
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6EA22A57869702BB3EC504F354E3A399C57E7BF5.cer
File: 6EA22A57869702BB3EC504F354E3A399C57E7BF5.cer (raw, json)
Hash identifier: 5VrSeQK/2ltkWvXQKuwQohcSRGWdjTMua2Lg0Mq6B1o=
Subject key identifier: 6E:A2:2A:57:86:97:02:BB:3E:C5:04:F3:54:E3:A3:99:C5:7E:7B:F5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2DB8496BA70FBA8C6F2F2E734B3488E8526796C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/6EA22A57869702BB3EC504F354E3A399C57E7BF5.mft
caRepository: rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 31 Oct 2025 06:36:46 +0000
Certificate not after: Fri 30 Oct 2026 06:41:46 +0000
Subordinate resources: AS: 271761
IP: 131.255.104.0/22
IP: 2804:8098::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b8:49:6b:a7:0f:ba:8c:6f:2f:2e:73:4b:34:88:e8:52:67:96:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 31 06:36:46 2025 GMT
Not After : Oct 30 06:41:46 2026 GMT
Subject: CN=6EA22A57869702BB3EC504F354E3A399C57E7BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:70:fe:d7:1e:fe:5e:bf:52:bd:96:04:9d:fb:
e9:b7:53:a4:22:21:d5:38:9c:3e:aa:12:80:ef:d6:
34:21:38:53:8f:83:d0:ad:7c:a7:57:00:56:b3:0a:
5a:0a:e3:81:5c:aa:fb:9e:f9:14:fb:72:22:e6:21:
01:8b:b4:f0:b2:41:93:ae:57:8e:a6:a0:99:5c:79:
16:22:7b:04:f4:1d:94:2f:14:eb:dd:9d:0a:d0:97:
5a:72:ea:05:82:91:2a:2b:cb:dc:91:b4:b1:bd:d0:
d2:94:31:d5:73:ab:c7:19:0d:8a:57:23:64:27:6e:
fe:d7:5a:56:f3:d6:63:7f:18:bd:61:8e:21:44:dc:
1d:cd:9e:58:8b:e8:90:ce:8a:e8:a2:71:21:e0:27:
be:68:fb:ea:be:19:1d:4f:64:3a:b5:e3:e7:2b:72:
f1:68:b6:15:89:a2:89:fe:ac:b6:45:e8:3c:ef:86:
6e:41:a3:74:cf:db:61:ea:5e:12:ef:71:13:47:58:
68:ad:35:86:01:df:3a:38:e4:fc:b7:d6:59:02:75:
77:8d:59:14:89:52:f5:6d:52:91:b1:c3:5d:df:af:
15:ff:72:dc:4b:de:ef:e6:b4:15:e4:ab:80:25:5e:
1b:12:2e:e3:81:84:e3:20:9d:09:8e:73:6b:46:12:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6E:A2:2A:57:86:97:02:BB:3E:C5:04:F3:54:E3:A3:99:C5:7E:7B:F5
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/6EA22A57869702BB3EC504F354E3A399C57E7BF5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.104.0/22
IPv6:
2804:8098::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271761
Signature Algorithm: sha256WithRSAEncryption
85:1f:09:a7:a4:0e:c7:6b:d5:b0:67:b4:d1:47:62:a5:5a:c7:
28:ee:96:15:56:60:ad:32:e2:64:f1:df:e1:86:ad:f9:66:ea:
2f:77:a8:71:1d:cd:9c:cc:1d:2e:7a:b2:06:b7:0c:c7:c6:1e:
fe:64:36:30:5b:3f:ae:c3:ea:6f:b0:60:27:61:3c:f9:b9:4d:
79:9c:77:86:0c:52:e0:22:b0:39:96:36:82:2d:96:80:52:56:
af:1c:9b:dd:8c:fa:e9:13:b9:96:6e:31:ac:33:75:76:33:23:
e5:10:47:c2:25:73:d7:2d:29:67:98:00:48:dc:1a:45:36:d9:
2d:7d:8d:f9:5b:80:52:1a:63:4c:87:16:4f:57:05:33:1e:60:
f4:e3:74:af:d8:d9:3d:08:2e:7e:36:b9:d4:91:82:00:5d:d1:
2e:f5:1f:e5:73:3e:23:64:24:ff:98:91:2f:62:78:e2:be:20:
6b:69:fe:57:f2:6f:23:1b:05:6f:89:56:5f:a1:ec:11:be:f5:
3a:a0:62:28:a1:98:26:bc:a2:17:a5:7c:e7:6e:6c:49:8b:76:
d9:86:0b:30:f8:fa:cf:83:58:d7:55:a2:ac:7e:96:57:9f:6c:
cc:5e:97:fb:85:e3:b3:17:b8:a3:87:9d:44:27:f1:d8:c1:5e:
f8:43:39:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:33:52 2025 by rpki-client