
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/8E682C3DC29648FE86782BA8CBD4395869B6630C.cer
File: 8E682C3DC29648FE86782BA8CBD4395869B6630C.cer (raw, json)
Hash identifier: X3Mv0SM09wSLJWphsDfxhYs40gOOfw1yDFKESXHjSjA=
Subject key identifier: 8E:68:2C:3D:C2:96:48:FE:86:78:2B:A8:CB:D4:39:58:69:B6:63:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2B85BF8E0F953631D9577DE3C109067685FBD69C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8E682C3DC29648FE86782BA8CBD4395869B6630C.mft
caRepository: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 21 Sep 2026 12:54:12 +0000
Certificate not after: Mon 20 Sep 2027 12:59:12 +0000
Subordinate resources: AS: 270430
IP: 190.111.156.0/22
IP: 2804:6bdc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Oct 2026 22:12:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:85:bf:8e:0f:95:36:31:d9:57:7d:e3:c1:09:06:76:85:fb:d6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 21 12:54:12 2026 GMT
Not After : Sep 20 12:59:12 2027 GMT
Subject: CN=8E682C3DC29648FE86782BA8CBD4395869B6630C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:d2:43:58:b3:ba:b5:61:d5:99:e2:0b:e6:
33:df:41:b0:f2:4e:a3:dc:81:10:4b:8f:a1:19:c4:
ba:a9:1c:63:81:ed:ad:74:77:91:14:0d:73:72:b5:
bf:78:c5:57:4f:89:d0:b6:5d:c4:81:b8:be:1e:a1:
90:e2:d7:cf:2c:f3:a9:5a:f3:87:e3:f6:16:b2:96:
34:0f:67:7b:2a:8c:0f:e3:93:8b:c4:fa:9f:7e:85:
3e:5d:b0:ec:78:c4:77:2d:5e:7f:fa:72:0b:f6:98:
1e:dd:8b:dd:bf:c0:12:8c:c2:a9:80:38:91:90:31:
52:22:8e:db:03:dc:6f:a8:92:c5:c6:55:96:1b:bc:
f2:f6:59:46:a1:2a:08:64:a8:d5:f6:b3:c7:f6:1d:
16:43:e9:c3:28:c7:3b:a8:68:50:ae:bb:17:c0:e1:
0e:1b:a1:c6:02:27:bd:92:d7:f1:f1:ae:6e:0b:7b:
08:81:c8:f3:06:f5:b8:aa:f3:fd:4c:c3:6d:64:22:
8f:27:95:d8:b3:bf:4d:a2:a1:9f:c4:c6:2b:80:0f:
5e:3f:e5:93:41:1a:03:c9:21:e0:3a:30:a5:8c:82:
a9:5e:7a:0c:0c:db:8c:32:26:f5:e2:34:49:5d:85:
3a:97:f3:db:97:7e:b5:82:a4:5f:40:a7:61:e1:ba:
22:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8E:68:2C:3D:C2:96:48:FE:86:78:2B:A8:CB:D4:39:58:69:B6:63:0C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8E682C3DC29648FE86782BA8CBD4395869B6630C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.111.156.0/22
IPv6:
2804:6bdc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270430
Signature Algorithm: sha256WithRSAEncryption
cb:09:8d:45:27:19:ba:b4:d4:3f:b3:2a:aa:df:89:3a:2f:10:
2e:21:95:7a:17:3f:46:38:8f:02:f0:bd:b5:1b:78:b2:79:6e:
d2:03:24:63:2e:de:23:39:82:86:ed:3f:56:da:35:9b:f1:c9:
0a:54:d6:c8:d1:1a:64:6f:25:e0:81:50:22:cc:fe:51:57:9a:
6e:b2:58:d0:f2:54:7a:b6:6e:92:c9:57:bf:06:98:c9:75:dc:
95:51:71:c2:dc:f5:4c:0a:8b:92:45:fd:46:c6:04:ab:d2:a8:
aa:58:e6:24:ed:0d:a6:fd:b8:ce:ca:89:c8:56:4a:9d:a8:c0:
14:67:9f:ff:74:7e:4d:5c:ef:b5:4d:1b:85:db:7f:b1:45:71:
54:d1:bf:ab:3d:a6:0b:7d:47:fa:d9:c7:97:5b:4a:92:0c:c0:
4d:b6:8c:00:c0:ec:a5:5d:11:6d:0c:85:8e:d8:22:1c:28:8d:
13:bf:27:ba:d2:a5:3a:f9:2a:7a:9b:c9:11:e8:84:91:ee:35:
90:c8:2f:9a:c3:5e:dc:82:43:fb:5a:53:64:8a:60:34:1b:8b:
80:d0:4d:79:b2:92:1a:cb:10:aa:f3:61:42:e8:73:ff:55:9b:
12:e5:27:11:3d:24:41:c4:a4:11:21:88:05:e8:06:9f:60:57:
e0:fd:e8:b3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUK4W/jg+VNjHZV33jwQkGdoX71pwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA5MjExMjU0MTJaFw0yNzA5MjAxMjU5MTJaMDMxMTAvBgNV
BAMTKDhFNjgyQzNEQzI5NjQ4RkU4Njc4MkJBOENCRDQzOTU4NjlCNjYzMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCndtJDWLO6tWHVmeIL5jPfQbDy
TqPcgRBLj6EZxLqpHGOB7a10d5EUDXNytb94xVdPidC2XcSBuL4eoZDi188s86la
84fj9hayljQPZ3sqjA/jk4vE+p9+hT5dsOx4xHctXn/6cgv2mB7di92/wBKMwqmA
OJGQMVIijtsD3G+oksXGVZYbvPL2WUahKghkqNX2s8f2HRZD6cMoxzuoaFCuuxfA
4Q4bocYCJ72S1/Hxrm4LewiByPMG9biq8/1Mw21kIo8nldizv02ioZ/ExiuAD14/
5ZNBGgPJIeA6MKWMgqleegwM24wyJvXiNEldhTqX89uXfrWCpF9Ap2HhuiLPAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOaCw9wpZI/oZ4
K6jL1DlYabZjDDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWRa
ekF0UFBaQkR3UHFoVUVoR2J3MmVlRkJyNVpoaW5zeUZ3OEp4eHFrVEwvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlk
WnpBdFBQWkJEd1BxaFVFaEdidzJlZUZCcjVaaGluc3lGdzhKeHhxa1RMLzAvOEU2
ODJDM0RDMjk2NDhGRTg2NzgyQkE4Q0JENDM5NTg2OUI2NjMwQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvm+cMA0EAgACMAcDBQAoBGvcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgXjANBgkqhkiG9w0BAQsFAAOCAQEAywmNRScZurTUP7Mq
qt+JOi8QLiGVehc/RjiPAvC9tRt4snlu0gMkYy7eIzmChu0/Vto1m/HJClTWyNEa
ZG8l4IFQIsz+UVeabrJY0PJUerZukslXvwaYyXXclVFxwtz1TAqLkkX9RsYEq9Ko
qljmJO0Npv24zsqJyFZKnajAFGef/3R+TVzvtU0bhdt/sUVxVNG/qz2mC31H+tnH
l1tKkgzATbaMAMDspV0RbQyFjtgiHCiNE78nutKlOvkqepvJEeiEke41kMgvmsNe
3IJD+1pTZIpgNBuLgNBNebKSGssQqvNhQuhz/1WbEuUnET0kQcSkESGIBegGn2BX
4P3osw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:36:19 2026 by rpki-client