
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
File: B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer (raw, json)
Hash identifier: 0KZ3yoohOn0M6xq3zAtyqtifrFRc5hrO64jyPAT3NAE=
Subject key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 325A3210F5D9796098A0E01D64BC8FAF31096043
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
caRepository: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 11 Aug 2026 02:03:03 +0000
Certificate not after: Tue 10 Aug 2027 02:08:03 +0000
Subordinate resources: AS: 263569
IP: 45.5.220.0/22
IP: 45.163.152.0/22
IP: 45.172.252.0/22
IP: 45.186.72.0/22
IP: 45.225.160.0/22
IP: 45.225.236.0/22
IP: 131.161.60.0/22
IP: 131.221.128.0/22
IP: 138.118.168.0/22
IP: 143.202.244.0/22
IP: 168.232.216.0/22
IP: 170.80.208.0/22
IP: 186.249.216.0/22
IP: 200.4.116.0/22
IP: 2804:f30::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 07:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5a:32:10:f5:d9:79:60:98:a0:e0:1d:64:bc:8f:af:31:09:60:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 11 02:03:03 2026 GMT
Not After : Aug 10 02:08:03 2027 GMT
Subject: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:9c:2d:ac:4f:e9:2b:91:c9:c4:21:b3:31:
02:c4:86:8b:41:75:9f:45:61:31:16:01:20:bb:e4:
37:c1:8a:e8:95:f7:de:26:96:79:6e:9e:49:4d:7c:
bd:fb:a5:a7:8e:5e:4b:9d:17:12:88:9f:00:01:11:
2d:75:ef:a9:71:66:39:01:83:c8:31:dd:11:1a:91:
4d:06:e4:66:b6:2b:b2:44:2e:30:43:f8:ae:c4:08:
38:c4:7e:e6:25:79:49:8f:fc:7b:01:9e:35:ce:51:
d5:21:97:c1:cf:e2:97:60:df:40:34:98:0f:f4:78:
6e:25:85:aa:cf:47:2f:25:a7:69:b9:c5:1c:83:aa:
a4:f2:a1:4b:a3:c3:df:ee:e0:f8:00:1c:07:dc:3e:
22:23:68:6d:5d:55:6a:ee:77:30:07:c0:ce:84:ab:
34:12:bf:b2:a6:6b:67:61:c0:97:d5:73:09:c0:28:
d9:b7:37:11:a8:12:f1:97:87:51:01:33:77:f3:83:
34:c2:e6:32:49:05:d5:21:dc:dc:bf:df:ab:d6:0c:
c9:2d:d1:c7:00:ed:d6:9b:4e:f6:ec:db:54:78:8b:
0f:b7:96:96:01:8d:39:fd:d2:71:04:d6:6a:61:11:
f6:33:ae:ce:dd:2d:c3:61:94:1f:33:1f:f6:49:ea:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.220.0/22
45.163.152.0/22
45.172.252.0/22
45.186.72.0/22
45.225.160.0/22
45.225.236.0/22
131.161.60.0/22
131.221.128.0/22
138.118.168.0/22
143.202.244.0/22
168.232.216.0/22
170.80.208.0/22
186.249.216.0/22
200.4.116.0/22
IPv6:
2804:f30::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263569
Signature Algorithm: sha256WithRSAEncryption
03:af:9b:c4:ec:44:5b:ef:d4:66:b1:68:51:33:c8:d1:b2:7c:
58:ef:e8:15:1c:40:a8:a0:85:45:7d:91:17:4b:d0:62:9c:b0:
