
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/6733D348A8A71D037A13D87DC6BA10EDF82E03F0.cer
File: 6733D348A8A71D037A13D87DC6BA10EDF82E03F0.cer (raw, json)
Hash identifier: y3DqkXQXbcrg7llNRSwR5Y1qIFBkNhLi2P7Spy0gQog=
Subject key identifier: 67:33:D3:48:A8:A7:1D:03:7A:13:D8:7D:C6:BA:10:ED:F8:2E:03:F0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2830AEF0658078544D5C77E9AABE0FC5B8B655F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/6733D348A8A71D037A13D87DC6BA10EDF82E03F0.mft
caRepository: rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 28 Aug 2026 17:32:40 +0000
Certificate not after: Fri 27 Aug 2027 17:37:40 +0000
Subordinate resources: AS: 263878
IP: 138.204.20.0/22
IP: 2804:2720::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 06 Oct 2026 16:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:30:ae:f0:65:80:78:54:4d:5c:77:e9:aa:be:0f:c5:b8:b6:55:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 28 17:32:40 2026 GMT
Not After : Aug 27 17:37:40 2027 GMT
Subject: CN=6733D348A8A71D037A13D87DC6BA10EDF82E03F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:c6:d4:28:0b:48:29:f7:be:6b:75:ec:c9:
57:f5:5b:10:b4:06:70:f2:a8:73:cd:4a:12:30:80:
5d:44:01:43:b1:3c:b3:b3:35:bc:95:c3:84:a9:35:
6b:87:f1:01:da:ad:14:56:3c:a4:95:a9:1c:aa:2d:
c8:0e:b9:8f:98:10:2b:8a:5c:08:66:b3:06:0b:e1:
dd:fc:67:24:26:9a:82:22:c7:79:80:f6:70:9a:3d:
97:39:e8:bd:c9:eb:5d:ec:ff:68:84:7f:9a:21:9c:
d3:92:97:e8:06:3d:db:df:ae:ad:eb:16:4a:b4:84:
74:8a:b3:7c:d0:23:a3:e7:a7:fa:e4:e5:74:33:a2:
94:31:2b:b0:ec:27:48:43:79:a3:85:5e:07:66:56:
8c:7e:b4:22:c0:75:4b:40:b2:a1:c1:31:5d:e8:6d:
49:a1:d8:2e:0b:db:58:ee:cc:e5:bd:c4:29:3e:53:
f9:24:a4:32:78:3f:98:07:24:12:06:26:70:b5:fc:
f5:16:e0:23:a7:0d:8e:47:f0:f0:05:6a:6c:97:23:
a4:f1:08:ef:3a:d3:fa:1a:f6:d5:72:35:76:46:49:
bc:23:17:55:1e:90:21:62:d2:c4:3c:01:44:52:42:
4a:03:ba:79:ea:67:03:d2:7e:53:cc:0d:3e:68:56:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
67:33:D3:48:A8:A7:1D:03:7A:13:D8:7D:C6:BA:10:ED:F8:2E:03:F0
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/6733D348A8A71D037A13D87DC6BA10EDF82E03F0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.20.0/22
IPv6:
2804:2720::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263878
Signature Algorithm: sha256WithRSAEncryption
8c:42:69:20:2f:81:a4:7f:02:76:a6:84:2a:d4:49:8f:24:78:
07:56:68:46:86:e6:f0:f5:20:a7:bc:d8:da:5e:5f:6f:e8:97:
30:cc:ae:1b:21:cc:73:05:83:f6:94:ee:13:3f:14:35:2d:f0:
cc:eb:ae:3a:3c:dd:77:56:a9:5f:70:a8:08:a8:dc:46:6b:9d:
85:2e:a6:dd:d7:f1:b9:af:3a:dd:2c:78:11:6f:ae:2d:5d:8b:
b9:e1:0d:03:d3:59:4a:a5:83:4e:ff:a8:f5:f4:66:6e:88:08:
54:d3:ea:c3:92:e5:1e:f5:1c:03:6e:d4:99:fa:63:b7:56:a2:
9d:c4:44:25:8d:ee:b5:8e:27:f1:31:97:9c:88:24:2d:fe:e6:
0c:59:df:38:76:fb:da:86:6a:b7:10:1a:e4:43:d7:66:af:fa:
26:dc:86:2d:b2:87:b5:db:fa:38:42:2d:ef:2d:b1:7b:84:3a:
85:4e:4f:2e:65:e1:ea:0e:58:5f:e6:b2:fa:e6:bb:45:1f:ba:
56:8a:92:20:36:77:45:8d:28:d6:a2:44:03:38:e9:ab:b6:be:
dc:cb:3c:06:71:c4:b5:46:45:eb:b8:52:75:9d:54:81:66:00:
cc:d2:f1:10:a3:64:c3:62:46:9d:25:83:e1:ab:c4:4f:3f:17:
bd:bf:2a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:40:58 2026 by rpki-client