
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
File: 98525FF70BD67C78C36BE3190E3463098E95DF2C.cer (raw, json)
Hash identifier: 3m1RO71p9SukxA8WpHNWCXC/vm48gJtLmVuOLOM7WUw=
Subject key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 075FCE84D11AC5F963382100B11AC2D12BD318A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
caRepository: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Mar 2025 05:05:16 +0000
Certificate not after: Fri 06 Mar 2026 05:10:16 +0000
Subordinate resources: AS: 266063
IP: 45.4.104.0/22
IP: 2804:39fc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5f:ce:84:d1:1a:c5:f9:63:38:21:00:b1:1a:c2:d1:2b:d3:18:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 7 05:05:16 2025 GMT
Not After : Mar 6 05:10:16 2026 GMT
Subject: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:12:c7:84:64:84:4d:77:e4:f4:e2:db:78:
98:53:b4:aa:44:85:38:c5:5f:71:43:81:2e:3e:33:
86:d3:a6:f4:55:f2:29:82:0e:61:5c:02:f3:d6:3a:
11:6e:ed:d1:77:c9:d9:d8:49:b0:86:ee:72:85:f7:
35:10:96:16:c1:49:18:81:10:19:bd:05:38:27:be:
16:47:de:9a:4d:d2:77:59:a0:c0:a0:dc:8a:f8:2a:
64:b6:bb:13:5e:fa:6e:02:1e:58:66:80:5e:33:84:
4e:c8:a5:91:06:e7:6b:db:84:0b:cd:d0:bf:7d:24:
08:f2:67:07:9b:4d:87:4f:fc:69:dd:dd:ec:91:67:
52:bd:b1:02:16:d6:ea:b2:ff:18:36:82:66:f4:5c:
58:18:dd:53:0f:8d:6c:2e:53:eb:eb:d4:4f:b8:3c:
f3:7a:cf:eb:22:ce:c2:c4:33:30:54:f8:03:4a:b4:
e4:2e:c9:e0:08:cb:dc:15:73:d4:e7:2f:98:26:59:
f1:67:44:e4:f5:ca:63:a0:5b:2b:47:00:f4:7c:f9:
d1:90:e0:67:95:2f:ae:64:e1:66:95:57:94:48:de:
10:b3:40:5b:9f:f6:94:e0:1a:db:92:44:53:a4:6c:
a4:16:05:b8:b4:b7:94:a3:9c:ba:65:59:61:cb:19:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.104.0/22
IPv6:
2804:39fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266063
Signature Algorithm: sha256WithRSAEncryption
9a:e9:14:f8:2d:45:20:12:cc:94:0a:76:d7:18:49:00:58:8f:
e4:39:72:15:3d:7c:04:0b:2a:98:aa:9c:f9:c6:66:98:b3:74:
58:7e:b5:66:fa:96:bb:a2:4a:9b:58:9c:c9:e4:e3:3c:60:28:
d3:09:24:af:f2:ae:55:07:1b:42:9d:55:e4:33:0f:e8:8c:11:
b8:f2:23:93:9c:2b:19:01:0f:66:0f:31:b9:bd:14:1d:07:2a:
ba:da:c7:2d:09:57:c8:8b:01:01:30:80:8c:8d:2b:ba:99:e3:
86:c1:91:66:3d:0c:00:53:e0:dd:74:1d:33:8d:eb:6b:5f:42:
9c:05:84:ac:b5:b5:09:6c:1c:ac:e6:8f:25:36:3f:07:88:16:
61:f5:ef:d3:83:a9:39:bb:5f:47:45:9e:a1:24:b4:d9:34:99:
4d:3c:11:2d:dc:df:45:82:6f:aa:96:3c:33:83:ea:a5:09:58:
64:9d:89:41:d4:42:7d:24:15:af:bf:5c:f2:9e:62:8a:ae:d9:
fb:18:7d:4f:23:24:55:88:e0:37:1f:10:80:19:4b:8d:ad:9a:
73:f2:f2:4d:0c:37:5b:68:48:99:5d:e4:9c:04:0c:30:f2:b9:
bd:ca:b6:15:d7:89:fa:8d:29:f4:10:b8:3c:6d:24:6f:1d:20:
dc:55:60:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:13 2025 by rpki-client