
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
File: 4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer (raw, json)
Hash identifier: 3FnD4B9tcItlSgSN7QPsAq5DvJ+0fQtR2a8t3g6WC1A=
Subject key identifier: 4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 12AE4302EEADFEE2F88CB61981A22B41A4E9D1CE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
caRepository: rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 22 Oct 2026 19:31:50 +0000
Certificate not after: Thu 21 Oct 2027 19:36:50 +0000
Subordinate resources: AS: 273485
IP: 2804:8f58::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 04 Nov 2026 16:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ae:43:02:ee:ad:fe:e2:f8:8c:b6:19:81:a2:2b:41:a4:e9:d1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 22 19:31:50 2026 GMT
Not After : Oct 21 19:36:50 2027 GMT
Subject: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:94:9f:74:cd:99:8c:7c:7d:bd:2f:f9:6b:
85:52:c0:14:ce:fc:06:9e:02:a4:3b:f1:ff:bc:36:
8e:de:5d:89:53:f6:71:fe:7e:99:52:49:13:5d:4f:
3e:0a:dc:ec:eb:7e:0c:9c:bd:3d:4f:14:ea:95:8b:
79:28:73:24:2c:0a:80:f3:33:50:c0:13:cb:80:02:
2a:cb:f5:6c:38:4e:3b:a8:7e:4a:79:18:de:eb:b2:
86:68:af:83:3f:c3:e0:d9:88:9a:ff:e6:58:50:34:
f1:e2:9f:fb:22:7c:4b:7d:e9:7c:b1:d5:57:71:6d:
10:fb:c6:d0:d2:ff:0a:04:9d:4f:7a:95:f6:b0:62:
41:f5:0b:1d:b5:b5:fb:a5:c5:23:af:b0:b3:b2:08:
b3:19:4c:9b:2c:dc:c1:25:90:25:ca:7c:f0:77:27:
69:ca:df:23:76:3d:59:92:26:e7:60:23:68:26:7d:
63:e5:c1:54:de:7c:c3:b7:84:61:64:f4:65:8c:ef:
24:8a:60:10:f4:c0:ef:38:65:72:89:59:5d:1f:96:
e1:eb:5a:01:ac:04:f0:7e:45:a4:c8:56:b6:fd:41:
0a:36:b0:42:b4:03:12:3c:28:69:f6:12:11:54:b4:
e0:de:66:f7:4c:60:0d:de:36:f3:2e:ac:c5:5f:db:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8f58::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273485
Signature Algorithm: sha256WithRSAEncryption
2f:2c:8f:aa:8b:00:92:e1:e3:21:41:6e:67:79:bf:31:1c:fe:
71:dc:9d:38:e8:96:27:39:02:7e:f7:80:e2:5b:73:b7:5c:90:
7c:99:e5:4e:82:7d:5e:9e:f5:59:06:28:f5:60:a5:4e:a6:ef:
e6:04:15:6b:47:7b:90:ea:c4:20:c5:46:7d:cf:a0:d0:e0:9b:
cd:98:e0:9c:85:c0:06:8e:e9:e0:e7:27:61:97:b3:5b:9a:bd:
b2:fe:29:2d:9f:af:70:69:17:d7:b5:0e:b3:66:2a:71:94:b5:
a8:10:8a:46:31:19:69:60:20:a5:27:6d:72:48:37:9d:da:a6:
7a:c4:ba:44:55:91:2c:db:c3:af:83:94:a6:e1:6d:8a:72:4a:
34:25:33:da:8a:c3:ac:21:57:f4:9d:01:f9:24:8a:92:a2:ff:
27:71:be:54:04:a2:b1:4a:b3:4e:ea:91:8d:f9:76:90:ab:67:
96:dd:d7:0d:4f:21:6b:7d:6c:17:e0:3b:2e:2a:ea:02:47:1a:
da:44:c5:81:69:6c:af:59:cd:4a:71:be:c5:bb:6c:01:06:04:
d5:ab:90:64:85:1f:e5:95:8b:ae:d6:e3:75:f4:5e:e3:91:3c:
11:2b:42:b2:68:b6:26:e7:bf:52:2f:0d:63:a6:86:55:7a:82:
1a:09:8f:29
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUEq5DAu6t/uL4jLYZgaIrQaTp0c4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjEwMjIxOTMxNTBaFw0yNzEwMjExOTM2NTBaMDMxMTAvBgNV
BAMTKDREQ0I1QUJDNjJGQkJDODkwRkRBRjA1RTBEODZENzk5OUE2RUFEQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6JZSfdM2ZjHx9vS/5a4VSwBTO
/AaeAqQ78f+8No7eXYlT9nH+fplSSRNdTz4K3OzrfgycvT1PFOqVi3kocyQsCoDz
M1DAE8uAAirL9Ww4Tjuofkp5GN7rsoZor4M/w+DZiJr/5lhQNPHin/sifEt96Xyx
1VdxbRD7xtDS/woEnU96lfawYkH1Cx21tfulxSOvsLOyCLMZTJss3MElkCXKfPB3
J2nK3yN2PVmSJudgI2gmfWPlwVTefMO3hGFk9GWM7ySKYBD0wO84ZXKJWV0fluHr
WgGsBPB+RaTIVrb9QQo2sEK0AxI8KGn2EhFUtODeZvdMYA3eNvMurMVf29l3AgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRNy1q8Yvu8iQ/a
8F4NhteZmm6tsjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXVl
Zjhnb1ltMWhMQkJlN05qMkpGd0I2MjFkckdOMmpjQkNhNHdadmkxUTgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV1
ZWY4Z29ZbTFoTEJCZTdOajJKRndCNjIxZHJHTjJqY0JDYTR3WnZpMVE4LzAvNERD
QjVBQkM2MkZCQkM4OTBGREFGMDVFMEQ4NkQ3OTk5QTZFQURCMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASPWDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LE0wDQYJKoZIhvcNAQELBQADggEBAC8sj6qLAJLh4yFBbmd5vzEc/nHcnTjolic5
An73gOJbc7dckHyZ5U6CfV6e9VkGKPVgpU6m7+YEFWtHe5DqxCDFRn3PoNDgm82Y
4JyFwAaO6eDnJ2GXs1uavbL+KS2fr3BpF9e1DrNmKnGUtagQikYxGWlgIKUnbXJI
N53apnrEukRVkSzbw6+DlKbhbYpySjQlM9qKw6whV/SdAfkkipKi/ydxvlQEorFK
s07qkY35dpCrZ5bd1w1PIWt9bBfgOy4q6gJHGtpExYFpbK9ZzUpxvsW7bAEGBNWr
kGSFH+WVi67W43X0XuORPBErQrJotibnv1IvDWOmhlV6ghoJjyk=
-----END CERTIFICATE-----
Generated at Tue Nov 3 16:20:56 2026 by rpki-client