
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8F704041C3FD798A1B7435D81621D922F50F297.cer
File: A8F704041C3FD798A1B7435D81621D922F50F297.cer (raw, json)
Hash identifier: Qx5DNmXQ/B6rDST70BpaMH9sXXvQTRbplvQDLHNuyaU=
Subject key identifier: A8:F7:04:04:1C:3F:D7:98:A1:B7:43:5D:81:62:1D:92:2F:50:F2:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4148F9E315C47096B1967B06E6988A58286B6E8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/A8F704041C3FD798A1B7435D81621D922F50F297.mft
caRepository: rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 26 Jan 2026 17:15:40 +0000
Certificate not after: Mon 25 Jan 2027 17:20:40 +0000
Subordinate resources: AS: 264180
IP: 138.94.164.0/22
IP: 2804:23bc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 23:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:48:f9:e3:15:c4:70:96:b1:96:7b:06:e6:98:8a:58:28:6b:6e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 26 17:15:40 2026 GMT
Not After : Jan 25 17:20:40 2027 GMT
Subject: CN=A8F704041C3FD798A1B7435D81621D922F50F297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:cb:80:29:05:cb:d6:de:26:c3:c8:2b:1c:
c3:1f:20:7c:be:89:34:f7:a4:e8:75:09:8a:82:d8:
7c:f6:90:ee:21:a5:e6:72:30:8f:b3:bf:af:2f:83:
65:cb:55:c5:f8:b1:81:2a:cc:21:cd:cf:6f:74:04:
75:c5:d1:88:02:19:89:0c:8f:d2:64:1e:56:80:1d:
75:d4:43:31:03:5d:4b:8b:46:76:b8:0f:7c:3c:91:
2f:ad:95:4a:f1:a3:23:79:c7:cb:38:74:0d:49:ca:
e3:7b:b8:49:44:97:3a:4c:65:9b:70:f4:38:5e:26:
cc:39:f7:70:ce:37:c8:90:96:27:6b:5f:1f:3f:e8:
ca:50:b2:58:dd:cc:73:78:9c:58:f8:40:06:04:c8:
3b:26:af:fe:0d:56:dc:2b:f7:2e:f0:83:57:7f:ca:
d4:63:21:db:f6:44:27:a0:48:be:bb:ac:c9:d2:9f:
27:37:de:1e:fb:8e:4f:cd:39:93:a2:8b:7b:b8:c3:
2a:d0:de:5f:20:ec:2f:a8:e7:a5:48:c9:34:98:9b:
a9:ce:c1:a6:ec:84:b2:41:5e:e7:fc:ea:a3:73:24:
b2:40:0a:9f:bc:43:3f:43:ab:22:01:b1:5d:b9:65:
7b:ad:e8:ed:43:99:36:94:22:d8:9a:af:26:20:cb:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A8:F7:04:04:1C:3F:D7:98:A1:B7:43:5D:81:62:1D:92:2F:50:F2:97
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/A8F704041C3FD798A1B7435D81621D922F50F297.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.164.0/22
IPv6:
2804:23bc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264180
Signature Algorithm: sha256WithRSAEncryption
37:fd:0c:99:0c:94:a0:d5:bd:c3:08:50:f0:4b:5a:64:e3:61:
fa:79:12:9d:41:fd:a3:e1:b5:ec:c8:a4:8b:b2:a9:fa:ba:5e:
38:1a:83:20:46:ee:58:47:4f:c9:82:81:bf:3f:96:f6:fa:2f:
88:5d:77:ec:bf:4e:93:82:f6:c4:c3:78:25:58:c7:ed:21:82:
69:87:8c:2c:86:85:90:35:d1:ee:36:4d:a6:54:17:77:e4:6a:
c0:34:50:0e:db:03:7f:45:e4:9b:44:20:3b:ac:76:13:23:6e:
3d:8e:1e:24:a2:d4:e3:b0:e4:99:11:1a:85:1a:4d:94:08:72:
0f:4e:3e:af:fe:db:c3:e1:bf:72:66:44:5f:f2:de:4e:35:e4:
98:b6:1c:87:13:4f:75:a3:a8:f9:05:57:c6:bf:59:08:de:f3:
a7:83:0a:d0:83:aa:f2:78:ef:f2:ee:8a:82:f2:0d:e7:80:cd:
54:e9:0f:51:60:2c:62:5d:0f:6b:a1:08:03:30:71:6e:59:fd:
36:29:a7:be:f0:fd:3d:47:eb:98:47:47:db:f1:9d:c4:64:7c:
92:6b:55:ec:99:f3:23:1b:62:99:61:19:21:60:99:eb:af:45:
22:5f:58:f6:e3:b5:89:cf:88:0b:09:03:d5:66:ed:d7:d5:4b:
3f:b2:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:21:06 2026 by rpki-client