
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
File: 3DDE2C96A736983C4145E6A74FA601EF275DE118.cer (raw, json)
Hash identifier: MWfhQzgdSe+ePKEMZcbZLvmY9+d84sZ8KzbmUQFSFHE=
Subject key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1C3C1C2DFFE6C5584E839CA879BF9A7303B91F49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
caRepository: rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 25 Apr 2025 22:14:34 +0000
Certificate not after: Fri 24 Apr 2026 22:19:34 +0000
Subordinate resources: AS: 52783
IP: 131.255.116.0/22
IP: 138.122.132.0/22
IP: 138.255.192.0/22
IP: 170.78.116.0/22
IP: 170.254.76.0/22
IP: 177.74.184.0/21
IP: 177.200.64.0/20
IP: 2804:10f8::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3c:1c:2d:ff:e6:c5:58:4e:83:9c:a8:79:bf:9a:73:03:b9:1f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 25 22:14:34 2025 GMT
Not After : Apr 24 22:19:34 2026 GMT
Subject: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:21:2b:5c:5d:75:09:3c:60:9c:15:e3:85:
d4:02:17:ab:05:c6:6c:14:70:5d:0a:01:3d:29:d5:
22:43:7d:09:fb:bb:43:63:72:c9:7a:61:37:28:e5:
a5:1e:ad:55:16:aa:59:21:91:4f:f3:a9:30:39:b4:
09:ad:bb:39:9a:bd:ec:c4:23:de:96:da:cf:e1:8b:
43:8b:00:8b:54:15:0a:a1:80:54:4b:49:ae:c2:8c:
ce:16:78:bc:b1:81:56:8b:37:96:f7:5c:e5:ea:3f:
5a:9f:8d:ca:c8:ac:60:c4:ac:b9:ed:3f:9e:48:dd:
71:ca:27:4e:5f:01:19:f8:d6:a6:9a:98:0e:50:83:
03:c7:ba:04:1f:04:d8:07:97:af:30:cb:53:ae:c2:
eb:e5:95:b3:65:03:95:3c:06:cd:7a:4e:bd:cb:87:
4c:c0:91:2c:7b:34:e4:1b:41:55:ed:44:ad:50:fb:
46:0a:88:68:3a:84:1c:21:7d:26:09:9f:30:c1:90:
2b:c5:48:2f:83:0b:bc:61:e0:ed:e5:23:71:5e:ae:
be:d1:81:42:bb:cb:cd:8b:ba:6d:cf:20:8c:83:cd:
6c:0f:15:a5:ad:ef:16:76:0f:ec:81:0d:d1:b9:e5:
d7:6a:55:06:52:04:57:1e:4f:58:eb:f5:fe:fa:27:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.116.0/22
138.122.132.0/22
138.255.192.0/22
170.78.116.0/22
170.254.76.0/22
177.74.184.0/21
177.200.64.0/20
IPv6:
2804:10f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52783
Signature Algorithm: sha256WithRSAEncryption
4d:f2:97:2a:09:bd:f0:35:f3:90:a4:b5:9e:2c:ad:c6:86:7a:
bf:e3:00:ae:e7:2e:9a:07:8b:1f:8c:92:6a:4d:39:75:58:61:
e3:d0:e4:27:50:94:5f:62:2c:48:03:1c:78:aa:b5:6e:ef:55:
ce:71:59:67:14:0d:0b:3e:6f:cd:07:92:78:fc:bc:60:de:33:
c3:15:d1:1e:c6:f7:2c:d7:91:96:90:c3:1f:c7:fd:da:37:c9:
7d:60:0d:ba:f0:44:33:e6:3b:de:7b:a7:e0:90:ae:1c:cf:5e:
c5:9c:1e:b5:be:bd:2d:fa:21:d1:7d:6e:2e:76:84:b5:65:43:
d6:62:59:b3:a1:7a:52:20:6c:a1:d9:18:a7:b9:80:80:f2:c5:
38:8a:95:7c:e3:2f:5f:4c:d2:0c:b1:9d:18:ee:e1:9f:36:c9:
17:f1:0a:7a:02:e4:9f:10:9e:cc:1d:b4:bd:aa:83:c5:43:75:
f7:b2:a3:ed:c5:5e:36:a7:31:77:97:cd:ea:0d:10:59:20:3a:
90:3b:2c:19:05:69:bc:42:e7:1d:de:b8:a0:c3:d7:b7:c0:28:
a9:b2:e9:e0:00:b7:b4:91:20:17:b6:82:40:d8:c4:fd:d4:13:
77:eb:89:dd:08:e0:09:37:5d:9c:1e:80:d5:8b:d5:1a:2c:51:
4b:c9:27:e0
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUHDwcLf/mxVhOg5yoeb+acwO5H0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MjUyMjE0MzRaFw0yNjA0MjQyMjE5MzRaMDMxMTAvBgNV
BAMTKDNEREUyQzk2QTczNjk4M0M0MTQ1RTZBNzRGQTYwMUVGMjc1REUxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6iErXF11CTxgnBXjhdQCF6sF
xmwUcF0KAT0p1SJDfQn7u0Njcsl6YTco5aUerVUWqlkhkU/zqTA5tAmtuzmavezE
I96W2s/hi0OLAItUFQqhgFRLSa7CjM4WeLyxgVaLN5b3XOXqP1qfjcrIrGDErLnt
P55I3XHKJ05fARn41qaamA5QgwPHugQfBNgHl68wy1OuwuvllbNlA5U8Bs16Tr3L
h0zAkSx7NOQbQVXtRK1Q+0YKiGg6hBwhfSYJnzDBkCvFSC+DC7xh4O3lI3Ferr7R
gUK7y82Lum3PIIyDzWwPFaWt7xZ2D+yBDdG55ddqVQZSBFceT1jr9f76J0+fAgMB
AAGjggNeMIIDWjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ93iyWpzaYPEFF
5qdPpgHvJ13hGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjRN
d2U4ZHhwdWZLdXJTZjJCeG5TS3ZZZTNoOFJzc2l2NTU3eEI5TjlYWUEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0I0
TXdlOGR4cHVmS3VyU2YyQnhuU0t2WWUzaDhSc3NpdjU1N3hCOU45WFlBLzEvM0RE
RTJDOTZBNzM2OTgzQzQxNDVFNkE3NEZBNjAxRUYyNzVERTExOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEH
AQH/BEMwQTAwBAIAATAqAwQCg/90AwQCinqEAwQCiv/AAwQCqk50AwQCqv5MAwQD
sUq4AwQEschAMA0EAgACMAcDBQAoBBD4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDOLzANBgkqhkiG9w0BAQsFAAOCAQEATfKXKgm98DXzkKS1niytxoZ6v+MArucu
mgeLH4ySak05dVhh49DkJ1CUX2IsSAMceKq1bu9VznFZZxQNCz5vzQeSePy8YN4z
wxXRHsb3LNeRlpDDH8f92jfJfWANuvBEM+Y73nun4JCuHM9exZwetb69Lfoh0X1u
LnaEtWVD1mJZs6F6UiBsodkYp7mAgPLFOIqVfOMvX0zSDLGdGO7hnzbJF/EKegLk
nxCezB20vaqDxUN197Kj7cVeNqcxd5fN6g0QWSA6kDssGQVpvELnHd64oMPXt8Ao
qbLp4AC3tJEgF7aCQNjE/dQTd+uJ3QjgCTddnB6A1YvVGixRS8kn4A==
-----END CERTIFICATE-----
Generated at Mon Nov 3 05:33:53 2025 by rpki-client