
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3C152C142BDC8E433C414ED2C383FEDEA6AA2185.cer
File: 3C152C142BDC8E433C414ED2C383FEDEA6AA2185.cer (raw, json)
Hash identifier: /W4eFOI7FveXfaRo3mYisVKkteO6vxo3rIggAUExRq4=
Subject key identifier: 3C:15:2C:14:2B:DC:8E:43:3C:41:4E:D2:C3:83:FE:DE:A6:AA:21:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2B7FFB38D0DCB0E27645537AF591424E04BBCF73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/3C152C142BDC8E433C414ED2C383FEDEA6AA2185.mft
caRepository: rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 13 Aug 2026 18:14:06 +0000
Certificate not after: Thu 12 Aug 2027 18:19:06 +0000
Subordinate resources: AS: 273477
IP: 2804:8f38::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 06:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7f:fb:38:d0:dc:b0:e2:76:45:53:7a:f5:91:42:4e:04:bb:cf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 13 18:14:06 2026 GMT
Not After : Aug 12 18:19:06 2027 GMT
Subject: CN=3C152C142BDC8E433C414ED2C383FEDEA6AA2185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:03:c0:78:dc:f0:1b:2c:f2:8d:c1:f4:ab:
57:c3:bb:eb:e3:22:e1:8d:b3:b3:14:80:76:35:d5:
ad:62:98:ad:8c:ce:ab:7e:1d:b4:c5:8f:9c:7e:6d:
cf:9c:94:d9:80:bf:5e:73:33:ea:4c:0c:d0:c9:e0:
d3:18:47:98:a6:50:d8:32:69:3f:75:01:66:4f:64:
aa:57:c1:75:a1:1c:cd:ca:01:11:98:e6:61:a8:75:
8b:83:a0:b2:57:50:00:b4:ba:07:73:2c:83:19:e4:
1b:09:7f:9b:3d:9c:4a:9c:5a:e0:47:2e:2a:12:65:
f3:fb:3d:f5:a5:2e:94:f1:90:5e:94:18:3a:1f:fc:
fa:96:15:e8:76:5a:8f:eb:8b:76:59:80:8f:c8:80:
61:d4:73:6a:04:c9:24:44:52:1b:c7:6c:31:80:0c:
80:84:0e:77:67:57:f6:85:39:b7:60:76:41:28:9e:
d9:b9:2b:b6:45:82:1f:ec:11:a8:7d:ab:50:b1:9e:
fe:a4:4b:67:93:c9:7a:06:51:39:f3:47:f0:55:13:
fd:2b:b5:88:f5:69:b9:84:68:f3:b5:b6:a8:9e:d4:
5b:26:af:44:91:30:c8:51:8d:d5:eb:33:3e:d4:28:
54:d0:71:cd:b4:25:b9:e1:ea:06:54:33:cd:1c:d8:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3C:15:2C:14:2B:DC:8E:43:3C:41:4E:D2:C3:83:FE:DE:A6:AA:21:85
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/3C152C142BDC8E433C414ED2C383FEDEA6AA2185.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8f38::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273477
Signature Algorithm: sha256WithRSAEncryption
4a:b3:a6:9e:3b:19:d6:0e:fc:4e:08:25:2a:89:e7:12:fd:cd:
85:8c:c5:b4:0e:75:e4:16:66:be:62:f7:3d:be:01:f2:80:80:
0a:8f:ff:21:3f:04:c4:86:e6:81:d2:9e:6c:56:0a:6e:11:3d:
dc:2f:42:5e:78:5a:0f:55:3e:75:e9:8f:ab:27:db:50:67:1b:
79:c1:fc:53:21:92:52:b1:b0:33:dd:4c:30:86:72:ae:2c:f6:
50:e6:4a:3e:35:aa:62:7c:49:9f:e5:73:1b:28:f2:3d:0a:a2:
d9:f1:86:3c:36:15:4e:67:6d:6c:77:e8:ca:45:54:d4:99:bc:
51:84:ef:98:8c:85:5d:cb:bb:e1:59:2f:d6:43:b9:2b:c2:52:
da:c8:aa:b2:73:7e:4d:92:5f:d4:c7:b8:01:65:85:27:60:e3:
ef:f9:d9:61:c7:78:72:44:e9:70:6a:8a:70:8c:16:78:40:cc:
1a:5e:ea:9f:20:53:2e:8f:bd:a9:55:ba:de:24:73:a8:e3:4b:
c7:ef:68:a3:2c:a5:cd:ae:17:d4:49:a2:c4:c9:1d:ac:43:e8:
bb:b9:6e:e4:dd:dc:78:b7:f0:3f:99:34:5f:ee:80:0c:fb:32:
05:11:cc:b7:7b:be:7a:8e:c8:56:aa:42:73:c8:6e:fb:39:73:
a3:3e:f1:98
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIUK3/7ONDcsOJ2RVN69ZFCTgS7z3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA4MTMxODE0MDZaFw0yNzA4MTIxODE5MDZaMDMxMTAvBgNV
BAMTKDNDMTUyQzE0MkJEQzhFNDMzQzQxNEVEMkMzODNGRURFQTZBQTIxODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5egPAeNzwGyzyjcH0q1fDu+vj
IuGNs7MUgHY11a1imK2Mzqt+HbTFj5x+bc+clNmAv15zM+pMDNDJ4NMYR5imUNgy
aT91AWZPZKpXwXWhHM3KARGY5mGodYuDoLJXUAC0ugdzLIMZ5BsJf5s9nEqcWuBH
LioSZfP7PfWlLpTxkF6UGDof/PqWFeh2Wo/ri3ZZgI/IgGHUc2oEySREUhvHbDGA
DICEDndnV/aFObdgdkEontm5K7ZFgh/sEah9q1Cxnv6kS2eTyXoGUTnzR/BVE/0r
tYj1abmEaPO1tqie1Fsmr0SRMMhRjdXrMz7UKFTQcc20Jbnh6gZUM80c2MX1AgMB
AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8FSwUK9yOQzxB
TtLDg/7epqohhTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU0h2
TVh5U1pGVmkzcnBndDNjNHoxTGNjTkpWVERHU2V4U2E3QkdDTVp0Ui8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU0h2
TVh5U1pGVmkzcnBndDNjNHoxTGNjTkpWVERHU2V4U2E3QkdDTVp0Ui8wLzNDMTUy
QzE0MkJEQzhFNDMzQzQxNEVEMkMzODNGRURFQTZBQTIxODUubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEjzgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCxF
MA0GCSqGSIb3DQEBCwUAA4IBAQBKs6aeOxnWDvxOCCUqiecS/c2FjMW0DnXkFma+
Yvc9vgHygIAKj/8hPwTEhuaB0p5sVgpuET3cL0JeeFoPVT516Y+rJ9tQZxt5wfxT
IZJSsbAz3UwwhnKuLPZQ5ko+NapifEmf5XMbKPI9CqLZ8YY8NhVOZ21sd+jKRVTU
mbxRhO+YjIVdy7vhWS/WQ7krwlLayKqyc35Nkl/Ux7gBZYUnYOPv+dlhx3hyROlw
aopwjBZ4QMwaXuqfIFMuj72pVbreJHOo40vH72ijLKXNrhfUSaLEyR2sQ+i7uW7k
3dx4t/A/mTRf7oAM+zIFEcy3e756jshWqkJzyG77OXOjPvGY
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:56:56 2026 by rpki-client