
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer
File: 98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer (raw, json)
Hash identifier: A1vypQGXljW1lYxOvT0AJhHmN8PjmeJ+Be5rCBxumf4=
Subject key identifier: 98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 40536DB9A1743369754BDBE2275A21B4DA05C50D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
caRepository: rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 22 Aug 2026 14:34:22 +0000
Certificate not after: Sat 21 Aug 2027 14:39:22 +0000
Subordinate resources: AS: 270824
IP: 190.115.196.0/22
IP: 2804:71fc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 10:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:53:6d:b9:a1:74:33:69:75:4b:db:e2:27:5a:21:b4:da:05:c5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 22 14:34:22 2026 GMT
Not After : Aug 21 14:39:22 2027 GMT
Subject: CN=98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:73:d2:94:8b:12:58:01:0d:3c:72:7c:67:
a8:13:dd:84:58:32:3c:9e:b5:9d:84:9c:c2:8c:e6:
6c:51:d9:69:ac:1e:71:1e:fb:8f:b9:15:fb:fd:76:
61:76:29:96:36:90:67:c9:56:8f:eb:7d:c2:4e:d8:
a8:e3:f4:bf:20:27:5d:2d:ee:ab:e1:01:c4:45:ee:
a7:12:bd:98:1c:6c:cb:86:b3:c0:2b:44:f1:4a:d2:
3e:cd:48:5b:17:c4:71:44:40:2f:a6:88:4c:c5:32:
4a:fe:b6:bc:8b:1f:e7:4a:13:9f:81:e0:09:84:30:
b8:d2:e8:1c:3d:dd:6f:dc:03:68:9d:e0:e8:bf:32:
e7:c5:31:e5:8c:84:a0:44:0b:aa:7f:3e:4e:4a:31:
e9:dd:fa:65:80:22:26:d5:1f:14:70:26:0a:e5:5e:
ad:e9:bb:eb:5c:08:b2:e8:0d:98:b3:3c:67:b2:a4:
da:99:0f:8b:51:74:8e:d7:c1:0d:fb:a2:69:c7:02:
ba:86:3d:b6:bc:71:ef:54:84:52:5f:b9:6d:31:86:
55:c8:82:6d:64:60:21:dc:dc:be:4a:ee:17:3c:ea:
aa:18:b8:b8:3e:bd:f7:ea:db:21:33:76:c2:41:b7:
c7:d9:df:0d:ec:32:9e:73:96:90:9c:3b:3c:7a:3c:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.115.196.0/22
IPv6:
2804:71fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270824
Signature Algorithm: sha256WithRSAEncryption
b5:7d:d7:b0:90:58:43:75:9e:78:7b:e4:17:92:60:32:47:2b:
39:63:e9:31:42:67:0e:ce:6a:a7:f4:80:12:2d:4d:77:1b:2c:
45:cd:bd:ff:d6:ee:28:dc:81:85:8e:47:fe:9b:b8:25:1d:ed:
26:60:67:99:77:f5:44:bb:9b:d9:30:4e:53:28:25:f3:40:f0:
46:e4:e2:f4:d8:ca:22:fa:15:58:15:0f:b0:d8:49:c7:94:61:
ea:28:84:29:9e:47:2e:bf:4b:bc:6b:a8:0f:75:c7:39:8e:95:
0e:98:7e:f0:56:f3:b8:94:bb:d2:7c:d3:52:46:70:c4:b5:03:
9c:41:9d:62:ce:04:e7:0a:63:bd:48:77:aa:07:95:06:b8:94:
85:f8:a9:4e:0c:a2:cf:ad:af:da:c0:f0:b4:62:8d:ce:4e:6c:
af:a0:68:ab:e2:30:d9:09:d2:a7:d9:0b:8d:ed:41:80:c4:2d:
ce:e2:3f:5a:ce:29:94:4f:09:71:6f:a2:8c:b7:ea:86:4e:be:
95:18:67:4b:d2:2a:90:53:e2:e7:ac:92:eb:a7:fe:9c:fe:19:
56:cf:c0:75:34:11:c0:b7:d6:fa:f6:50:83:bb:6a:37:ca:a6:
06:d4:87:09:68:60:7b:13:31:07:55:0c:e3:27:a8:0d:14:c7:
df:cc:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:27:25 2026 by rpki-client