
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/405D2DEC132ACCB71362AFA8367808F3FDE8D341.cer
File: 405D2DEC132ACCB71362AFA8367808F3FDE8D341.cer (raw, json)
Hash identifier: Puy8rXIA1wA0Fyime1foEZ9FGeSFTsd8SOBN1mbH44Y=
Subject key identifier: 40:5D:2D:EC:13:2A:CC:B7:13:62:AF:A8:36:78:08:F3:FD:E8:D3:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 775188D4B66B8EC9A0DEE76C2B15F91F8B1FE77F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/405D2DEC132ACCB71362AFA8367808F3FDE8D341.mft
caRepository: rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 25 Sep 2026 16:35:02 +0000
Certificate not after: Fri 24 Sep 2027 16:40:02 +0000
Subordinate resources: AS: 262468
IP: 45.71.132.0/22
IP: 45.228.48.0/22
IP: 138.122.28.0/22
IP: 167.250.124.0/23
IP: 168.121.100.0/22
IP: 168.196.52.0/22
IP: 177.53.144.0/22
IP: 179.108.48.0/20
IP: 191.5.192.0/20
IP: 2804:e94::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 12:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:51:88:d4:b6:6b:8e:c9:a0:de:e7:6c:2b:15:f9:1f:8b:1f:e7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 25 16:35:02 2026 GMT
Not After : Sep 24 16:40:02 2027 GMT
Subject: CN=405D2DEC132ACCB71362AFA8367808F3FDE8D341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:ca:54:60:d0:fd:d4:c6:93:12:02:fd:5d:
b8:76:c8:19:ff:d8:10:d6:bd:62:e8:f7:3b:3d:fc:
30:48:f2:9f:6f:63:4a:1b:cf:10:8d:b4:5d:32:37:
d4:8e:b7:38:04:a0:a5:17:74:b6:ef:9f:d4:21:96:
28:53:3b:e7:41:ae:a4:30:e4:29:dc:fa:1c:51:91:
18:6f:e6:29:5d:bc:73:ac:4b:d9:78:25:9d:d5:b0:
35:3c:e3:9e:0b:0e:8e:c2:b4:3c:2f:a0:ac:e5:3c:
f0:a9:39:cb:1d:57:5a:20:d3:ff:51:54:3c:69:05:
d5:d7:99:12:f3:81:b2:ed:d5:c0:81:cd:0c:97:f6:
93:c8:93:54:92:82:34:09:9a:a0:f6:09:35:b6:cc:
04:eb:5f:77:15:76:19:b7:6c:14:14:6b:37:7d:cc:
5b:63:67:df:ef:3c:11:94:85:bb:c3:c5:50:07:9c:
ce:49:85:17:87:ef:78:89:42:9f:10:73:72:78:e0:
ce:40:8c:b5:77:63:48:bb:e8:69:f7:0b:e5:8c:f9:
f8:c1:0b:f7:90:9d:5b:6f:9d:6b:13:d4:9e:2d:37:
bf:de:ea:fe:ac:ba:ad:63:a1:60:c5:cb:1f:13:a7:
74:fb:fd:ec:43:32:e0:a3:21:ea:48:b2:17:cb:f9:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
40:5D:2D:EC:13:2A:CC:B7:13:62:AF:A8:36:78:08:F3:FD:E8:D3:41
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/405D2DEC132ACCB71362AFA8367808F3FDE8D341.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.132.0/22
45.228.48.0/22
138.122.28.0/22
167.250.124.0/23
168.121.100.0/22
168.196.52.0/22
177.53.144.0/22
179.108.48.0/20
191.5.192.0/20
IPv6:
2804:e94::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262468
Signature Algorithm: sha256WithRSAEncryption
2a:27:ae:17:2d:05:f5:ba:ba:2c:ac:9b:16:3e:58:1c:c9:d5:
ef:3f:c2:af:5b:bf:00:ef:12:0a:77:8d:0e:68:51:4b:da:16:
b0:3d:57:27:f3:a0:d8:dd:99:66:55:7c:bf:c6:39:7b:da:78:
42:fd:2a:3e:96:8d:72:1c:63:1c:7d:e6:6c:1a:62:06:c7:d7:
dd:a2:41:a2:f6:40:02:2e:4c:36:af:1d:e0:88:0a:ed:2e:47:
63:1e:2b:a4:e9:9b:b6:85:73:7c:75:4e:61:bb:c0:27:8a:c2:
c6:68:0c:e6:4a:e1:b7:94:0d:c6:6e:e2:a3:b2:20:22:bc:45:
1f:80:07:fd:3a:a7:cb:e9:53:74:46:1c:c5:55:c1:4e:54:c6:
c8:0c:b7:65:ad:91:c3:21:39:d3:60:dc:d3:f8:44:16:da:a3:
a4:f1:a0:97:32:a4:5d:27:76:ee:db:d2:eb:9a:d3:ad:9d:ad:
31:a2:66:ff:82:2c:d1:dd:6c:0c:8f:16:0a:44:75:55:f5:1b:
9f:c6:58:1a:55:82:c9:30:f9:c7:15:8b:e0:e3:d0:af:eb:d6:
04:cb:66:19:79:1b:f8:45:43:8a:8d:78:bf:ba:bb:8f:d2:3a:
7f:2a:73:07:06:4f:60:0e:5a:91:8e:9b:0c:c4:a6:c3:a3:a4:
36:59:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:37:29 2026 by rpki-client