
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/9861D6162AFB1564DB9367D2F1F291FA8D853AF9.cer
File: 9861D6162AFB1564DB9367D2F1F291FA8D853AF9.cer (raw, json)
Hash identifier: MmUTVez+vQJAGyAhsEH7IMg/CNJG8XkTEHfS4WL9Ge4=
Subject key identifier: 98:61:D6:16:2A:FB:15:64:DB:93:67:D2:F1:F2:91:FA:8D:85:3A:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7DC6C8BD3BC270EADF8F6346F5D701CC7B82CA6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Gs1yP1YaGNE7vLJ2JfJGd3BPwXVcGNF8WNZK4iUH24mi/0/9861D6162AFB1564DB9367D2F1F291FA8D853AF9.mft
caRepository: rsync://rpki-repo.registro.br/repo/Gs1yP1YaGNE7vLJ2JfJGd3BPwXVcGNF8WNZK4iUH24mi/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 21 Aug 2026 12:57:00 +0000
Certificate not after: Fri 20 Aug 2027 13:02:00 +0000
Subordinate resources: AS: 268708
IP: 45.171.52.0/22
IP: 2804:5988::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 00:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c6:c8:bd:3b:c2:70:ea:df:8f:63:46:f5:d7:01:cc:7b:82:ca:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 21 12:57:00 2026 GMT
Not After : Aug 20 13:02:00 2027 GMT
Subject: CN=9861D6162AFB1564DB9367D2F1F291FA8D853AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:c8:a7:fb:f1:f8:f7:88:68:73:52:7a:16:
d7:3c:7c:9e:ef:2a:5f:82:ad:98:63:ac:08:8c:a1:
a2:0e:a6:a6:a9:1d:24:6e:69:b6:d9:7c:7c:dd:83:
ac:30:0e:be:36:dc:5c:ed:3a:8f:e4:be:3d:9f:4a:
f7:fc:0a:7f:75:e1:c8:43:83:38:99:25:0d:92:a8:
b7:6c:4a:f5:08:9d:29:43:82:9c:4d:3d:d1:1a:da:
c0:a7:71:0c:95:5d:d9:16:24:44:71:7c:dc:41:7c:
6a:59:49:d6:9f:90:d0:c7:98:a9:4f:19:51:bf:90:
df:d1:30:88:e6:a3:9b:99:70:79:8e:8d:21:12:a9:
14:85:8a:5c:77:da:18:ce:bc:84:46:47:9e:56:f8:
b7:0c:2f:f8:4c:61:38:72:ad:25:0d:0c:9b:3a:14:
c7:14:c1:45:10:e8:31:6f:ae:9b:9e:9c:55:50:c5:
ea:9d:d6:1c:9f:89:f9:dd:49:b8:b0:f7:d4:8d:3f:
16:13:cf:91:64:c2:c3:75:09:d4:76:b4:a3:e9:ee:
c6:1b:1e:2a:e6:d0:a0:43:fa:bc:c3:0a:ac:ae:f5:
0c:f7:a2:0e:46:76:83:bc:af:20:f5:59:46:7c:76:
21:f3:51:ed:dc:ed:4d:8d:c1:59:61:23:ab:94:c8:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
98:61:D6:16:2A:FB:15:64:DB:93:67:D2:F1:F2:91:FA:8D:85:3A:F9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gs1yP1YaGNE7vLJ2JfJGd3BPwXVcGNF8WNZK4iUH24mi/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gs1yP1YaGNE7vLJ2JfJGd3BPwXVcGNF8WNZK4iUH24mi/0/9861D6162AFB1564DB9367D2F1F291FA8D853AF9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.52.0/22
IPv6:
2804:5988::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268708
