
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.cer
File: A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.cer (raw, json)
Hash identifier: GFCVUJ87w9+vVUREnx0uNHWvIyU/ZehKStpG3X5TwZ8=
Subject key identifier: A4:D3:5C:4F:B3:29:FD:EB:5E:CE:D1:B0:63:3A:AC:82:29:79:E5:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 77B9AE19A9A51968068D8954D845B696AFDAE249
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Bcr59rxbbUZhP85KdecKqN4fAay9Fkk3xrCyA2LXE9fr/0/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.mft
caRepository: rsync://rpki-repo.registro.br/repo/Bcr59rxbbUZhP85KdecKqN4fAay9Fkk3xrCyA2LXE9fr/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 13 Oct 2025 22:58:45 +0000
Certificate not after: Mon 12 Oct 2026 23:03:45 +0000
Subordinate resources: AS: 270661
IP: 138.117.236.0/22
IP: 2804:6f74::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b9:ae:19:a9:a5:19:68:06:8d:89:54:d8:45:b6:96:af:da:e2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 13 22:58:45 2025 GMT
Not After : Oct 12 23:03:45 2026 GMT
Subject: CN=A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:b8:7c:03:75:13:e2:11:43:7d:6d:f3:0c:
fd:61:85:9f:5e:37:86:14:bc:ab:d3:d9:fe:bd:2b:
8c:a6:d3:e4:97:8d:7a:5c:84:2d:17:48:2f:98:60:
eb:03:ae:49:65:ba:2a:10:e8:1c:79:c0:99:ed:90:
0b:6b:ed:05:1d:f4:8a:fb:6a:28:92:fd:d8:15:97:
fa:d6:09:01:1e:4c:35:5f:9c:d7:3b:b1:5b:2d:0a:
25:c2:87:ad:69:b8:54:3d:69:22:8e:86:1e:7b:82:
e1:03:b0:a8:ba:4c:ec:84:ee:08:92:cb:57:54:fd:
ce:d2:6c:02:e5:da:7e:6e:52:29:08:d9:7a:9f:ae:
f0:c4:3e:32:6d:91:6c:bd:b1:92:45:14:4d:56:72:
48:66:d7:e4:c8:31:5d:10:ee:6b:dc:22:db:97:2e:
6c:ec:86:e4:03:82:35:bf:1a:10:c7:37:a1:99:cc:
ec:6e:d4:77:d4:09:d1:c7:b0:ca:91:e7:04:57:65:
0c:20:98:80:75:79:67:51:31:2d:0e:64:18:2f:1b:
53:5b:9a:a7:78:99:5b:43:a2:bd:5b:36:12:ad:65:
0b:d0:4d:fd:2a:01:5b:a8:b6:62:6c:a5:d1:30:60:
7d:5b:0b:f4:ba:73:89:ca:2b:97:29:6f:77:99:ce:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A4:D3:5C:4F:B3:29:FD:EB:5E:CE:D1:B0:63:3A:AC:82:29:79:E5:B2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bcr59rxbbUZhP85KdecKqN4fAay9Fkk3xrCyA2LXE9fr/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bcr59rxbbUZhP85KdecKqN4fAay9Fkk3xrCyA2LXE9fr/0/A4D35C4FB329FDEB5ECED1B0633AAC822979E5B2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.236.0/22
IPv6:
2804:6f74::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270661
Signature Algorithm: sha256WithRSAEncryption
02:07:b9:9f:53:11:63:22:fa:af:ce:0d:cc:34:be:61:f6:1b:
24:ee:45:b6:34:31:77:35:f8:11:08:20:fc:05:11:68:31:00:
6d:9a:a7:60:cb:10:99:d3:4b:4d:24:6b:bb:23:f7:17:96:9c:
b3:92:11:3c:35:f3:4a:5c:10:f1:4e:d8:ef:71:a5:a3:60:0c:
c6:08:8a:f7:46:03:0f:33:c4:b2:6e:38:60:0a:db:21:4d:f3:
dd:f4:22:d9:24:b0:c1:51:10:af:a9:8a:ec:d1:f1:71:cc:25:
2e:91:47:a0:06:8c:22:26:eb:1f:2a:ec:12:35:bf:8c:b9:b1:
74:d9:3d:40:eb:35:75:63:33:e1:49:77:cf:30:b7:67:f3:e5:
27:9e:e1:6f:14:63:83:15:d0:78:dc:85:ca:05:fa:2a:66:3f:
a2:a6:06:31:1a:4e:ea:f1:69:4d:1b:c0:f2:bd:71:bc:25:ff:
03:7c:14:c1:80:fd:03:ff:61:4e:57:61:5e:33:98:1a:10:c7:
ee:a2:72:4a:5c:28:27:75:c8:b9:18:30:a7:81:0d:74:21:2d:
2b:b9:5e:05:66:1c:e9:85:4b:ac:2a:74:49:88:d0:2d:2f:94:
16:ef:a4:34:0a:9f:d8:47:51:12:9a:9e:03:2a:df:ee:43:47:
cf:f0:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:23:07 2025 by rpki-client