
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer
File: 99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer (raw, json)
Hash identifier: XLeBJ9TTxJFnpm9oDfVxkUMYwvzx++5MaWXm7IaY41s=
Subject key identifier: 99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 63C608BBA97DB3FBC8718CD0C7B037DC45AD803C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
caRepository: rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 17 Aug 2026 20:51:34 +0000
Certificate not after: Mon 16 Aug 2027 20:56:34 +0000
Subordinate resources: AS: 262473
IP: 177.47.208.0/20
IP: 2804:7f94::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 16:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:c6:08:bb:a9:7d:b3:fb:c8:71:8c:d0:c7:b0:37:dc:45:ad:80:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 17 20:51:34 2026 GMT
Not After : Aug 16 20:56:34 2027 GMT
Subject: CN=99D25D587D9589BDB42383AA05FD4F58C8E686AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:d5:ca:48:a1:de:26:fd:a2:01:55:23:c3:
4e:64:0b:d3:fa:1e:b7:c1:e2:37:08:86:0b:78:ce:
30:82:8d:08:58:0d:7b:c2:ad:c6:28:03:12:96:3d:
b1:ee:73:fd:0d:f1:94:b5:e0:2b:df:e2:5c:62:be:
8e:01:84:a6:96:fc:36:d7:4c:d5:54:db:a4:da:e7:
e8:02:d9:52:40:9d:02:61:e9:dd:52:34:83:cd:99:
4d:d1:d9:5c:fd:8b:39:42:50:01:f5:7a:9a:06:a2:
e0:35:84:41:ec:32:f7:f2:eb:60:da:b2:8e:91:50:
20:b6:f4:bd:28:4e:e9:78:98:8c:7f:81:5a:34:58:
18:9d:ef:78:a9:41:c4:be:91:81:31:da:5c:53:ed:
79:4e:57:18:e9:33:ea:24:2d:96:94:65:b0:fc:95:
20:44:36:e6:53:85:a7:70:c4:44:c9:28:10:02:27:
ec:0c:35:85:6f:86:7a:db:88:8d:cf:ca:3b:26:98:
78:5b:c0:43:e5:ed:9c:58:ac:ad:57:d4:29:fb:02:
cc:68:23:b4:6c:ac:c4:fb:a7:ea:34:40:52:9b:76:
9b:8f:16:f7:28:a2:89:5a:18:ef:54:cb:8d:25:83:
b0:27:9a:14:fa:7e:db:7b:74:d0:4d:88:ca:e4:45:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.47.208.0/20
IPv6:
2804:7f94::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262473
Signature Algorithm: sha256WithRSAEncryption
3b:8d:59:0a:e1:67:3b:ec:04:28:c7:98:16:9c:2b:18:20:11:
c1:41:59:6b:38:81:2c:50:5c:20:64:75:04:40:ae:2a:f7:28:
24:0e:14:f5:7a:b0:1d:0b:cc:bd:0e:8e:2c:d6:dd:fe:7d:7f:
f3:39:aa:f5:32:4a:a2:72:7f:1d:ec:87:ff:73:6d:fc:8d:39:
8e:0c:1e:d5:0c:86:37:de:5a:de:7d:d0:05:89:d1:d4:2e:1f:
9b:44:45:7a:f3:55:da:75:65:2d:cd:41:7e:c9:e6:a9:d8:c2:
ea:ac:cc:7d:28:cc:c3:36:c2:5e:d1:da:dd:25:24:a1:a2:82:
0c:e4:1c:96:09:31:e3:fa:86:dd:47:aa:98:cb:b7:b3:8c:a1:
b2:5f:fa:cf:16:17:c6:e8:45:05:1a:47:25:56:1f:5d:c0:32:
08:7b:7d:75:60:5b:32:18:e0:54:35:17:87:35:ec:f3:99:88:
6e:b1:e0:d9:c8:b0:d0:dd:28:d4:f9:7c:e3:48:94:5a:ef:6d:
eb:78:4a:fe:8e:29:04:14:a3:c8:7b:54:f2:25:bf:14:ae:76:
ed:58:f5:38:b2:1e:a8:3a:35:12:b5:ba:d1:1b:b8:e2:66:64:
34:2a:f5:42:cc:16:f5:9e:05:72:76:54:fe:98:74:68:85:74:
fb:b8:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:03:57 2026 by rpki-client