Signature Algorithm: sha256WithRSAEncryption
d5:6b:37:e7:d3:6a:f4:4a:57:6a:5b:36:98:85:83:05:8a:e1:
82:ad:14:a3:ca:21:ee:44:ba:22:bd:94:c2:a9:dc:6d:c2:69:
ee:96:26:a0:ae:4c:13:28:6e:c3:c7:26:b7:c2:8a:f1:c9:fd:
bd:6b:aa:da:62:1f:6b:c4:f8:34:99:46:2e:86:99:03:3a:b5:
fa:3b:c0:0c:f1:c4:99:34:14:64:d0:16:04:40:7d:89:32:77:
1c:12:f4:bf:42:3c:37:f0:4c:b9:f3:c4:64:af:60:c4:38:60:
11:79:85:a1:64:d8:5b:e4:35:c3:62:ed:1c:07:92:0b:32:8d:
6a:45:b6:e4:f6:bf:05:3a:c2:b7:9b:a8:7e:31:00:d7:1a:7c:
f2:18:67:45:a1:68:d1:f1:04:51:53:83:67:22:64:f0:b4:01:
8a:96:5c:73:49:ec:bb:fa:ee:71:6f:e8:a1:c0:7d:28:86:ed:
6e:0c:6f:43:45:32:b6:72:91:3b:9b:81:b8:ed:61:11:30:7e:
bf:74:8f:a9:8c:03:5c:d5:a6:93:ea:28:0d:d1:dc:98:4a:44:
98:63:d6:b5:7c:9f:d1:57:3e:c1:25:fe:07:99:98:b6:4a:35:
36:50:f3:36:e9:b3:42:94:36:f1:96:e5:73:dc:b9:a7:ac:77:
47:fe:f9:67
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUfcbIvTvCcOrfj2NG9dcBzHuCymowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA4MjExMjU3MDBaFw0yNzA4MjAxMzAyMDBaMDMxMTAvBgNV
BAMTKDk4NjFENjE2MkFGQjE1NjREQjkzNjdEMkYxRjI5MUZBOEQ4NTNBRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj3sin+/H494hoc1J6Ftc8fJ7v
Kl+CrZhjrAiMoaIOpqapHSRuabbZfHzdg6wwDr423FztOo/kvj2fSvf8Cn914chD
gziZJQ2SqLdsSvUInSlDgpxNPdEa2sCncQyVXdkWJERxfNxBfGpZSdafkNDHmKlP
GVG/kN/RMIjmo5uZcHmOjSESqRSFilx32hjOvIRGR55W+LcML/hMYThyrSUNDJs6
FMcUwUUQ6DFvrpuenFVQxeqd1hyfifndSbiw99SNPxYTz5FkwsN1CdR2tKPp7sYb
Hirm0KBD+rzDCqyu9Qz3og5GdoO8ryD1WUZ8diHzUe3c7U2NwVlhI6uUyOxpAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYYdYWKvsVZNuT
Z9Lx8pH6jYU6+TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Mx
eVAxWWFHTkU3dkxKMkpmSkdkM0JQd1hWY0dORjhXTlpLNGlVSDI0bWkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dz
MXlQMVlhR05FN3ZMSjJKZkpHZDNCUHdYVmNHTkY4V05aSzRpVUgyNG1pLzAvOTg2
MUQ2MTYyQUZCMTU2NERCOTM2N0QyRjFGMjkxRkE4RDg1M0FGOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLas0MA0EAgACMAcDBQAoBFmIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZpDANBgkqhkiG9w0BAQsFAAOCAQEA1Ws359Nq9EpXals2
mIWDBYrhgq0Uo8oh7kS6Ir2UwqncbcJp7pYmoK5MEyhuw8cmt8KK8cn9vWuq2mIf
a8T4NJlGLoaZAzq1+jvADPHEmTQUZNAWBEB9iTJ3HBL0v0I8N/BMufPEZK9gxDhg
EXmFoWTYW+Q1w2LtHAeSCzKNakW25Pa/BTrCt5uofjEA1xp88hhnRaFo0fEEUVOD
ZyJk8LQBipZcc0nsu/rucW/oocB9KIbtbgxvQ0UytnKRO5uBuO1hETB+v3SPqYwD
XNWmk+ooDdHcmEpEmGPWtXyf0Vc+wSX+B5mYtko1NlDzNumzQpQ28Zblc9y5p6x3
R/75Zw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 01:14:33 2026 by rpki-client