
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
File: 3895E2089A93A58E1062DE9612B321CA505C51FA.cer (raw, json)
Hash identifier: 4/UigHteLOsmHqaH1o5Cd6iXtHTaRjT8w/2W437b9+8=
Subject key identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 63EABB08198B6014332421EC2481FDCD97751AFF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
caRepository: rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Feb 2026 18:45:18 +0000
Certificate not after: Wed 03 Feb 2027 18:50:18 +0000
Subordinate resources: AS: 262309
IP: 177.87.224.0/21
IP: 2804:7a8::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 23:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ea:bb:08:19:8b:60:14:33:24:21:ec:24:81:fd:cd:97:75:1a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 4 18:45:18 2026 GMT
Not After : Feb 3 18:50:18 2027 GMT
Subject: CN=3895E2089A93A58E1062DE9612B321CA505C51FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:50:82:74:4f:2f:8a:ef:58:94:7d:f1:a4:
2a:9c:21:3f:43:23:af:33:bd:4f:7b:bb:60:f2:93:
05:e4:32:8e:46:1a:f1:c9:bc:64:9a:d1:56:40:12:
70:04:e0:65:95:98:27:c3:fc:5e:01:50:b9:f8:a9:
e7:5d:5c:3b:65:99:33:9e:bd:f4:b1:81:5f:a4:d1:
6b:a4:20:f0:5e:06:f6:f6:70:d4:c7:a6:da:52:ec:
a0:68:95:d3:1b:15:17:9f:9e:1c:38:1f:45:1c:63:
46:76:d4:a1:d3:4d:cb:b1:76:d2:c4:73:70:22:a5:
21:27:48:59:d7:93:76:cb:f6:b4:f6:71:13:0f:9d:
49:d2:09:69:e6:9a:43:52:c1:76:35:8b:e6:3d:58:
2d:ea:bc:57:17:c9:11:06:2c:f1:0e:d7:6c:87:48:
1c:77:43:77:2e:8e:3c:ca:a7:ed:3a:6f:d5:05:7b:
f6:c7:88:f2:ed:2a:2c:3c:dd:81:75:fc:05:4c:14:
44:e8:11:6e:e8:91:00:e0:b2:c7:dd:4f:2a:e1:09:
01:c4:92:94:a5:ae:3f:69:47:14:a7:28:69:03:86:
00:85:d5:f7:b1:59:a0:8d:65:74:34:60:3e:76:c6:
16:8d:02:31:70:98:81:5b:d6:cc:b8:d2:f3:ae:a1:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.87.224.0/21
IPv6:
2804:7a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262309
Signature Algorithm: sha256WithRSAEncryption
da:3b:71:eb:66:14:de:7a:f0:d5:bc:a7:10:1d:80:61:56:8a:
1d:a7:e8:7d:a8:e8:0a:64:ba:77:fa:2a:9f:08:a1:a2:3b:d6:
b4:af:25:ae:43:22:2e:6c:fe:cb:14:ec:ee:cf:11:03:a9:21:
e2:e8:06:1a:9b:61:31:3c:16:64:61:ce:76:a9:57:0e:e2:b7:
68:91:4d:77:5e:d9:5e:95:61:f3:43:10:89:3f:d3:4d:12:59:
33:57:f4:97:fe:93:f8:b2:9c:95:19:22:34:4b:a4:e3:02:77:
f5:41:bd:54:f0:d1:58:b5:ac:a8:0a:e7:89:66:35:c7:51:ad:
8b:09:e4:02:b0:ad:75:ba:e2:9b:6a:36:db:29:30:fa:01:cd:
ab:3b:ab:13:fd:2b:68:80:37:0e:e7:9d:b6:fc:a4:8a:51:5f:
1f:24:86:49:5a:ef:18:f7:dd:b5:e9:a6:6e:4d:f6:a0:b2:51:
dc:8e:2e:f0:f5:27:0f:fa:d0:24:f6:62:81:01:7a:c2:7b:10:
b1:33:a0:35:a5:fb:f6:02:9e:b3:5b:f3:f6:8f:91:fe:0c:b8:
98:83:38:23:0c:d7:2b:75:93:b5:9a:aa:f0:8c:cb:ea:05:dd:
a8:6b:34:ad:a6:50:57:60:fd:ec:e9:01:c2:44:ba:a1:8c:69:
fa:ab:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:26:05 2026 by rpki-client