
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B836C5A84D0AFA45DB0B287BEB7D587E59887D9A.cer
File: B836C5A84D0AFA45DB0B287BEB7D587E59887D9A.cer (raw, json)
Hash identifier: oeIHBXfc/Znn90pev3daZK/PQBWouyO3/sNS+Ds9kmE=
Subject key identifier: B8:36:C5:A8:4D:0A:FA:45:DB:0B:28:7B:EB:7D:58:7E:59:88:7D:9A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 36C3994C045ECA08050D058E35E4952407F96FEC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/B836C5A84D0AFA45DB0B287BEB7D587E59887D9A.mft
caRepository: rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 25 Jul 2025 14:19:02 +0000
Certificate not after: Fri 24 Jul 2026 14:24:02 +0000
Subordinate resources: AS: 272163
IP: 2804:82e4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 00:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c3:99:4c:04:5e:ca:08:05:0d:05:8e:35:e4:95:24:07:f9:6f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 25 14:19:02 2025 GMT
Not After : Jul 24 14:24:02 2026 GMT
Subject: CN=B836C5A84D0AFA45DB0B287BEB7D587E59887D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c7:c5:bb:4f:20:f8:87:07:56:3c:5c:64:89:
e1:ad:58:4b:0e:e6:d3:a4:a1:71:f2:c3:2f:76:27:
7b:3b:fd:e8:fc:b9:fa:33:5e:02:3a:dc:f9:7c:bf:
af:fb:00:50:69:f1:45:81:76:ac:03:8b:72:dd:7b:
8e:9f:80:52:08:8a:66:37:fb:af:92:22:97:36:e6:
f7:4a:95:42:e4:2a:8f:16:5d:ba:a5:fd:65:bd:09:
c0:3b:20:db:81:d2:ac:d4:c0:34:a8:19:bf:fd:de:
e0:c8:1c:4f:aa:cd:02:ce:7e:95:56:99:f9:83:e7:
21:86:ca:d0:a8:ea:79:ff:15:b6:ac:e3:1a:53:78:
25:f1:07:d0:a1:6e:1e:73:b5:17:1a:28:ef:b0:51:
87:07:55:36:87:3c:eb:e0:0d:8b:58:30:ed:bc:4d:
66:2a:40:bd:0f:53:c6:52:f2:41:19:6d:35:a5:b9:
0d:49:d1:94:a4:1f:a0:23:d6:20:02:95:11:09:1d:
fa:3e:d2:21:dd:a3:be:6f:bb:f2:70:cd:05:00:0d:
d9:65:59:b1:be:fb:1b:80:58:32:08:3e:b7:b7:a4:
cd:08:0c:5c:95:70:12:aa:63:84:97:5a:2d:d0:d9:
b7:24:9f:7b:e6:8f:74:2a:8a:08:59:1e:d4:f6:71:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:36:C5:A8:4D:0A:FA:45:DB:0B:28:7B:EB:7D:58:7E:59:88:7D:9A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/B836C5A84D0AFA45DB0B287BEB7D587E59887D9A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:82e4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
272163
Signature Algorithm: sha256WithRSAEncryption
1b:9a:e5:52:03:80:4d:82:c3:d2:27:bf:bb:2e:50:bf:28:dc:
ec:9c:f9:f1:ec:f0:fc:a1:a9:3a:44:a2:bd:15:e8:9d:2e:42:
bd:9c:42:bf:d8:18:1b:ad:83:ee:02:af:62:e9:bf:6b:03:cf:
fb:73:2e:fc:84:bd:90:d0:c9:87:55:86:ec:1c:66:b2:06:35:
88:ab:3f:db:68:50:21:c2:b7:52:e3:44:b4:93:4d:03:31:a1:
86:77:68:57:10:ec:76:c2:68:77:c4:b6:4e:a0:c6:e7:e0:48:
b2:39:99:c3:84:bc:a4:7b:40:4f:1e:b9:ad:8b:d8:28:73:a1:
a4:ab:f9:fa:18:2b:ec:66:e8:b5:30:ef:58:c1:54:00:1c:31:
b9:ed:13:26:9b:fa:7c:e5:d1:cf:d5:85:1c:3b:9c:83:4e:14:
e9:e3:d2:fe:bb:ed:32:81:07:0a:2d:46:7c:7e:16:3e:28:e6:
0b:92:36:a6:e3:4e:64:f9:53:b1:fa:29:ca:c9:b7:8c:31:34:
00:d2:cf:97:4f:26:10:08:3c:59:d7:4c:95:6d:11:a4:c7:a1:
fe:e6:88:b5:05:0a:77:c2:c5:6a:93:cb:aa:69:28:4c:aa:4b:
f8:67:89:ae:58:66:28:f0:84:95:73:95:ec:60:4c:e0:5c:a7:
b3:55:cf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 23:02:05 2025 by rpki-client