
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer
File: 9070D2E187CE3F862AB9E78E2A420A02C3525244.cer (raw, json)
Hash identifier: 7fWtNt/wVIVSMBAa3h4+q3mfCz+Du8DatjqQszEVPQM=
Subject key identifier: 90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4C95BC0276C036B765333BED8FE30D86D328E072
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft
caRepository: rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 22 Feb 2026 10:39:00 +0000
Certificate not after: Sun 21 Feb 2027 10:44:00 +0000
Subordinate resources: AS: 61625
IP: 2804:9524::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 22:21:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:95:bc:02:76:c0:36:b7:65:33:3b:ed:8f:e3:0d:86:d3:28:e0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 22 10:39:00 2026 GMT
Not After : Feb 21 10:44:00 2027 GMT
Subject: CN=9070D2E187CE3F862AB9E78E2A420A02C3525244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:42:83:a6:c7:27:d9:96:d8:3b:d4:60:62:
8a:f2:75:b0:24:5d:14:9e:6a:f9:b5:9d:bc:4a:97:
7f:b2:43:dd:9f:ab:34:8d:8e:c4:a6:b2:83:28:40:
43:90:00:4c:99:ad:70:e2:0c:0c:64:13:17:44:81:
c8:42:7a:a9:2a:4b:32:c0:45:e5:11:a6:a9:54:2b:
d6:74:39:a4:9f:3f:c7:15:a1:79:eb:9a:99:a8:d2:
22:08:8e:2b:d5:0c:50:5c:1a:91:fa:57:58:24:13:
d8:bf:b5:33:2d:8d:fb:0e:2c:28:12:d4:0e:de:83:
48:f3:7d:e2:e8:c3:de:38:90:08:ce:3e:fd:ec:ba:
05:db:15:42:ad:c9:2a:cc:89:9b:ae:a7:6b:88:25:
90:bb:be:0c:87:f3:7c:2d:f9:41:91:68:4a:27:08:
26:c1:20:90:61:88:b9:3c:f2:e5:aa:82:89:b1:5a:
f0:95:2b:37:f8:e8:1f:f0:a5:6e:1c:2e:2e:7d:d1:
a3:e5:6c:53:9b:7c:c2:ca:90:54:c3:64:9e:69:75:
d0:76:14:17:76:4c:a8:08:54:fe:b4:0f:52:55:f3:
12:37:64:47:2f:d4:58:21:74:9f:50:1a:0c:62:31:
03:78:14:0e:62:2b:4d:89:50:fa:fc:da:a2:c8:0c:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9524::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61625
Signature Algorithm: sha256WithRSAEncryption
9a:a2:62:a9:1a:da:31:fd:9f:5c:8b:7c:b5:7c:8c:a4:9f:2e:
09:78:07:96:04:6c:f6:0a:26:0e:50:a6:f9:ac:67:eb:54:69:
22:e5:7c:ff:74:3a:eb:e9:5c:68:97:ca:67:4e:05:56:3e:a2:
57:02:dd:ce:b3:95:3b:ea:12:63:23:5e:09:7c:64:cd:61:ad:
e8:92:9e:da:9e:04:60:36:65:94:46:14:75:2a:87:23:8e:de:
6f:41:83:f1:83:25:e6:3d:c0:2f:c3:60:11:5e:55:d9:28:0c:
77:e6:f5:f6:96:b3:06:2e:53:19:25:71:ad:41:80:c9:84:6a:
25:9b:78:0b:87:4b:50:f8:f1:6b:7a:92:a4:e8:bc:ff:0f:1f:
15:f1:a0:73:0a:d9:1b:b9:dd:aa:91:dc:26:a0:e8:be:f5:19:
35:13:f8:98:21:2d:e6:67:8e:17:5a:c3:55:b8:b1:45:c6:fd:
81:d0:4c:74:cb:74:9b:fd:07:6c:64:72:8d:c8:d7:18:39:99:
4d:88:37:31:0c:57:d6:3c:fc:c3:d2:c2:46:e7:5c:0a:ba:d4:
f0:20:f8:37:41:82:d6:2f:d1:f9:d4:8f:02:eb:6b:13:21:51:
04:ac:d2:85:70:e1:9f:b8:0e:f1:e5:e3:f9:ec:93:7e:fe:71:
f2:73:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:22:48 2026 by rpki-client