
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer
File: 966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer (raw, json)
Hash identifier: A1mD9QO7G6lncsKowWvS7aZL1hRlU296zxuBozzQltc=
Subject key identifier: 96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 083F6DD220BE3BA19847B1C24909BB78B38D2169
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft
caRepository: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 30 Oct 2026 23:39:21 +0000
Certificate not after: Fri 29 Oct 2027 23:44:21 +0000
Subordinate resources: AS: 265365
IP: 168.205.128.0/22
IP: 2804:2ec4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 01:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3f:6d:d2:20:be:3b:a1:98:47:b1:c2:49:09:bb:78:b3:8d:21:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 30 23:39:21 2026 GMT
Not After : Oct 29 23:44:21 2027 GMT
Subject: CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:4f:a4:83:c9:d8:9c:e4:5b:63:f6:05:c9:
69:b4:4a:c1:a3:33:a8:58:92:5c:6f:d3:a8:3a:55:
c6:66:2e:9d:58:17:a0:2e:9d:e1:31:bd:0c:20:ce:
c8:26:72:cd:3c:bd:0f:2d:b8:5d:37:6a:4c:ca:a4:
18:5c:a6:6c:95:5a:09:b9:0d:57:60:ab:a8:9a:06:
0f:5f:5a:90:37:a1:b3:6e:58:77:bc:38:fb:ff:43:
48:70:be:63:d1:c1:3a:1f:d7:ac:b9:52:60:b3:26:
54:a1:4f:46:52:e4:b9:fe:78:43:28:7e:06:6b:ba:
7d:04:f3:89:9f:40:57:42:ba:27:99:39:62:32:78:
e4:08:5d:3c:7c:2e:15:78:21:90:98:a4:12:90:e3:
3a:fd:c5:ca:0f:a3:f6:c5:63:dd:6f:ce:c9:de:dd:
d7:5b:a6:c8:c4:42:30:b7:ed:26:af:98:64:33:38:
86:76:d3:f2:e4:f0:90:f9:80:58:27:b0:c3:a7:e3:
8d:21:73:2b:25:dc:38:91:8f:85:f1:32:09:42:aa:
0b:87:85:42:91:1e:37:85:45:78:18:eb:fa:75:dc:
ba:95:89:e7:94:5f:c3:91:b6:c0:da:86:9b:a0:43:
e7:42:c4:d2:94:73:d5:4a:dd:b0:7a:5a:5c:67:7c:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.128.0/22
IPv6:
2804:2ec4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265365
Signature Algorithm: sha256WithRSAEncryption
a2:ce:7a:e4:23:2d:7b:d1:93:a9:67:32:66:2b:13:47:48:83:
81:57:94:e9:ef:9a:43:7d:43:fe:d3:10:7e:9d:91:b9:75:7f:
b0:5f:22:1e:16:3b:83:57:00:13:70:1e:4d:4a:a1:f5:1e:44:
fa:0f:22:56:92:30:af:80:d0:97:56:48:5c:0d:9a:96:dd:54:
66:cc:49:71:c4:8e:13:48:64:2c:1d:56:d5:f1:84:26:3c:76:
a7:29:33:69:04:89:93:ed:c0:15:71:b7:d3:47:2c:5c:1f:17:
13:47:07:3e:f8:7d:3a:0d:20:ee:6b:c9:d3:45:6f:f1:3d:19:
78:7e:90:6f:3b:90:b1:fc:3f:47:19:97:af:53:a7:52:83:22:
0c:9e:2a:9c:30:35:48:89:af:e4:aa:7f:38:65:34:e7:b7:8e:
21:69:21:82:45:bf:77:50:e5:fb:e9:bd:89:80:00:be:15:37:
de:0f:dc:60:d7:bd:1d:65:8f:d2:79:c7:ff:27:60:ca:17:bb:
4c:28:62:ac:50:e2:18:a4:42:e6:2e:48:30:35:7d:f2:ae:5a:
63:4f:ce:97:de:ed:fd:85:d8:ce:63:a0:74:7b:cf:33:43:1f:
cd:76:95:74:6e:fd:0b:49:02:11:46:fd:65:d5:67:2d:a0:44:
6c:ea:f5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:57:28 2026 by rpki-client