
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer
File: CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer (raw, json)
Hash identifier: PFjKO8QTA47BnGTrR/wXJfGhMA9DeITA0QLac9V1gl4=
Subject key identifier: CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2DB20074F378EE8921B57A627A48A351B1A25C86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft
caRepository: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 21 Aug 2025 20:04:12 +0000
Certificate not after: Thu 20 Aug 2026 20:09:12 +0000
Subordinate resources: AS: 271216
IP: 177.36.76.0/22
IP: 2804:7808::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b2:00:74:f3:78:ee:89:21:b5:7a:62:7a:48:a3:51:b1:a2:5c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 21 20:04:12 2025 GMT
Not After : Aug 20 20:09:12 2026 GMT
Subject: CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:c9:b7:2a:a0:fa:d1:7d:7d:24:f3:2b:01:
09:67:0e:c7:e5:ad:19:7c:75:88:df:e2:91:92:e6:
8c:1c:45:c7:7f:92:d9:ab:17:4f:87:f1:78:b5:ff:
f5:71:66:46:f4:94:88:a7:a1:93:3f:8e:ca:94:87:
f2:5f:8e:37:dd:51:f5:be:5d:28:a3:57:ec:22:27:
dd:22:f3:4a:1a:50:fc:ce:9d:36:d2:10:fe:c6:85:
80:08:89:88:97:6f:dc:87:ec:6b:59:63:51:cd:d1:
f6:0d:a5:3e:e3:a4:b8:98:bd:5d:a7:b3:93:bb:a2:
8c:54:eb:d8:4f:c7:29:33:8a:4b:15:b3:05:38:13:
b5:ea:26:fd:ec:ab:ec:88:32:70:07:ab:f0:ae:ac:
ea:1a:74:72:ef:9a:bc:50:19:fb:63:64:25:29:a6:
67:78:02:d2:f2:b1:a9:31:04:d4:d3:af:e9:47:29:
62:fe:c2:04:60:9c:47:b2:15:f2:61:fb:e5:cc:a8:
97:fa:0f:85:ce:36:1c:74:cd:d7:ea:ba:1a:f4:c8:
fc:48:9b:31:54:72:6f:40:4f:19:04:47:80:b8:4c:
99:8d:a6:ac:f9:9e:8b:ba:f1:91:76:55:ae:7b:66:
2f:10:77:73:71:9e:b7:c4:9a:41:ed:43:d0:64:cc:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.76.0/22
IPv6:
2804:7808::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271216
Signature Algorithm: sha256WithRSAEncryption
da:d0:7d:ef:b9:90:91:0d:90:16:33:f5:65:4b:2b:aa:f7:c2:
fb:02:98:30:a1:f9:24:ca:fd:32:54:ab:03:5f:e8:2c:8d:20:
41:31:78:28:c7:be:bd:1d:1c:41:a7:d5:1b:f3:92:cc:f7:67:
a4:56:46:2f:e6:75:fe:b4:f2:23:c7:23:c3:fb:0f:0c:92:54:
9f:7c:9b:cb:19:51:32:23:6d:67:23:07:52:ac:d2:64:bf:9a:
65:09:74:45:6e:6e:26:52:d7:57:9d:ca:01:c6:c2:a1:be:e3:
19:8b:ec:c7:0f:af:07:3b:4b:a9:4e:11:94:bc:be:01:dd:06:
42:e4:88:3b:b4:12:41:9f:cd:c0:5c:69:8f:2d:cd:9e:83:b8:
eb:aa:ea:96:7d:ec:07:32:7c:6c:2e:46:30:af:bc:b1:d0:71:
6a:57:7e:1c:01:f9:f3:44:1d:66:cc:71:68:83:ee:00:0b:dc:
40:b7:fe:6c:3b:5c:39:91:08:8a:8f:0f:32:e1:7c:39:08:84:
2b:f5:e8:7d:48:96:f3:9d:f6:f4:f6:8c:a0:6e:55:dd:da:13:
3f:99:75:69:29:21:7d:7d:1a:d3:ee:6a:e1:f1:23:6c:70:7c:
06:b4:ee:24:61:06:ae:5e:6c:72:52:9a:47:fb:1a:56:86:e6:
de:31:d1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:26:38 2025 by rpki-client