
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
File: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer (raw, json)
Hash identifier: Gnq7cCF7Or2USWbjyL+j9OrlLtfxOtDrpv3UaDB+3cw=
Subject key identifier: 3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 49E3B9248A980EF061E6587D045384ACFFF2C9A1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
caRepository: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 17 Feb 2026 01:07:56 +0000
Certificate not after: Tue 16 Feb 2027 01:12:56 +0000
Subordinate resources: AS: 52847
IP: 177.66.148.0/22
IP: 2804:1084::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 24 Feb 2026 02:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e3:b9:24:8a:98:0e:f0:61:e6:58:7d:04:53:84:ac:ff:f2:c9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 17 01:07:56 2026 GMT
Not After : Feb 16 01:12:56 2027 GMT
Subject: CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:b8:90:c1:85:74:bb:a3:3b:fe:5c:e0:74:
e2:29:c8:34:0e:70:ff:5e:5f:b9:cb:9d:4f:8d:74:
db:d7:21:ff:49:ec:2a:83:a2:90:00:c2:7e:d5:3e:
42:2d:af:ca:ff:19:7e:76:4e:2b:0f:03:27:36:8f:
53:cb:f0:92:e1:1d:05:34:0f:1e:94:db:ba:f3:79:
45:f2:b7:7d:bc:f3:73:fe:0a:77:0a:67:18:e3:f8:
10:47:88:41:aa:e9:3c:1d:85:9f:5c:03:a1:ae:61:
75:45:66:74:c8:e5:20:1f:0a:ca:85:4b:37:dc:bb:
b9:b9:4e:c5:d5:54:05:15:6c:e6:0b:4c:1a:a2:40:
b9:96:dd:c9:51:a1:f4:91:b9:75:74:fc:47:0d:64:
8e:ed:50:7b:ca:8e:bf:21:fc:ed:44:62:fa:83:15:
e1:42:51:2f:c6:30:dc:55:8c:99:16:be:ab:95:28:
7c:03:10:0c:e2:66:39:f0:4f:0f:a5:03:4e:9b:5d:
89:ac:7b:9f:fd:fe:cf:90:39:48:32:05:76:43:18:
23:f0:f7:f9:3f:33:e5:9b:50:c4:ce:cd:17:d7:c4:
e9:3a:f7:8c:32:11:60:78:33:c7:16:f9:01:9d:be:
b8:8c:fb:c0:1e:44:b2:d7:76:88:dd:9d:9c:b8:5e:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.66.148.0/22
IPv6:
2804:1084::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52847
Signature Algorithm: sha256WithRSAEncryption
3c:33:77:b3:66:2d:76:c6:20:30:86:1f:0d:2f:3d:68:0b:fb:
fd:63:6d:41:51:8a:21:ad:06:45:55:c2:4d:c4:09:41:0c:46:
5a:a8:19:7c:02:18:87:38:3b:1a:60:ad:46:c0:d3:b2:77:f7:
91:96:3c:62:f8:0b:21:b6:29:a0:3a:9e:aa:44:0f:c4:dc:e9:
8c:f8:40:07:ac:01:64:f6:4d:ce:8e:37:2c:61:f6:f3:0c:58:
94:75:ee:63:a5:73:20:f1:4a:8a:34:ee:7a:e5:5f:3c:7b:71:
1a:e4:a0:04:3f:c5:ff:4a:16:66:8a:5d:4a:29:5e:7f:b1:bb:
8f:1e:b0:ca:f6:ca:e0:4f:33:82:a3:71:d6:77:16:8b:11:5f:
d0:cb:59:bf:1a:b3:2a:c4:8d:a3:04:5b:b0:90:55:d1:3e:b8:
53:d0:4c:60:77:a6:cc:26:f1:2d:cb:29:e9:f3:14:d2:de:d1:
7d:e6:09:7f:20:9e:43:72:88:e1:48:35:50:6f:50:bf:50:2d:
cf:cd:bf:e7:f1:3f:bc:ea:f1:4d:08:b1:dd:89:00:da:f1:7d:
25:3c:ef:78:8d:02:b7:06:6a:46:61:b3:d3:4f:e8:1c:39:4e:
26:72:ae:16:aa:0f:f6:40:ef:f1:bb:d8:9c:ac:44:83:ab:8c:
48:bc:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:34:25 2026 by rpki-client