
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/858791F3197B2403C043B8C781E30FFF6C1C8C19.cer
File: 858791F3197B2403C043B8C781E30FFF6C1C8C19.cer (raw, json)
Hash identifier: ISRo6brAlTuLgLMClO1ib6mwtmHI13/YAlFZ2JAW9pQ=
Subject key identifier: 85:87:91:F3:19:7B:24:03:C0:43:B8:C7:81:E3:0F:FF:6C:1C:8C:19
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1B9255C1272AD9B570E77563E66480CFE585B14B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/858791F3197B2403C043B8C781E30FFF6C1C8C19.mft
caRepository: rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 18 Sep 2026 13:01:23 +0000
Certificate not after: Fri 17 Sep 2027 13:06:23 +0000
Subordinate resources: AS: 266043
IP: 45.4.24.0/22
IP: 2804:39ac::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 09 Oct 2026 09:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:92:55:c1:27:2a:d9:b5:70:e7:75:63:e6:64:80:cf:e5:85:b1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 18 13:01:23 2026 GMT
Not After : Sep 17 13:06:23 2027 GMT
Subject: CN=858791F3197B2403C043B8C781E30FFF6C1C8C19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:7e:da:09:7d:da:33:67:2f:d4:1f:07:63:
67:10:59:8e:77:78:6f:00:14:a3:07:70:c7:84:95:
4a:44:46:45:e0:6e:ce:6a:54:1a:c7:48:67:84:4f:
d8:da:dc:98:e7:dd:68:c7:a3:ad:c4:05:9a:40:23:
38:08:a7:af:9b:6c:de:ef:9f:e5:3a:86:45:cd:02:
17:c5:fe:e6:de:3c:01:cc:96:be:ac:c5:57:0d:2b:
b0:32:ae:a3:8a:be:31:8e:a4:68:cb:71:ff:6b:e2:
a3:6d:27:da:1a:9b:01:ea:a1:d7:48:74:2b:93:bc:
17:c3:83:e6:9e:5a:ea:e0:49:40:71:8c:ba:b8:88:
1b:8c:77:af:3a:0f:2b:e3:8f:76:8c:47:f4:fb:e8:
72:23:4d:37:17:80:07:f2:6e:82:14:37:87:b8:13:
02:a6:cf:d6:e4:48:7d:d4:87:58:28:ec:a0:6d:cb:
d0:ce:2a:77:52:08:41:c4:26:17:94:6c:7e:4a:9d:
f7:90:37:6f:dd:39:4d:61:29:37:58:59:b1:0b:6c:
27:c5:a1:1d:a1:c3:24:36:db:8e:25:de:01:01:31:
89:91:5c:c5:a6:ba:cd:fd:b0:5d:13:0d:8c:9d:88:
2f:f0:4c:d2:ab:20:b1:2e:20:23:64:f5:25:9e:40:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
85:87:91:F3:19:7B:24:03:C0:43:B8:C7:81:E3:0F:FF:6C:1C:8C:19
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/858791F3197B2403C043B8C781E30FFF6C1C8C19.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.24.0/22
IPv6:
2804:39ac::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266043
Signature Algorithm: sha256WithRSAEncryption
7f:0b:7c:f1:54:61:cb:cc:3e:d2:2f:5b:1e:06:1d:80:84:8b:
b5:a3:38:7d:10:10:8b:ce:33:b7:5b:e1:ce:22:af:64:ef:84:
35:f4:86:48:aa:64:67:be:9f:e0:1a:e9:00:e0:d1:47:bc:87:
2d:41:0f:1b:89:95:f6:46:ba:bd:b4:02:1a:b9:3d:23:d9:5c:
d9:1d:d8:20:f9:97:4f:5f:84:f0:70:ec:59:29:9d:c4:a3:41:
69:99:3b:a3:3a:50:6c:ba:38:0d:f6:fd:89:94:3e:2c:8b:62:
61:b6:7d:e8:15:44:c0:0b:5c:f2:6a:e9:dc:47:de:91:1f:0c:
f7:09:a8:40:b0:a4:64:87:00:36:68:6c:61:27:69:67:77:a5:
83:eb:df:7d:79:34:31:aa:03:c3:90:f9:7f:f7:9e:dd:68:61:
07:de:ec:da:fc:8e:ee:ea:75:be:ee:a4:8c:7e:b9:e1:f5:4a:
88:89:52:22:55:57:a6:58:67:ed:1d:4f:1e:6e:a3:ba:b6:fb:
f3:bb:4d:53:b2:4b:26:89:4a:c4:b8:ef:a5:d7:59:4d:71:b6:
62:6a:b9:8e:82:3b:fd:d3:df:a5:4a:90:7d:5b:19:46:36:68:
6a:18:11:6a:a3:2b:bd:cd:e7:b2:3b:6c:27:f2:f5:5c:3c:83:
12:f1:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:27:13 2026 by rpki-client