
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.cer
File: 9AFB03F5D68397694C28760FEF53EF9E19BFFB19.cer (raw, json)
Hash identifier: xrAh2T7ksjNw6kFnHYGKUqQ4DhfrPTMh0KuDkFArhsc=
Subject key identifier: 9A:FB:03:F5:D6:83:97:69:4C:28:76:0F:EF:53:EF:9E:19:BF:FB:19
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 67584388E275F81958C172120E4FABCEEC184BCF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft
caRepository: rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 08 Jul 2026 12:16:21 +0000
Certificate not after: Wed 07 Jul 2027 12:21:21 +0000
Subordinate resources: AS: 266583
IP: 45.7.100.0/22
IP: 45.228.12.0/22
IP: 2804:3e40::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Jul 2026 14:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:58:43:88:e2:75:f8:19:58:c1:72:12:0e:4f:ab:ce:ec:18:4b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 8 12:16:21 2026 GMT
Not After : Jul 7 12:21:21 2027 GMT
Subject: CN=9AFB03F5D68397694C28760FEF53EF9E19BFFB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:be:86:f8:71:7c:6c:3d:c8:ab:35:d3:e0:
f8:9d:a6:eb:95:a0:11:01:fa:2c:7e:a0:e7:79:a3:
bd:86:81:9a:6d:27:ef:58:5b:6a:90:31:58:65:ee:
86:26:95:3f:53:52:d1:1b:7b:90:d0:41:f4:39:44:
5a:36:2e:0e:db:7b:96:0b:39:66:64:2d:e0:fd:64:
9d:6c:f2:89:83:7c:b6:a4:c1:89:e5:d8:55:62:ac:
ab:3b:e4:a3:c8:82:04:0b:03:0b:a4:7b:f8:af:1e:
8f:da:24:85:2d:80:ce:92:27:eb:8a:5a:dd:17:f1:
e8:a0:da:2a:c8:bf:4b:f8:66:76:13:a3:04:f1:e1:
3f:dc:96:22:a5:54:db:23:cf:a2:11:5d:c0:5b:0b:
8d:00:0e:f2:95:65:10:09:18:eb:40:ce:9c:f1:65:
02:78:5d:a9:8e:b8:f2:b4:06:f6:e8:ff:58:fd:14:
1b:25:de:19:9d:18:ba:46:cf:a9:8b:ee:5d:ad:d8:
07:31:9f:36:78:6b:11:46:83:16:44:42:f0:7b:40:
3c:a0:17:ad:55:5a:51:2c:55:7f:7d:d9:58:22:27:
4c:b3:17:f2:03:a3:c5:5c:22:48:73:6c:bc:6c:9e:
04:3d:64:6b:62:ee:a3:d3:a5:97:35:80:18:5a:b6:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9A:FB:03:F5:D6:83:97:69:4C:28:76:0F:EF:53:EF:9E:19:BF:FB:19
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.100.0/22
45.228.12.0/22
IPv6:
2804:3e40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266583
Signature Algorithm: sha256WithRSAEncryption
5a:6a:a3:17:c0:50:6a:76:58:bd:ed:cb:f7:f4:70:db:ff:9f:
db:33:7e:60:ec:6e:3d:61:c3:8d:49:1a:c9:1b:56:22:01:8d:
66:76:d1:58:4a:9b:73:44:dd:f8:ad:78:33:a9:93:7d:b7:56:
cc:3c:8d:c4:f4:ee:a2:17:36:b1:93:19:f7:18:dc:51:1f:59:
5f:8f:28:3d:ae:01:da:1b:3e:d3:51:05:5e:d6:ab:1a:3b:81:
53:b9:bd:23:80:28:55:85:04:4b:b1:49:ae:76:b4:8d:08:e1:
a6:61:c7:3c:01:aa:70:52:b2:4d:e4:d3:2d:18:c6:d2:3a:a9:
47:2c:2e:c6:39:d5:76:e3:24:a9:eb:20:71:d0:fd:1c:0a:7f:
d0:fc:26:aa:2d:cb:a9:eb:55:17:c7:db:0c:be:84:b6:4c:48:
45:ee:cc:be:d2:71:ce:6a:91:d9:54:f7:e0:74:7f:af:ba:8a:
7c:e1:50:5d:84:3f:25:50:54:d1:aa:a8:d5:68:d7:41:bc:b9:
fc:41:cb:c9:b9:79:96:50:ce:26:e7:3b:bf:4f:94:a0:62:88:
33:92:1e:53:55:a3:68:c7:00:c9:ff:64:85:3e:c6:bd:f0:bc:
1f:d2:63:70:e5:b9:68:dc:e7:58:4a:9c:8b:a1:36:f6:63:61:
b9:ce:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:18:53 2026 by rpki-client