a3:72:e8:ed:52:8d:bb:ff:7e:ad:34:78:46:6d:7a:f8:31:87:
ff:a9:5d:ce:cf:a6:0d:95:b1:34:a6:99:ec:64:2e:dc:1e:97:
ef:02:89:78:20:cf:d6:ba:00:5d:5d:fa:bc:a4:d3:f2:d9:35:
16:a9:7e:c4:69:87:17:ce:f7:59:ce:58:7b:bb:3a:a3:84:15:
9f:82:07:14:11:df:64:c2:f2:47:8d:17:14:9a:b3:9c:5f:4a:
30:22:59:ec:ee:18:9a:e6:67:cd:81:46:97:a6:df:b6:bc:b8:
81:4c:d3:99:91:c7:58:3f:96:49:c0:ff:9b:e9:26:9e:1c:f3:
cf:5a:79:8a:f1:60:63:29:9d:21:a2:a6:8a:52:0a:36:17:a6:
a1:c9:23:d0:4a:a3:ef:9a:87:d7:06:a9:9f:42:b1:60:32:0d:
8f:56:38:f2:b7:48:b5:f4:75:d7:0e:a2:c9:aa:96:a3:44:14:
0d:82:fc:f3:b4:6c:55:79:65:f2:7b:c2:bc:a0:90:98:29:05:
4d:f8:94:6f:e9:26:fe:91:e1:46:9b:f9:c1:a8:23:b2:d5:8e:
59:f1:36:4e
-----BEGIN CERTIFICATE-----
MIIGfjCCBWagAwIBAgIUMloyEPXZeWCYoOAdZLyPrzEJYEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA4MTEwMjAzMDNaFw0yNzA4MTAwMjA4MDNaMDMxMTAvBgNV
BAMTKEI0ODY5OEMxQzEzRUEzQzY2NDQyQzdGNzdCQzM3NTA5QzQ4QTFCQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PZwtrE/pK5HJxCGzMQLEhotB
dZ9FYTEWASC75DfBiuiV994mlnlunklNfL37paeOXkudFxKInwABES1176lxZjkB
g8gx3REakU0G5Ga2K7JELjBD+K7ECDjEfuYleUmP/HsBnjXOUdUhl8HP4pdg30A0
mA/0eG4lharPRy8lp2m5xRyDqqTyoUujw9/u4PgAHAfcPiIjaG1dVWrudzAHwM6E
qzQSv7Kma2dhwJfVcwnAKNm3NxGoEvGXh1EBM3fzgzTC5jJJBdUh3Ny/36vWDMkt
0ccA7dabTvbs21R4iw+3lpYBjTn90nEE1mphEfYzrs7dLcNhlB8zH/ZJ6pEBAgMB
AAGjggOIMIIDhDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0hpjBwT6jxmRC
x/d7w3UJxIobrjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGNm
TGhrcXU3d3dRYzRGRlNXaVNkcjJKZmI1bkNiWHVtb2ZoZkRYUEVMWHgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hj
Zkxoa3F1N3d3UWM0RkZTV2lTZHIySmZiNW5DYlh1bW9maGZEWFBFTFh4LzAvQjQ4
Njk4QzFDMTNFQTNDNjY0NDJDN0Y3N0JDMzc1MDlDNDhBMUJBRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEH
AQH/BG0wazBaBAIAATBUAwQCLQXcAwQCLaOYAwQCLaz8AwQCLbpIAwQCLeGgAwQC
LeHsAwQCg6E8AwQCg92AAwQCinaoAwQCj8r0AwQCqOjYAwQCqlDQAwQCuvnYAwQC
yAR0MA0EAgACMAcDBQAoBA8wMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQFkTAN
BgkqhkiG9w0BAQsFAAOCAQEAA6+bxOxEW+/UZrFoUTPI0bJ8WO/oFRxAqKCFRX2R
F0vQYpywo3Lo7VKNu/9+rTR4Rm16+DGH/6ldzs+mDZWxNKaZ7GQu3B6X7wKJeCDP
1roAXV36vKTT8tk1Fql+xGmHF873Wc5Ye7s6o4QVn4IHFBHfZMLyR40XFJqznF9K
MCJZ7O4YmuZnzYFGl6bftry4gUzTmZHHWD+WScD/m+kmnhzzz1p5ivFgYymdIaKm
ilIKNhemockj0Eqj75qH1wapn0KxYDINj1Y48rdItfR11w6iyaqWo0QUDYL887Rs
VXll8nvCvKCQmCkFTfiUb+km/pHhRpv5wagjstWOWfE2Tg==
-----END CERTIFICATE-----
Generated at Mon Aug 24 06:45:59 2026 by rpki-client