
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
File: CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer (raw, json)
Hash identifier: h5YbbjBhFe5hvawA0zA86rBkboQ6pXTQFg4GFGp4zlk=
Subject key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 52D8ACCE4153613DC2F06F72846FD6DD06805A9E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
caRepository: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 20 Jun 2025 20:08:22 +0000
Certificate not after: Fri 19 Jun 2026 20:13:22 +0000
Subordinate resources: AS: 270483
IP: 200.73.216.0/22
IP: 2804:6ca8::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:d8:ac:ce:41:53:61:3d:c2:f0:6f:72:84:6f:d6:dd:06:80:5a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 20 20:08:22 2025 GMT
Not After : Jun 19 20:13:22 2026 GMT
Subject: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:4c:3e:b6:b7:15:24:1b:79:51:2b:5c:2c:
ae:33:32:49:33:f2:21:4f:ab:8e:8a:14:58:1f:06:
95:28:49:36:db:d5:8c:20:6e:03:76:76:e9:79:a0:
5f:3b:61:26:de:c5:0c:7d:4c:b7:98:4b:08:0f:80:
13:8b:96:e7:78:21:ce:a5:f8:f8:af:4b:f2:1b:02:
e4:5d:96:60:b4:69:cd:60:76:37:da:36:b6:76:09:
74:44:b5:9b:80:79:98:39:1a:ac:e0:59:1c:71:85:
d2:ea:8c:a4:5d:c5:a3:ca:e1:e5:cf:1d:3c:53:be:
1d:88:a4:25:c2:19:ea:4a:88:bc:87:58:a9:95:0c:
ef:10:a5:95:eb:f8:ce:22:5c:e8:a6:68:55:f4:11:
cd:9a:33:62:91:7a:50:00:f2:3f:20:41:ef:ec:f7:
74:9d:13:02:52:08:6e:62:67:b9:36:ad:a5:4d:a3:
b9:d6:00:92:6d:ca:d2:5b:22:f1:64:7a:3d:71:e7:
59:bd:88:6e:4d:82:19:06:43:f1:2f:31:2e:92:69:
db:64:84:48:ba:86:f5:b5:ce:57:b2:a9:1d:85:7c:
54:ab:bd:aa:56:ed:08:98:8a:f3:ad:6b:a7:bd:ca:
51:d3:7b:cc:8b:e3:76:c9:5a:e3:30:12:96:9c:db:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.73.216.0/22
IPv6:
2804:6ca8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270483
Signature Algorithm: sha256WithRSAEncryption
03:3f:76:0a:db:08:ce:b8:e2:ed:ee:a7:a9:c7:e8:02:15:8a:
6a:35:6c:dc:f8:f7:75:bb:6b:59:ea:1e:a4:a3:0b:8e:fd:0b:
f8:dd:de:61:4f:de:ba:a3:8a:9a:5b:08:12:9b:87:cf:5a:65:
87:d9:e2:3a:b1:83:d5:86:13:dd:e6:21:8f:70:9a:88:15:5c:
5f:0e:7d:41:20:63:8b:77:89:67:8e:b2:9e:0a:22:43:34:7d:
02:01:b3:8b:df:de:97:88:63:33:1e:20:ff:f2:ab:d7:34:98:
93:1c:79:51:cb:39:35:a1:8e:f8:09:02:b1:2a:91:2f:0a:1b:
00:28:14:d6:c3:32:16:12:05:60:82:57:bc:88:25:1f:7b:21:
31:3a:33:b4:7c:60:7f:0d:14:c7:6c:e5:aa:00:47:e5:5e:f2:
4a:b5:37:3e:ca:3b:04:dd:4b:48:27:6c:f3:76:1f:92:8d:79:
d3:d1:88:90:4a:71:9f:48:cd:76:1d:4c:70:22:d8:3e:9f:85:
96:55:9b:e1:75:95:d7:eb:a8:da:e5:f8:97:ad:d7:83:73:20:
50:30:5b:64:1d:25:bd:c2:d0:30:cd:20:bc:b2:a8:84:91:ef:
23:2c:ba:07:26:ff:bb:5c:c1:f6:b2:82:43:39:1e:40:09:c8:
34:95:8d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:40:12 2025 by rpki-client