
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A096C66C522750DD8B28AE26182F90FE99954BFF.cer
File: A096C66C522750DD8B28AE26182F90FE99954BFF.cer (raw, json)
Hash identifier: 2SUHNZxXDWLvI4xq7v5Dthx7b1QzkAhoZql0qD/zLls=
Subject key identifier: A0:96:C6:6C:52:27:50:DD:8B:28:AE:26:18:2F:90:FE:99:95:4B:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1820456B6F02080E232DE5962754A8717F06B1D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.mft
caRepository: rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 17 Jun 2026 13:55:14 +0000
Certificate not after: Wed 16 Jun 2027 14:00:14 +0000
Subordinate resources: AS: 262482
IP: 138.185.212.0/22
IP: 177.55.32.0/20
IP: 2804:2688::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Jun 2026 09:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:20:45:6b:6f:02:08:0e:23:2d:e5:96:27:54:a8:71:7f:06:b1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 17 13:55:14 2026 GMT
Not After : Jun 16 14:00:14 2027 GMT
Subject: CN=A096C66C522750DD8B28AE26182F90FE99954BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:9e:c2:0f:06:f9:b3:3b:54:b3:ba:02:19:
72:b5:bb:05:a4:08:59:aa:d5:4e:53:23:b6:b3:f2:
c1:a9:55:16:e1:be:98:33:a1:9e:2b:71:9f:3f:73:
7b:10:43:ba:60:a5:82:8b:f3:cb:da:d4:1c:90:19:
73:4f:d9:1d:48:f8:a5:11:6a:9c:64:c4:d3:de:57:
ef:7d:c1:79:f7:e9:68:d0:8b:d2:d8:c7:c8:4d:02:
f2:8a:88:ef:48:7f:95:bb:98:59:b7:6d:e9:5a:57:
ce:da:ba:c4:d8:2a:67:41:49:f2:fd:09:5d:31:b6:
0a:ff:c9:41:46:36:ff:a1:9a:92:56:30:8d:ec:cf:
ef:47:55:64:da:74:fd:ec:55:1d:3f:ef:73:32:3a:
04:f1:15:4e:72:1a:a0:bc:98:c9:52:b9:65:68:0b:
75:ad:98:65:67:ef:1d:59:fb:14:fd:aa:0e:c6:3a:
3e:01:4b:6b:f5:90:ba:57:20:21:b6:04:70:d6:04:
6b:78:7a:43:a5:7b:a2:10:bc:74:ab:9a:a6:34:fc:
5d:fd:d9:09:3e:65:a7:32:e8:82:87:bf:c4:47:02:
dd:51:57:5d:49:07:8f:0f:6b:c6:da:ad:e9:99:44:
93:f1:e1:b0:49:26:75:07:38:e3:8c:32:82:3e:e6:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A0:96:C6:6C:52:27:50:DD:8B:28:AE:26:18:2F:90:FE:99:95:4B:FF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.212.0/22
177.55.32.0/20
IPv6:
2804:2688::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262482
Signature Algorithm: sha256WithRSAEncryption
07:0b:8f:6b:e7:67:f1:43:31:aa:90:9f:e8:91:cc:86:f6:8f:
a8:1c:8f:dd:bd:44:d1:15:8b:39:19:c1:2e:16:dd:04:24:10:
23:c3:d2:eb:a5:45:7a:5e:e8:d9:ed:ff:d5:3d:8c:32:cc:55:
3c:a5:58:c3:bf:89:47:74:f0:d5:91:b0:70:17:fe:7e:a1:6d:
90:d7:4f:1c:66:d8:a7:98:b1:1f:84:f9:1a:ac:e4:4f:62:f2:
64:bf:3c:5b:4d:7b:a1:89:70:b1:92:4a:94:05:a0:45:05:3a:
cc:c5:31:56:60:6e:71:f5:2b:44:1c:2f:af:49:05:af:f1:86:
df:fa:45:01:da:a7:50:a8:1d:29:76:90:37:a7:16:30:ba:14:
8d:ea:14:5c:b9:18:d0:24:d6:97:60:eb:0b:43:40:21:0a:c9:
90:c4:ab:38:b6:f6:60:ed:d1:02:c2:ce:cf:3d:ac:5c:1b:6c:
f8:a5:1a:9e:4f:d2:67:6a:df:07:a8:a1:5c:df:1d:1b:05:c7:
d3:4d:13:a9:79:c2:a9:74:62:8f:06:54:e4:35:32:0b:9b:4a:
c0:70:51:9d:f3:7e:51:67:ab:6e:43:97:e8:a0:55:7f:66:c1:
25:b7:be:e6:54:29:56:6d:8a:d7:68:19:ed:0d:eb:7b:37:35:
9e:61:84:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 11:05:06 2026 by rpki-client