
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer
File: 96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer (raw, json)
Hash identifier: /uduXXVBqRHFYl14DM47qf3uGuRuNRHW03tGS+6this=
Subject key identifier: 96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 68261B3A1A979CEE2F89831CC2871F1ABBA01FCD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft
caRepository: rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 23 Aug 2026 09:48:03 +0000
Certificate not after: Sun 22 Aug 2027 09:53:03 +0000
Subordinate resources: AS: 267535
IP: 192.141.104.0/22
IP: 2804:42e4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 01:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:26:1b:3a:1a:97:9c:ee:2f:89:83:1c:c2:87:1f:1a:bb:a0:1f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 23 09:48:03 2026 GMT
Not After : Aug 22 09:53:03 2027 GMT
Subject: CN=96BD1D118248F01A383BC9530F7DDC4CBBB94C5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:73:b8:5c:50:05:f4:76:90:3c:9d:fd:02:
57:7b:06:f4:84:11:5e:fa:62:22:6c:fc:cd:00:67:
66:b7:a4:cb:af:c5:52:d5:db:68:5b:09:4c:2b:ca:
3c:08:f0:f9:88:eb:2c:53:4d:60:df:71:c9:a0:8b:
b5:2a:5f:7c:38:08:39:54:31:92:ca:a7:8c:fb:8b:
7b:7f:a4:cf:2e:c2:e9:3d:b7:78:50:e1:fa:2b:3c:
8d:df:47:7f:7f:27:61:a8:1d:ea:c9:4b:a5:4f:85:
8c:20:5f:1a:08:7d:63:1a:9d:72:93:d9:b0:16:b0:
71:99:66:dd:d8:2b:4c:03:b6:56:5a:0d:aa:76:b3:
1d:98:3b:8d:2d:cc:5e:03:3f:7c:87:02:ce:ea:92:
8c:a8:3a:d1:0d:57:36:bc:ae:02:6e:ef:31:69:5b:
46:34:02:ab:7d:22:9f:94:79:d7:f0:89:6b:41:a6:
c3:ff:bd:9e:30:8c:f6:8b:73:55:15:66:fa:d0:72:
01:d5:8b:88:0b:c4:11:21:ef:a6:13:5f:92:95:0c:
59:c5:9b:83:d7:c2:53:18:72:6b:4f:14:a0:18:a7:
02:f0:25:da:bb:ca:76:0e:72:90:b3:6c:e0:da:19:
cc:7a:f6:46:d8:36:cf:9f:02:76:4a:a2:89:e1:f8:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.104.0/22
IPv6:
2804:42e4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267535
Signature Algorithm: sha256WithRSAEncryption
84:40:ad:4c:5c:5a:cd:a4:d9:4b:12:dd:72:ff:8d:51:60:b3:
8f:5d:bf:e2:7e:d4:ab:d7:39:9d:8c:1e:30:b0:da:7e:3e:33:
20:2f:a6:51:00:ef:dd:29:ac:d2:ca:b6:f5:31:65:97:67:d0:
e6:70:30:38:5e:09:ec:4d:6e:34:13:eb:40:c7:2b:39:dd:c3:
e9:c8:b5:e6:66:89:16:6b:5c:c3:7b:1b:e7:34:0e:14:7e:0c:
89:d5:77:b3:72:0c:9d:9a:74:e9:27:0f:60:68:18:ef:f4:d1:
52:8c:07:90:eb:2b:5b:b5:fc:f8:a4:70:fb:a1:40:ec:79:d5:
19:90:f4:72:89:d1:84:39:61:b9:24:74:6e:64:4f:bc:01:52:
a4:48:2a:71:c8:9b:f7:19:88:67:6a:cb:63:6f:70:77:e7:f6:
bf:88:1d:fd:7d:f8:e7:8a:63:f7:7a:f0:c2:44:95:a7:d2:18:
74:06:39:4f:c3:5e:7a:1c:db:45:1e:cd:8a:21:47:07:92:4f:
2d:61:7c:e7:18:11:6c:b8:97:bf:3d:35:47:55:50:95:2a:79:
cb:b1:1d:de:13:d4:6d:c2:14:14:b0:50:de:c0:1d:ce:be:dc:
dc:44:7b:27:1a:f9:7c:f9:87:4c:d1:61:c3:78:8f:42:c0:38:
43:8f:8a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:25:01 2026 by rpki-client