
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
File: CC038C42F33B3D558931769A27D97E3412751117.cer (raw, json)
Hash identifier: jYHUKBW5Xfhp8tI+7snEVLDahEweTirgKWCz/XKNAq4=
Subject key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0F9EE84A9A2C37A96A18B0206E4D19B2C929E62D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
caRepository: rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 09 Jul 2025 05:18:50 +0000
Certificate not after: Wed 08 Jul 2026 05:23:50 +0000
Subordinate resources: AS: 264386
IP: 45.6.240.0/23
IP: 131.108.172.0/22
IP: 168.197.80.0/22
IP: 2804:1db0::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:9e:e8:4a:9a:2c:37:a9:6a:18:b0:20:6e:4d:19:b2:c9:29:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 9 05:18:50 2025 GMT
Not After : Jul 8 05:23:50 2026 GMT
Subject: CN=CC038C42F33B3D558931769A27D97E3412751117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:22:a6:57:56:14:48:b5:29:d7:ab:fe:70:
aa:6e:e0:ba:4c:5e:e4:d2:c9:f1:a2:bf:e2:82:d3:
c7:b8:e1:83:d4:2d:35:96:2c:eb:eb:b7:b9:72:2b:
7c:a5:66:8f:4c:18:da:1b:45:87:e1:2f:df:72:cb:
3b:f4:79:bf:64:8c:a9:af:f0:e6:51:24:74:75:d5:
d9:7e:8e:64:3a:6a:b7:2b:78:91:25:7d:e7:a0:17:
19:51:e0:b7:73:4b:70:c4:c3:96:69:ce:d9:ac:a5:
6e:19:f7:bf:ea:aa:de:dd:f8:3d:70:cb:08:7f:35:
c6:72:7a:a3:f6:51:bd:9f:b4:0a:a0:80:3d:03:91:
fa:24:c6:fd:f3:b2:c8:37:9d:ed:54:83:8d:06:33:
62:39:b3:68:29:3f:7a:ed:fe:5b:c9:ca:d6:0e:2a:
06:83:6a:e9:99:97:19:66:62:50:b1:72:60:73:84:
35:87:0a:02:1e:d8:2c:0b:f0:2c:1a:14:11:c0:bc:
8d:96:6e:5e:de:5b:e6:69:d5:6e:d6:94:fa:6b:65:
5a:a0:04:61:1f:a9:f7:5f:b8:e8:1f:3e:72:3e:31:
a8:7e:df:9a:fd:09:b7:23:7f:fd:86:a8:1c:1b:91:
b0:43:7c:6a:28:db:ae:b9:e5:32:c3:1e:9d:da:a6:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.240.0/23
131.108.172.0/22
168.197.80.0/22
IPv6:
2804:1db0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264386
Signature Algorithm: sha256WithRSAEncryption
58:b6:fd:7b:a6:46:49:bf:a7:72:d3:ac:cc:35:6b:be:d3:98:
a6:3f:14:6d:95:9a:4c:8f:96:74:aa:e5:50:b9:cf:90:36:c3:
d8:85:b6:d6:ef:bb:0a:97:2b:d7:40:2c:0e:96:ab:e4:0d:7f:
12:f8:4c:23:0a:c7:7e:39:f8:4c:1b:d7:74:82:a7:6a:d5:21:
19:b5:ee:9b:27:e5:7b:bd:e8:52:c1:f9:18:aa:ef:a0:3e:4d:
14:c9:22:da:95:d3:9c:ac:00:55:96:eb:7c:3b:83:5c:32:3d:
19:f2:a2:0a:65:98:e8:73:28:9d:15:24:14:b3:63:3d:54:e4:
90:8c:02:58:6c:6a:48:f0:0c:c7:1d:07:8e:a2:da:da:12:db:
ea:b1:0f:2c:be:26:77:cf:54:01:9d:10:57:a9:04:6e:43:e5:
74:b6:bd:dd:d2:00:86:47:50:42:9d:67:20:81:99:0d:75:d7:
e0:13:73:d8:64:e5:23:5d:af:79:2a:2f:21:69:49:d0:47:a9:
19:16:c4:48:4e:87:42:e2:80:e9:1c:cd:5a:2d:ad:58:88:4f:
52:03:4d:b7:2a:e3:cb:31:dd:1d:e8:db:cd:07:34:c5:75:4a:
8b:b2:ff:c7:56:ac:ae:48:56:20:16:3e:62:44:fc:ec:15:84:
02:a7:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:33:00 2025 by rpki-client