: rsync://rpki-repo.registro.br/repo/4FDM4Nmg9nS72dt9U4MHmn1qdrMnQRizH21i3aDK3o7b/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 31 Jul 2026 12:04:40 +0000
Certificate not after: Fri 30 Jul 2027 12:09:40 +0000
Subordinate resources: AS: 273701
IP: 2804:8aec::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 14 Aug 2026 09:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9d:0a:d2:33:ae:9b:91:5f:56:c5:c0:00:05:b3:c2:85:5a:a4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 31 12:04:40 2026 GMT
Not After : Jul 30 12:09:40 2027 GMT
Subject: CN=32932D9CD5760D8DDD1E9BB55DFD3D8B33465BE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:f3:63:0e:fe:30:99:99:92:fb:a0:a5:3a:
89:90:dd:a1:0c:d9:23:9f:30:61:be:e6:af:d2:bc:
90:04:d5:ed:67:55:87:7e:50:51:20:1e:39:f0:3d:
56:15:93:86:90:f8:f6:d3:23:06:30:d1:98:b4:31:
be:7f:86:b0:a8:40:7c:e9:c8:e2:35:c1:42:c5:85:
1a:52:08:30:c1:bb:61:14:96:89:d3:9d:87:c4:96:
a1:f7:6f:73:b6:be:bf:d6:2a:4c:67:ea:fa:f4:96:
c7:ab:ac:ba:f8:81:00:ff:36:2c:fb:0f:6e:4b:2d:
6a:f7:e3:40:e0:27:52:19:ba:98:2e:9d:02:cf:09:
e5:f4:a0:24:85:a5:9e:70:14:65:78:55:ca:12:c7:
ea:dd:3b:c8:98:11:9a:ef:f4:d4:56:55:1b:90:de:
3f:ac:69:fe:af:bc:ad:18:3b:89:b4:f4:f1:1a:96:
49:61:fb:70:05:41:0b:9c:f5:5d:24:12:85:d1:18:
46:49:f8:50:00:95:65:12:70:c3:2f:78:8d:94:76:
a7:50:8b:b2:ea:2f:b5:a7:34:0a:50:91:1c:6e:5b:
9a:75:42:22:74:63:41:1c:68:1e:a8:6e:41:6c:f3:
89:c3:ac:69:e6:42:c3:8c:15:b6:07:7b:9a:7c:21:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
32:93:2D:9C:D5:76:0D:8D:DD:1E:9B:B5:5D:FD:3D:8B:33:46:5B:E6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4FDM4Nmg9nS72dt9U4MHmn1qdrMnQRizH21i3aDK3o7b/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4FDM4Nmg9nS72dt9U4MHmn1qdrMnQRizH21i3aDK3o7b/0/32932D9CD5760D8DDD1E9BB55DFD3D8B33465BE6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8aec::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273701
Signature Algorithm: sha256WithRSAEncryption
53:b0:db:6c:b6:73:df:e7:d3:fc:9e:1e:85:79:45:89:05:0e:
b2:57:ef:a1:22:4d:c5:fa:8c:7b:25:0f:bb:33:d5:f7:35:0d:
eb:ad:eb:87:d3:e6:25:63:14:76:db:56:8a:69:04:da:84:62:
8a:2e:37:a7:30:cc:7b:04:23:62:fd:74:04:46:99:2b:f6:2e:
07:f5:c5:9e:77:82:bb:5e:4f:80:3a:d6:a9:90:4d:4e:ad:ff:
3c:b5:ff:b8:56:b7:d3:c8:b9:05:01:4f:5b:02:d0:47:22:57:
a5:be:df:dd:03:cd:1c:30:38:68:f7:1c:9c:43:e4:0e:a1:71:
32:db:6b:88:32:78:5b:41:eb:17:25:19:cf:c2:fc:da:1b:17:
a8:5f:6f:11:e8:c6:32:36:8a:1f:36:d8:b9:71:b4:36:25:83:
15:40:b8:d8:a0:bf:3f:f3:7e:15:b4:55:cb:52:75:e4:ff:a7:
c1:a4:f5:19:71:63:a5:e7:cb:58:88:5b:2e:89:cf:f2:1e:04:
e4:f3:7e:1c:f2:de:28:a4:bc:b7:6c:12:51:e4:75:35:81:76:
95:55:09:61:03:31:94:68:aa:8f:e9:51:1a:cd:76:fe:e5:45:
c9:35:a8:25:6c:2d:a4:a6:a3:be:0c:e9:c3:6b:ed:e9:c8:67:
22:23:6f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:48:15 2026 by rpki-client