
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
File: 970837BD94B7C2456C803FB74190973C3A36E88E.cer (raw, json)
Hash identifier: oHt3yKFxaacjPb2g7nUI2HQxxjIhr2K9n8lJG1RRzjY=
Subject key identifier: 97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1BD60BFB6006B004CE70E8D58F405567CF8949B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
caRepository: rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 25 Jul 2025 15:17:55 +0000
Certificate not after: Fri 24 Jul 2026 15:22:55 +0000
Subordinate resources: AS: 262470
IP: 131.255.168.0/22
IP: 143.0.152.0/22
IP: 170.233.132.0/22
IP: 177.47.192.0/20
IP: 179.97.0.0/21
IP: 2804:2068::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d6:0b:fb:60:06:b0:04:ce:70:e8:d5:8f:40:55:67:cf:89:49:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 25 15:17:55 2025 GMT
Not After : Jul 24 15:22:55 2026 GMT
Subject: CN=970837BD94B7C2456C803FB74190973C3A36E88E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:e5:66:d1:9a:9a:69:f5:e3:6b:d3:c4:f0:
da:17:d4:88:bf:0b:86:c0:3a:d0:69:d7:b3:c3:09:
7e:3f:38:ff:d1:bc:30:e7:87:48:30:64:6f:11:75:
ab:28:c0:71:e7:c8:89:bb:99:21:e9:1c:ee:8d:87:
b8:5e:7e:40:d9:87:2a:59:73:84:be:99:7b:f4:7b:
63:49:2e:36:3b:b9:63:fb:60:58:94:08:ae:34:c6:
96:8d:6f:38:e4:11:b5:0f:b6:17:88:0f:f0:65:58:
68:0b:41:4f:48:83:0d:ea:04:ad:d4:e5:4e:d3:52:
96:cc:6e:06:38:55:71:79:4e:20:6c:a8:03:f2:c7:
be:76:0a:98:ab:e0:61:85:c0:b7:b7:2b:5a:38:57:
c3:3f:f7:d7:98:69:56:06:22:72:53:ab:2a:fc:84:
d8:63:f3:10:6c:4c:14:1b:cc:f0:82:04:66:61:cb:
67:c0:11:bf:d5:e6:7d:89:f9:f9:81:40:c4:d1:f1:
11:ed:af:6c:b9:de:a4:df:72:ea:10:d3:98:c3:bf:
88:2a:5c:a9:25:0f:76:63:da:ba:d3:56:bb:f2:fd:
e0:47:85:15:07:44:6a:0d:07:b9:18:8a:31:0c:a6:
57:bd:0f:67:17:5f:d2:49:ab:04:c9:ae:21:6e:ab:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.168.0/22
143.0.152.0/22
170.233.132.0/22
177.47.192.0/20
179.97.0.0/21
IPv6:
2804:2068::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262470
Signature Algorithm: sha256WithRSAEncryption
64:a3:f2:4f:e1:0c:08:36:6e:b6:f9:5c:07:15:02:f3:8a:c0:
d2:70:a4:1e:ca:b7:ab:f3:19:6a:c6:55:4b:85:1c:b6:82:6f:
5d:cf:fd:7c:01:b5:ef:27:ff:7b:73:5c:f1:48:3b:aa:d9:e7:
a5:df:b9:6b:0d:e6:f4:78:71:f6:7f:8b:a6:7f:4f:c8:89:b4:
13:a6:36:ab:39:c8:ea:b7:69:32:7d:79:0b:9a:0b:5b:c2:ba:
9f:bd:fa:a2:0a:df:e6:a4:5f:b6:57:3c:23:e9:b0:7f:6e:0d:
9b:92:6f:8c:79:0f:ce:b4:3d:b9:7b:23:75:37:cd:58:fa:c0:
75:e3:84:12:f2:7e:9e:b9:74:f0:f6:7b:6d:61:0a:37:18:4a:
a1:24:7b:84:ac:0e:07:67:30:c7:ef:f9:be:57:c5:e7:8e:48:
51:0b:6c:df:5b:e0:57:2a:62:b4:ff:36:02:3b:5b:3d:6d:79:
cc:6d:3d:96:44:67:e1:3d:86:4e:e0:2b:b7:9c:85:78:47:31:
15:c1:18:cb:18:12:59:8d:87:a5:74:6c:75:67:54:86:ce:84:
fb:1a:b0:76:6e:14:4c:1e:fa:61:c0:ab:20:1a:98:97:13:89:
7c:29:f5:d0:98:74:b0:70:8d:71:07:c3:9c:96:5b:32:a0:85:
56:a2:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:32:37 2025 by rpki-client