
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BED692AC52E48610AB67427AB955CE0534480E2.cer
File: 9BED692AC52E48610AB67427AB955CE0534480E2.cer (raw, json)
Hash identifier: wgQendBYHh1ekq4GjFGhCx0uSji17j/+qLCewBHhq78=
Subject key identifier: 9B:ED:69:2A:C5:2E:48:61:0A:B6:74:27:AB:95:5C:E0:53:44:80:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 25EB6DFD15D33D9F7B8CD6B359B3A9E167FB97D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/9BED692AC52E48610AB67427AB955CE0534480E2.mft
caRepository: rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 08 Sep 2025 18:09:16 +0000
Certificate not after: Mon 07 Sep 2026 18:14:16 +0000
Subordinate resources: AS: 264526
IP: 132.255.204.0/22
IP: 2804:2100::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:eb:6d:fd:15:d3:3d:9f:7b:8c:d6:b3:59:b3:a9:e1:67:fb:97:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 8 18:09:16 2025 GMT
Not After : Sep 7 18:14:16 2026 GMT
Subject: CN=9BED692AC52E48610AB67427AB955CE0534480E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:59:f3:7c:09:61:68:47:1f:ac:9e:9e:4d:68:
fa:9d:30:24:40:53:a5:74:a8:0f:4b:50:e3:31:96:
0e:a6:c6:4f:5d:4c:21:97:21:12:68:21:73:8d:8d:
5f:f9:aa:dc:ca:13:df:a8:76:76:41:ae:0e:1c:95:
6c:d1:6c:f3:42:3c:fa:60:7f:04:a6:01:5d:bc:39:
a2:05:85:44:26:01:59:15:56:36:74:d7:6a:98:25:
93:df:9a:85:d4:97:0b:af:85:60:39:86:03:fe:6a:
05:ef:80:36:7b:e4:d9:a1:28:c5:fc:5e:c5:c1:88:
5d:22:c5:0d:6f:f1:d4:85:c3:5d:91:5d:32:0a:7f:
b7:d4:38:01:0b:6b:7d:71:43:ec:19:d5:bd:98:b2:
21:3d:fe:a2:25:52:41:56:8e:33:9f:7f:33:a8:8d:
67:f8:0e:32:0d:58:ea:78:02:30:78:cb:4a:5b:51:
3c:79:bf:c7:86:96:b4:6b:51:f1:de:43:f7:84:5b:
a9:15:bd:09:bc:6a:87:ae:bc:37:a6:71:58:c8:e0:
cd:20:1e:f9:f8:7f:03:9a:08:4a:5a:d1:4a:cb:30:
b7:7a:69:28:18:3f:c0:1a:33:be:a7:8f:99:95:df:
b6:39:00:92:5a:24:24:59:4a:25:2d:3a:32:52:fb:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9B:ED:69:2A:C5:2E:48:61:0A:B6:74:27:AB:95:5C:E0:53:44:80:E2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/9BED692AC52E48610AB67427AB955CE0534480E2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.204.0/22
IPv6:
2804:2100::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264526
Signature Algorithm: sha256WithRSAEncryption
a8:14:bc:58:66:aa:d0:77:a9:ab:d2:98:e4:34:f7:1e:6b:e5:
45:7c:54:eb:41:5a:ed:e4:35:15:c3:95:f4:64:d5:b9:5e:e8:
bc:93:70:3f:05:45:4a:f5:2d:ed:6c:e3:74:b6:b0:09:39:43:
87:33:5a:24:d7:31:cd:17:da:c1:a9:fa:7d:ca:b9:99:c6:03:
21:54:92:35:d8:36:2a:88:16:15:c3:94:e2:0e:c2:a9:36:5f:
f6:4b:03:b0:fa:b2:0d:db:4f:d2:19:c2:1a:5b:fa:60:bc:a5:
49:0b:4a:f5:21:2f:71:6f:81:9f:58:67:79:ad:18:6d:eb:6d:
1e:16:83:f2:8a:6a:fd:9d:f3:ad:34:ee:35:28:e8:8b:34:ca:
f8:0c:c1:48:f9:e3:d6:0e:20:97:c8:21:7a:52:ba:75:53:13:
d4:6c:f0:bf:8f:3d:d4:8d:f8:d0:22:01:ce:69:23:91:9f:72:
85:de:84:f4:a7:45:a8:c7:79:c6:7a:ed:2e:12:78:49:e7:38:
99:64:bb:11:be:20:cc:3b:e3:4d:2b:19:92:ec:86:f3:69:c8:
0c:ad:98:b8:be:d1:eb:7f:15:2c:c4:1c:3c:91:d7:57:d9:92:
f2:9e:67:16:fe:38:1a:a4:ce:b7:a0:3b:2a:d2:7e:4b:a9:4a:
44:8b:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:36:37 2025 by rpki-client