
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A3A85B48B681F54A053A076EA1B720D0B68447AA.cer
File: A3A85B48B681F54A053A076EA1B720D0B68447AA.cer (raw, json)
Hash identifier: FiQ1I7CAgS+yUHwDxK9Cpx8liV9RE/gyoNMTCcJhz2Q=
Subject key identifier: A3:A8:5B:48:B6:81:F5:4A:05:3A:07:6E:A1:B7:20:D0:B6:84:47:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 690244ACD12D2BEDD44A2999391DF720C4A87B6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/A3A85B48B681F54A053A076EA1B720D0B68447AA.mft
caRepository: rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 28 Oct 2025 14:45:17 +0000
Certificate not after: Tue 27 Oct 2026 14:50:17 +0000
Subordinate resources: AS: 271007
IP: 170.254.236.0/22
IP: 2804:74d8::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:02:44:ac:d1:2d:2b:ed:d4:4a:29:99:39:1d:f7:20:c4:a8:7b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 28 14:45:17 2025 GMT
Not After : Oct 27 14:50:17 2026 GMT
Subject: CN=A3A85B48B681F54A053A076EA1B720D0B68447AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:0b:ff:b7:49:ed:6c:d3:1d:59:8f:a0:68:
27:34:9f:de:6f:fd:19:48:b3:e8:14:1f:2e:71:f5:
b1:74:44:22:91:a6:94:3c:65:e1:84:be:55:97:ec:
22:eb:ef:eb:33:4e:18:0b:fe:54:e2:17:07:1b:34:
ec:06:5c:27:8e:dd:ea:2d:5e:01:4d:50:25:a9:48:
57:bd:07:1c:32:4d:c7:24:a0:f9:5f:d2:f5:61:be:
56:fb:c9:a1:cb:a5:ed:6b:5d:53:3f:b5:04:eb:9b:
ef:46:c8:6d:da:bc:01:ee:0e:bd:ea:61:ed:6d:dd:
5c:86:f5:ae:d1:da:13:4a:6f:2e:8d:aa:02:7f:dd:
62:60:59:b6:88:ae:f3:d4:5f:02:ae:55:63:cc:87:
d6:1f:14:cf:95:2d:4c:88:c5:5a:88:9d:03:39:71:
c1:f5:d8:00:c9:dc:75:11:58:02:7b:76:24:23:25:
54:74:b5:d4:c9:d4:47:60:b3:b1:f2:05:ad:72:42:
0c:1b:ef:65:57:73:fd:22:c1:eb:41:66:fc:3c:4c:
bf:c3:92:d6:6e:07:bc:fe:98:57:d5:bb:5a:ec:71:
58:b3:0a:02:f1:34:36:69:21:ef:c0:cb:ac:46:e2:
93:f7:80:47:6d:be:2c:53:eb:fc:14:4c:40:5e:33:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A3:A8:5B:48:B6:81:F5:4A:05:3A:07:6E:A1:B7:20:D0:B6:84:47:AA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/A3A85B48B681F54A053A076EA1B720D0B68447AA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.236.0/22
IPv6:
2804:74d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271007
Signature Algorithm: sha256WithRSAEncryption
0f:e3:8f:58:7a:5a:1c:7b:cc:64:cb:c8:d4:57:18:96:a7:0f:
33:15:e2:65:38:8c:f2:e0:e2:a4:2b:1b:7f:9d:b0:a0:e9:04:
21:ad:4c:05:d4:61:c0:61:b5:db:ba:9b:91:b4:61:21:22:d9:
ba:46:ce:9d:37:08:a1:2f:31:a9:0a:e6:de:b1:1c:8d:48:b5:
a7:5d:b8:d0:24:12:78:ad:92:3b:95:f1:83:23:19:5c:8e:17:
04:d3:96:f1:ba:26:ac:2f:c5:b4:e5:81:d5:97:bc:5a:99:fa:
65:e1:19:a0:34:d0:82:78:97:73:12:4b:19:25:24:60:84:ea:
b1:a6:b6:eb:4b:12:e4:ea:a8:19:08:bc:b1:0e:bd:9b:0d:97:
31:65:c5:08:b2:e0:84:e3:77:37:e9:7c:9a:8c:17:7e:fe:c9:
42:64:c6:24:07:68:ac:1f:40:0b:78:6c:2a:18:f4:4e:3b:2f:
7a:5a:75:49:81:4f:3b:b4:9f:c4:3b:b9:88:52:f3:9c:32:05:
98:8a:df:04:3a:a2:42:95:5e:0f:85:b9:dc:bd:a5:99:e3:80:
e4:0c:a7:4f:cc:0e:b9:1c:a5:a5:71:71:89:1f:65:bc:b1:b3:
60:11:d2:ce:32:2b:e5:41:f6:10:b3:ba:e6:dc:78:68:b6:27:
eb:50:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:24:16 2025 by rpki-client