
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer
File: B8BF37906635F24C2D247EFC8F28584994678276.cer (raw, json)
Hash identifier: Qdm2rc1ohCVICP1UNLBr5IjvDTs2l9kwxcvXRzhlPGU=
Subject key identifier: B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6F0517196B951F2A4B9E34650219D4827CA3B432
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.mft
caRepository: rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 11 Mar 2025 17:11:16 +0000
Certificate not after: Tue 10 Mar 2026 17:16:16 +0000
Subordinate resources: AS: 270963
IP: 189.50.60.0/22
IP: 2804:742c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:05:17:19:6b:95:1f:2a:4b:9e:34:65:02:19:d4:82:7c:a3:b4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 11 17:11:16 2025 GMT
Not After : Mar 10 17:16:16 2026 GMT
Subject: CN=B8BF37906635F24C2D247EFC8F28584994678276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:3f:7b:f8:78:ab:d6:da:52:a2:c8:f8:14:
62:d5:bd:c0:b6:32:bf:03:f5:62:42:a3:dd:78:25:
e6:78:6d:89:97:09:09:d4:19:02:34:6b:d5:98:8f:
2c:9f:b2:ed:ad:cd:2e:87:c5:39:0e:af:07:9b:76:
17:3a:05:62:96:01:4c:29:13:27:d0:66:05:e9:82:
a8:22:d1:15:68:fb:4b:1a:9c:54:30:e7:13:8f:b0:
fd:48:26:c1:a7:8d:a4:fb:b4:4f:02:5f:15:01:c7:
17:db:82:29:c7:73:02:e9:61:67:37:29:44:7e:fa:
f0:8e:94:8a:16:f2:b7:58:35:0a:20:c3:69:c5:f4:
bd:a8:0f:56:96:fe:0a:ce:97:0b:9f:12:08:04:ea:
54:09:d3:b5:68:4b:7f:a4:23:d3:e7:32:cf:8e:3b:
7a:5f:c4:4c:52:c6:c9:f8:3b:35:5a:b4:c4:f5:1d:
26:14:2e:8e:65:fa:75:a0:8e:97:80:d9:77:4e:18:
e0:0d:b5:91:22:8c:6f:e8:fa:9d:ee:c0:46:64:8b:
f9:b9:e5:50:c1:58:8a:1a:2e:91:c8:52:5c:9e:05:
f0:cb:e6:59:18:4e:9f:07:09:05:9a:ba:9e:8a:2c:
45:da:65:95:1b:03:fd:de:80:8e:d3:2a:4c:6d:1f:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.50.60.0/22
IPv6:
2804:742c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270963
Signature Algorithm: sha256WithRSAEncryption
97:f8:bf:29:b7:f0:47:4b:35:db:7b:69:d7:38:1b:1a:81:80:
6f:6f:70:28:6c:a6:bf:8e:d4:3c:65:ee:22:81:f3:75:04:a1:
03:5d:61:d4:be:38:de:20:62:75:ed:1e:cb:25:78:3c:6c:00:
f4:84:30:9f:bc:0b:44:9e:62:e2:97:55:22:9d:33:98:51:9b:
eb:33:75:0a:72:fa:f1:03:f6:4e:ed:d7:4a:87:9d:5c:1b:d2:
2a:dd:dd:10:82:11:2c:ee:8c:fc:63:fc:14:4f:19:b0:39:b9:
00:af:e7:14:45:33:48:5a:c0:ad:a7:43:30:a4:32:49:f7:87:
58:95:22:e9:12:d2:af:47:29:ef:31:b1:f1:fb:63:50:7b:26:
94:d4:f2:59:0c:4d:24:2b:46:b7:d2:6a:fa:d0:cb:42:06:94:
69:b9:d1:af:0d:61:ba:64:f9:31:9a:f9:e7:28:4f:60:47:0b:
2c:5b:f3:c0:7c:d6:4d:14:2a:d1:b4:09:3a:47:5f:32:38:2b:
39:39:b5:18:03:36:53:0a:34:9b:c2:5e:f9:34:3a:6f:ae:73:
0b:5a:e4:d2:6d:59:a6:bc:00:bd:f4:3f:24:16:34:3e:70:8b:
9d:7f:ae:d6:bd:ef:da:f9:79:2a:45:e4:53:c3:70:67:6b:b2:
0d:ea:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:29:43 2025 by rpki-client