
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer
File: B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer (raw, json)
Hash identifier: xcAZ85Q3hP1w+52Dbj2o7e+fHjD4KBtqj/4D0+RDySY=
Subject key identifier: B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 15BAAF0FB87670145DAF5F5078CD91F46C612E0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft
caRepository: rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 27 Mar 2026 02:18:56 +0000
Certificate not after: Fri 26 Mar 2027 02:23:56 +0000
Subordinate resources: AS: 52790
IP: 177.39.12.0/22
IP: 200.196.140.0/22
IP: 2804:18dc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 14:04:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ba:af:0f:b8:76:70:14:5d:af:5f:50:78:cd:91:f4:6c:61:2e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 27 02:18:56 2026 GMT
Not After : Mar 26 02:23:56 2027 GMT
Subject: CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:2d:0c:79:4a:80:bf:d5:de:7f:51:72:9f:
0e:4e:90:63:31:d9:48:3a:3e:00:80:b6:bd:db:0c:
08:66:dc:8a:0a:41:06:b4:3b:60:d1:55:92:e2:9a:
d4:fb:a3:76:93:5c:55:b1:b6:fe:44:9f:22:ea:e4:
ee:2d:32:f3:bc:88:52:9f:f6:88:92:04:3c:06:ef:
8f:40:4b:33:3a:93:e7:50:b7:84:3e:d2:bf:b3:7e:
83:b2:b4:dc:35:42:f6:61:78:a3:9a:19:a1:dc:1f:
92:e1:ca:fe:64:23:d0:6c:90:3a:f0:05:6a:06:f9:
42:25:a0:00:c0:8b:d1:c8:b5:5d:3c:f8:98:62:d1:
f5:f3:87:15:00:a8:f2:80:7a:6f:81:66:fc:34:a5:
a3:6f:5c:87:b0:67:75:b7:d2:61:cd:e6:54:3b:af:
96:8b:0d:16:5a:9e:5a:eb:c1:e0:fc:91:34:9e:c0:
d5:75:d7:b5:40:d4:c7:66:cf:04:5b:e7:ad:02:86:
9e:6d:0e:44:8c:41:aa:d8:99:9f:9e:7a:db:56:91:
ae:ba:a9:53:35:4f:e6:ee:aa:4d:c4:11:73:f6:ff:
19:3a:f2:7f:f8:09:15:22:fc:80:72:a0:4e:51:c9:
ac:83:94:f4:e0:ce:86:c0:00:ca:20:dd:cb:bc:ea:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.39.12.0/22
200.196.140.0/22
IPv6:
2804:18dc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52790
Signature Algorithm: sha256WithRSAEncryption
9d:4d:17:4f:08:5b:74:e5:7d:c9:39:65:9b:b5:a0:5a:3e:a1:
87:d5:68:23:f2:ef:72:c0:cc:10:31:2e:d6:43:29:b0:3d:c7:
91:51:42:9b:a6:b3:9d:b1:85:07:e4:61:d5:4c:4f:b8:c4:6a:
ba:5f:40:9c:42:d3:a5:ec:be:0b:59:15:79:9e:2d:c8:4e:62:
4d:25:b5:64:bd:e5:17:21:94:51:24:8c:b0:ac:c1:10:3c:7e:
16:33:a6:5e:1c:cc:7a:c3:96:3c:a3:a7:f1:64:51:fb:c9:9b:
67:49:8f:90:c5:51:53:b9:9c:66:f9:96:3a:f4:99:46:ad:1b:
35:94:46:97:e4:b3:0c:3b:5e:31:97:24:41:f9:8b:dc:60:7e:
d2:a9:b9:dc:f2:97:fe:ea:c5:19:bf:2d:ef:eb:7c:53:d2:f1:
60:31:38:ec:8c:5f:38:5f:e4:e4:b3:0a:1a:b7:23:ce:86:03:
73:a1:8a:5c:5c:0c:c5:83:e9:79:fc:8b:35:8b:06:f4:0c:28:
80:66:89:1a:5b:32:fc:50:72:3e:b8:ee:07:38:b1:85:10:8c:
ea:3d:b0:ea:af:3c:44:1d:3c:17:42:eb:10:d8:4b:3d:c5:e7:
e4:63:d6:e5:21:0c:cf:4c:bd:8b:96:00:53:5f:00:c4:94:f4:
13:2a:21:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:58:18 2026 by rpki-client