
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A.cer
File: 416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A.cer (raw, json)
Hash identifier: EuIJMr/lzSW0M3vjD9lBRfiguqyQQ3nsT/2xV8Rnr6Q=
Subject key identifier: 41:6E:23:E1:1D:AA:06:88:85:CE:A8:EC:F4:CB:69:A0:E4:F9:6D:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0B55F8E458EC8A8F629F79A52E6A5AB1BF8ABEC0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A.mft
caRepository: rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 28 Sep 2026 01:53:42 +0000
Certificate not after: Mon 27 Sep 2027 01:58:42 +0000
Subordinate resources: AS: 274528
IP: 177.124.147.0/24
IP: 2804:9588::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 05 Oct 2026 19:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:55:f8:e4:58:ec:8a:8f:62:9f:79:a5:2e:6a:5a:b1:bf:8a:be:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 28 01:53:42 2026 GMT
Not After : Sep 27 01:58:42 2027 GMT
Subject: CN=416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:9d:df:af:1e:3d:b9:04:47:7c:f9:67:4f:
26:86:cc:08:90:e4:0d:c3:7a:ea:4d:b9:d5:0c:a1:
5e:6e:7e:c4:83:68:ab:89:66:15:ab:b4:be:40:2f:
c3:43:e9:40:5b:b7:08:fd:9e:b8:be:5a:6d:43:e6:
51:eb:27:ec:48:bb:7f:0b:75:1a:77:10:17:3f:bb:
ad:24:05:c0:bc:d4:03:ad:a0:11:c9:aa:af:8f:22:
61:83:f2:dc:4a:f9:04:cc:b9:7b:b8:0f:04:0c:fa:
de:28:db:ea:a7:bd:27:f9:70:01:19:a7:8c:48:ab:
cb:6b:9c:a4:aa:bf:20:fe:ef:f2:f1:c3:5c:26:49:
fe:d2:5d:5d:19:2d:0a:d1:eb:b2:6f:94:fa:f4:50:
06:6f:91:28:e8:1b:be:d4:44:6a:8b:f5:64:07:e3:
be:53:fa:a8:8a:c4:db:f5:f7:08:50:a0:8b:43:44:
cd:4c:07:5d:43:bb:40:6c:71:50:38:36:30:51:a3:
80:88:a1:f3:21:6d:ed:f3:d9:cf:9c:84:e1:fb:08:
73:5f:48:eb:98:81:d6:3e:16:2d:78:97:51:34:ff:
3e:cb:f3:4e:a8:59:1b:4f:0f:3a:90:e8:51:40:bb:
18:3b:9f:1c:65:51:52:10:a7:94:80:01:34:12:a0:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
41:6E:23:E1:1D:AA:06:88:85:CE:A8:EC:F4:CB:69:A0:E4:F9:6D:5A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.124.147.0/24
IPv6:
2804:9588::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
274528
Signature Algorithm: sha256WithRSAEncryption
a3:7a:e1:ad:d2:57:1e:f7:47:bf:95:d5:30:9a:cc:fe:2d:f0:
1d:c2:12:40:4e:f3:ab:01:b1:2c:a7:54:f8:0f:c7:ed:41:ef:
06:e1:4f:bc:f4:99:fa:b7:04:94:70:1b:70:12:12:22:ae:35:
c9:98:d1:58:dd:0c:61:2b:80:a8:17:b6:ec:df:35:44:61:56:
fc:41:4d:ea:c1:22:c4:f3:28:6e:b7:d1:86:30:99:75:74:95:
12:29:da:99:4d:2d:ad:c0:33:8a:44:8a:ac:25:fb:38:dc:4e:
e2:a9:c7:92:34:23:5e:7a:84:6f:0f:c6:a2:30:25:0d:eb:73:
c3:14:9f:43:17:20:49:63:9d:bd:f3:db:8c:1c:29:73:ed:30:
f8:1a:de:2f:d9:e0:c2:e6:77:ae:91:55:69:61:91:85:53:bf:
eb:98:21:9c:80:4a:62:9b:26:1a:06:87:0b:4a:d8:0f:a8:a3:
2a:a0:96:d1:fb:59:96:c3:c9:1a:3a:f1:7e:f9:53:c4:ef:d1:
6b:61:56:71:bf:09:d2:8a:f3:e1:ec:36:71:48:ff:0b:65:ca:
48:35:62:f6:bf:08:44:57:0d:11:12:dd:1d:41:fb:61:91:98:
f0:fc:c1:e6:c7:51:61:8a:7c:73:f0:23:4a:b2:07:86:57:1a:
87:8f:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:14:50 2026 by rpki-client