
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer
File: 966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer (raw, json)
Hash identifier: PTDPKqNJXZVmzpnj4GvzOtwd0y5K+aucndkxYOyTlrE=
Subject key identifier: 96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4E111C78F1373C906759E70CF10198B3DBBF542B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft
caRepository: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 23 Sep 2025 22:23:24 +0000
Certificate not after: Tue 22 Sep 2026 22:28:24 +0000
Subordinate resources: AS: 265365
IP: 168.205.128.0/22
IP: 2804:2ec4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:11:1c:78:f1:37:3c:90:67:59:e7:0c:f1:01:98:b3:db:bf:54:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 23 22:23:24 2025 GMT
Not After : Sep 22 22:28:24 2026 GMT
Subject: CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:4f:a4:83:c9:d8:9c:e4:5b:63:f6:05:c9:
69:b4:4a:c1:a3:33:a8:58:92:5c:6f:d3:a8:3a:55:
c6:66:2e:9d:58:17:a0:2e:9d:e1:31:bd:0c:20:ce:
c8:26:72:cd:3c:bd:0f:2d:b8:5d:37:6a:4c:ca:a4:
18:5c:a6:6c:95:5a:09:b9:0d:57:60:ab:a8:9a:06:
0f:5f:5a:90:37:a1:b3:6e:58:77:bc:38:fb:ff:43:
48:70:be:63:d1:c1:3a:1f:d7:ac:b9:52:60:b3:26:
54:a1:4f:46:52:e4:b9:fe:78:43:28:7e:06:6b:ba:
7d:04:f3:89:9f:40:57:42:ba:27:99:39:62:32:78:
e4:08:5d:3c:7c:2e:15:78:21:90:98:a4:12:90:e3:
3a:fd:c5:ca:0f:a3:f6:c5:63:dd:6f:ce:c9:de:dd:
d7:5b:a6:c8:c4:42:30:b7:ed:26:af:98:64:33:38:
86:76:d3:f2:e4:f0:90:f9:80:58:27:b0:c3:a7:e3:
8d:21:73:2b:25:dc:38:91:8f:85:f1:32:09:42:aa:
0b:87:85:42:91:1e:37:85:45:78:18:eb:fa:75:dc:
ba:95:89:e7:94:5f:c3:91:b6:c0:da:86:9b:a0:43:
e7:42:c4:d2:94:73:d5:4a:dd:b0:7a:5a:5c:67:7c:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.128.0/22
IPv6:
2804:2ec4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265365
Signature Algorithm: sha256WithRSAEncryption
08:88:30:44:25:53:c9:61:df:c8:f7:2f:f1:c2:c4:c4:63:ff:
7d:8b:ca:d5:73:d4:df:e3:3f:27:2e:36:c5:fb:59:d6:b5:ff:
62:9a:74:dd:d8:2e:52:ee:b9:d7:4e:b9:2c:ee:c8:13:40:66:
4e:94:46:bd:db:ba:7c:e1:88:10:57:0f:bb:e8:7e:7e:2e:be:
ef:3d:d1:56:9f:cb:6c:63:15:2e:a7:8c:00:94:6b:17:07:5b:
e6:10:d3:d0:c5:6f:fe:b9:24:64:bf:ed:7d:c2:cf:80:07:18:
ba:19:a9:e3:01:a5:57:fb:74:fd:36:4c:e8:b2:70:7a:02:4a:
3a:17:bc:70:ac:f3:d4:70:b9:f7:ba:3e:97:ff:46:c6:5d:65:
16:ab:8b:75:1f:83:2f:90:c1:56:64:95:9a:a5:76:ad:41:9e:
9a:fc:6b:7e:1f:ae:9b:7a:5f:90:c2:42:47:ab:1e:3b:db:94:
6a:78:d5:c2:17:a8:bd:33:32:37:20:85:83:7c:dd:5e:a8:eb:
dc:0c:ed:fe:2b:0a:5e:cc:0d:5d:07:13:7a:49:b0:b8:93:3b:
11:4b:15:55:7f:dc:43:70:d5:73:a9:3b:30:b2:d0:3f:80:df:
96:71:2d:18:65:9e:31:4b:38:c3:90:59:0d:80:cb:b4:48:e1:
ba:cb:5b:31
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUThEcePE3PJBnWecM8QGYs9u/VCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA5MjMyMjIzMjRaFw0yNjA5MjIyMjI4MjRaMDMxMTAvBgNV
BAMTKDk2NkRENzk3Qjg0RTU5Q0FFNjIyN0VENEZCMUQ0RDUyMDExRUJBMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqe0+kg8nYnORbY/YFyWm0SsGj
M6hYklxv06g6VcZmLp1YF6AuneExvQwgzsgmcs08vQ8tuF03akzKpBhcpmyVWgm5
DVdgq6iaBg9fWpA3obNuWHe8OPv/Q0hwvmPRwTof16y5UmCzJlShT0ZS5Ln+eEMo
fgZrun0E84mfQFdCuieZOWIyeOQIXTx8LhV4IZCYpBKQ4zr9xcoPo/bFY91vzsne
3ddbpsjEQjC37SavmGQzOIZ20/Lk8JD5gFgnsMOn440hcysl3DiRj4XxMglCqguH
hUKRHjeFRXgY6/p13LqVieeUX8ORtsDahpugQ+dCxNKUc9VK3bB6WlxnfN7zAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWbdeXuE5ZyuYi
ftT7HU1SAR66KTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2JW
Q2RkRWdYVnE5cGhmc2JQRTlhalE5cVJ1d0pCc2Y5S1dWVGNuZjZWQVMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ni
VkNkZEVnWFZxOXBoZnNiUEU5YWpROXFSdXdKQnNmOUtXVlRjbmY2VkFTLzAvOTY2
REQ3OTdCODRFNTlDQUU2MjI3RUQ0RkIxRDRENTIwMTFFQkEyOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqM2AMA0EAgACMAcDBQAoBC7EMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQMlTANBgkqhkiG9w0BAQsFAAOCAQEACIgwRCVTyWHfyPcv
8cLExGP/fYvK1XPU3+M/Jy42xftZ1rX/Ypp03dguUu651065LO7IE0BmTpRGvdu6
fOGIEFcPu+h+fi6+7z3RVp/LbGMVLqeMAJRrFwdb5hDT0MVv/rkkZL/tfcLPgAcY
uhmp4wGlV/t0/TZM6LJwegJKOhe8cKzz1HC597o+l/9Gxl1lFquLdR+DL5DBVmSV
mqV2rUGemvxrfh+um3pfkMJCR6seO9uUanjVwheovTMyNyCFg3zdXqjr3Azt/isK
XswNXQcTekmwuJM7EUsVVX/cQ3DVc6k7MLLQP4DflnEtGGWeMUs4w5BZDYDLtEjh
ustbMQ==
-----END CERTIFICATE-----
Generated at Mon Nov 3 05:19:15 2025 by rpki-client