
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3C2AF77E5E71F58F45A1FB6886AED336B185D531.cer
File: 3C2AF77E5E71F58F45A1FB6886AED336B185D531.cer (raw, json)
Hash identifier: PWJYAPfmg0Vi/62PnA6Mv2SfsnpdL68J17hT0SXviIc=
Subject key identifier: 3C:2A:F7:7E:5E:71:F5:8F:45:A1:FB:68:86:AE:D3:36:B1:85:D5:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5A6C3FAF03801DFE2B0EBC59E10C7CE5A391F2A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C2AF77E5E71F58F45A1FB6886AED336B185D531.mft
caRepository: rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 22 Aug 2026 19:20:43 +0000
Certificate not after: Sat 21 Aug 2027 19:25:43 +0000
Subordinate resources: AS: 272645
IP: 201.216.104.0/22
IP: 2804:8678::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6c:3f:af:03:80:1d:fe:2b:0e:bc:59:e1:0c:7c:e5:a3:91:f2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 22 19:20:43 2026 GMT
Not After : Aug 21 19:25:43 2027 GMT
Subject: CN=3C2AF77E5E71F58F45A1FB6886AED336B185D531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:0f:25:54:bd:e4:a9:94:0d:0b:86:f1:fd:
f2:ce:74:72:90:21:2b:62:fb:e4:2b:5a:f4:a3:67:
5b:f2:2e:73:5d:6d:e4:3c:06:0f:a0:d9:f9:bd:7b:
64:31:7e:e7:e8:fb:30:4e:fc:32:43:a9:2c:79:04:
da:a0:95:2c:e4:a2:0c:0b:e1:b0:11:56:f3:e3:36:
16:56:b0:53:c6:34:a2:f8:73:b5:b7:37:f7:30:23:
68:27:28:6f:02:4c:94:72:ab:52:66:30:42:4f:92:
cb:f2:bd:69:fa:2b:48:23:00:da:cf:c8:a1:55:ef:
e8:fd:5c:b8:4a:3a:8b:28:f5:95:82:a8:dc:7c:97:
57:0b:6e:d2:07:20:ba:57:de:d9:69:2e:f5:80:7d:
e6:40:85:c0:d1:33:43:da:65:01:04:bc:89:fa:46:
c9:41:d6:60:70:38:ba:0d:a5:e3:05:81:b8:97:7a:
c6:8f:08:1a:7a:6b:49:07:37:e2:dd:b4:7a:3a:ae:
6c:97:e9:17:7a:43:b9:60:e9:df:32:bb:64:4d:a9:
72:38:42:74:53:84:3a:77:cd:e9:ce:5c:1c:20:f0:
b4:53:14:23:76:59:3d:da:aa:95:8d:3c:ea:5c:55:
8d:ae:83:bc:5a:a1:23:61:8b:ac:1c:b5:8c:d4:52:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3C:2A:F7:7E:5E:71:F5:8F:45:A1:FB:68:86:AE:D3:36:B1:85:D5:31
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C2AF77E5E71F58F45A1FB6886AED336B185D531.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.104.0/22
IPv6:
2804:8678::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
272645
Signature Algorithm: sha256WithRSAEncryption
c2:44:5a:86:e8:67:4a:60:04:67:a5:10:ce:0e:6b:cf:1d:85:
ef:1a:e4:3d:98:b7:a4:55:7f:4a:ed:2b:23:fc:dd:ef:2b:72:
85:55:58:c2:2a:98:c5:0e:2a:a5:57:71:98:b9:dc:cd:01:0f:
26:d8:ca:a6:51:07:06:dd:1c:ec:2e:1e:65:36:b9:ac:34:42:
00:31:c5:02:8b:21:a3:66:df:5a:a9:a2:3c:87:8a:7e:5c:98:
43:21:13:24:5c:6d:32:ee:d1:24:bb:b7:3a:7b:d4:39:57:75:
91:ca:5d:d8:d4:b7:e0:b7:07:71:e1:8e:5c:e8:a7:55:11:df:
61:8d:7a:71:21:0a:f9:1a:db:a5:bc:b6:d0:59:3a:c7:95:29:
90:4b:bc:1a:17:46:77:c9:df:90:af:7e:4f:bc:18:ee:c5:86:
aa:e9:0b:97:f1:29:d2:a7:b0:08:c9:c6:8f:4a:9e:b5:5a:db:
57:cd:2b:88:6d:48:fc:6e:5c:02:b1:ab:06:9a:c9:07:6d:d3:
7b:3c:d0:bf:09:a1:13:49:2c:18:49:be:26:8a:23:cb:09:fd:
41:1b:4d:07:cd:1e:83:82:de:a6:6a:e0:75:af:37:59:f0:82:
3d:7c:7c:fa:2c:c1:c3:30:16:ab:e2:46:3d:59:8b:e5:5a:cc:
b2:91:c0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:01:15 2026 by rpki-client