
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA3B3391D1758852C015810B1279FA50D32C02DD.cer
File: CA3B3391D1758852C015810B1279FA50D32C02DD.cer (raw, json)
Hash identifier: HLVAO8UoeIqpVDCUyA6CeS3SywtH3+dyj0i6TtrzkoY=
Subject key identifier: CA:3B:33:91:D1:75:88:52:C0:15:81:0B:12:79:FA:50:D3:2C:02:DD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3F96AEED8CA6E61DC4A8929765C113B806808B61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/CA3B3391D1758852C015810B1279FA50D32C02DD.mft
caRepository: rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 26 Aug 2025 20:04:58 +0000
Certificate not after: Tue 25 Aug 2026 20:09:58 +0000
Subordinate resources: AS: 274796
IP: 2804:93b8::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:96:ae:ed:8c:a6:e6:1d:c4:a8:92:97:65:c1:13:b8:06:80:8b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 26 20:04:58 2025 GMT
Not After : Aug 25 20:09:58 2026 GMT
Subject: CN=CA3B3391D1758852C015810B1279FA50D32C02DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:ca:d3:92:af:cc:e0:9c:bd:d5:c9:49:48:
06:03:76:c2:37:d1:40:99:fe:cf:45:f4:ed:67:3c:
a2:56:e0:a5:98:5f:18:67:0b:07:96:37:17:b7:ec:
1e:fa:2a:13:85:cb:cf:2b:73:f8:74:1a:87:1b:b2:
fd:58:65:13:54:f3:7d:ac:59:01:b4:28:b4:83:4b:
dd:d1:c4:8f:46:4b:e5:ee:18:9c:c3:ee:76:5f:a9:
69:f9:3e:c3:a0:76:b9:1c:63:ca:ff:4c:82:b2:b3:
8b:93:b0:b0:67:91:c1:c6:3a:69:20:ae:83:4d:af:
70:cd:9e:e7:91:6e:80:c9:50:e6:60:a5:e8:cb:aa:
72:d9:3e:5a:81:f0:a3:93:e4:44:79:a2:db:0d:e7:
03:83:d8:28:d2:5b:d7:50:32:db:00:4c:74:35:be:
a7:c1:07:dd:ba:3a:9c:12:c6:73:02:35:54:bf:b8:
2d:46:47:e3:06:39:86:13:ac:0a:50:c2:2d:bf:80:
3b:1b:3e:b1:c5:92:68:2d:39:89:a3:30:c1:7d:d0:
d1:8a:c5:ff:90:46:9b:eb:bf:d0:ab:0f:73:5f:d6:
78:99:b3:29:0a:11:9c:91:ab:65:53:1d:a0:14:69:
43:76:6d:09:b7:79:c3:f4:50:d5:44:0a:6b:7c:30:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:3B:33:91:D1:75:88:52:C0:15:81:0B:12:79:FA:50:D3:2C:02:DD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/CA3B3391D1758852C015810B1279FA50D32C02DD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:93b8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
274796
Signature Algorithm: sha256WithRSAEncryption
84:8e:cf:9d:07:06:f6:2b:6e:5c:0f:69:f8:ab:a6:34:9e:78:
c0:f5:5e:3a:b7:f2:90:ff:3d:91:0a:3d:1e:a9:23:6e:3c:c8:
c0:41:bb:aa:dd:55:93:7a:e5:b2:5d:7a:ec:05:79:ec:c7:11:
9c:20:03:27:aa:68:2c:3a:10:40:ef:e5:35:5d:76:64:b3:31:
fd:f2:33:02:b6:c6:01:5f:94:aa:0f:56:a4:6a:e0:35:d8:47:
cd:b6:d3:b8:25:54:18:23:24:8a:fa:55:a3:4f:ac:94:12:1f:
2c:5a:3e:3f:25:22:be:5a:c3:42:44:1a:ee:0b:0c:07:c3:b7:
70:01:ef:17:fc:ca:55:ad:33:e6:ec:91:60:38:23:79:36:87:
8b:6d:b1:cb:9f:3d:63:da:eb:f6:f5:4b:19:d8:74:6b:8c:83:
14:34:c6:1e:2b:73:32:f8:51:9e:f1:62:dc:e0:3e:d1:13:f7:
a1:e9:f2:70:41:d8:58:c1:4b:dd:02:31:72:c2:01:f8:ba:be:
59:aa:27:cb:00:bb:70:eb:9a:03:07:30:da:3f:4a:eb:c1:9a:
11:46:03:34:53:39:43:4b:86:7a:e9:e7:bb:cf:96:ab:6f:35:
71:c7:00:e5:14:28:69:55:28:80:38:72:ff:84:46:1e:91:ff:
41:ec:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:34:41 2025 by rpki-client