
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer
File: CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer (raw, json)
Hash identifier: BLWegfGe0FLA/m/BY6NiSUb5kiUI1OSRMDy7lAB20HA=
Subject key identifier: CD:7C:B2:18:56:F8:D7:11:EE:A9:E8:6C:F9:7C:CF:1B:5A:1E:C3:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 39F39F87DFC8E01B309FC53E138AC03E7BBD1D55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.mft
caRepository: rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 27 Jun 2026 02:28:02 +0000
Certificate not after: Sat 26 Jun 2027 02:33:02 +0000
Subordinate resources: AS: 270709
IP: 201.77.4.0/22
IP: 2804:7028::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Jul 2026 15:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f3:9f:87:df:c8:e0:1b:30:9f:c5:3e:13:8a:c0:3e:7b:bd:1d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 27 02:28:02 2026 GMT
Not After : Jun 26 02:33:02 2027 GMT
Subject: CN=CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:a3:a4:03:f6:b1:28:09:7a:6b:b2:a3:1b:
93:46:31:80:40:e8:f9:89:5a:7a:64:45:c2:b6:96:
2b:2f:d9:4c:60:1a:10:f7:e1:71:88:57:c7:a7:4b:
b2:46:4b:1c:41:5f:ef:3d:62:a3:47:32:6f:27:b0:
35:d1:89:38:8d:29:90:56:9d:84:af:ed:68:39:d3:
33:b8:20:48:9d:21:77:ca:1f:12:e6:46:25:23:76:
6b:91:5c:eb:fc:70:d1:4e:e1:2e:e4:82:53:5b:72:
68:bf:39:68:53:d1:0a:16:63:49:a6:8f:3c:a1:80:
c2:4f:45:f8:5f:2f:05:2a:0c:e0:ce:b1:3f:6b:ba:
cc:a0:53:5b:e5:e6:0a:32:7f:2a:2f:c1:c9:f3:12:
ae:f4:1b:15:22:32:70:c4:43:9e:0e:3e:44:82:78:
a9:b8:41:ad:5c:24:68:13:8c:a5:af:92:a2:56:ac:
9f:21:ae:8d:6c:40:03:ff:48:6d:ee:e9:47:de:83:
13:f4:d1:83:34:7c:bb:28:e3:0b:8b:3b:5f:3b:83:
26:3f:de:2e:0f:8d:82:06:31:5a:de:3e:85:6c:bf:
6f:3e:3a:56:5e:bb:a3:5b:67:89:0d:78:c4:9d:7c:
f9:f5:ff:7d:1c:82:f9:14:46:4d:f8:6e:aa:10:b4:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CD:7C:B2:18:56:F8:D7:11:EE:A9:E8:6C:F9:7C:CF:1B:5A:1E:C3:CC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.4.0/22
IPv6:
2804:7028::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270709
Signature Algorithm: sha256WithRSAEncryption
6a:2d:cd:ac:39:be:cb:3e:4c:52:02:92:82:c0:bf:71:0f:82:
d9:42:9f:cb:d8:99:0d:9b:12:84:da:6d:d1:e0:a2:c8:e9:6b:
96:3a:99:e4:b8:9c:f5:67:29:60:cd:0c:88:46:07:c2:c1:f7:
fa:62:20:98:83:93:28:8a:e9:77:44:b6:fd:42:cb:7c:e6:fa:
84:79:0f:50:dd:7f:7a:60:bf:0d:fc:c1:3b:d7:fe:99:a5:75:
fc:47:d5:26:03:c2:7d:36:3f:56:07:f9:c1:61:a8:8b:6d:e3:
8a:c4:a1:b1:4a:1a:fd:67:11:a3:08:73:cd:ed:a0:36:34:74:
2a:6a:67:5c:1d:c3:23:ad:a1:e0:62:03:ae:27:92:33:fe:c9:
3f:b7:1e:b3:ce:f7:d9:6e:42:b2:b1:fd:d6:8c:d4:47:4b:66:
38:90:6b:af:9d:31:3f:b7:99:fc:4c:dc:34:23:c5:66:af:f8:
54:7b:fd:8a:a7:db:41:46:3a:b3:84:60:74:16:5b:5e:00:4a:
6e:00:cf:85:44:d7:8e:ab:51:f1:2f:67:6b:f1:29:8c:53:52:
64:8b:e9:e4:87:f8:91:11:41:8b:ca:98:b5:5e:97:f9:69:83:
d9:94:5e:07:0f:b1:18:a6:1a:fe:c8:5d:ee:89:59:75:0f:9e:
7d:58:ab:76
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUOfOfh9/I4Bswn8U+E4rAPnu9HVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA2MjcwMjI4MDJaFw0yNzA2MjYwMjMzMDJaMDMxMTAvBgNV
BAMTKENEN0NCMjE4NTZGOEQ3MTFFRUE5RTg2Q0Y5N0NDRjFCNUExRUMzQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gaOkA/axKAl6a7KjG5NGMYBA
6PmJWnpkRcK2lisv2UxgGhD34XGIV8enS7JGSxxBX+89YqNHMm8nsDXRiTiNKZBW
nYSv7Wg50zO4IEidIXfKHxLmRiUjdmuRXOv8cNFO4S7kglNbcmi/OWhT0QoWY0mm
jzyhgMJPRfhfLwUqDODOsT9rusygU1vl5goyfyovwcnzEq70GxUiMnDEQ54OPkSC
eKm4Qa1cJGgTjKWvkqJWrJ8hro1sQAP/SG3u6UfegxP00YM0fLso4wuLO187gyY/
3i4PjYIGMVrePoVsv28+OlZeu6NbZ4kNeMSdfPn1/30cgvkURk34bqoQtE+5AgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNfLIYVvjXEe6p
6Gz5fM8bWh7DzDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdGVO
R0FWU2lwcFFjd0Y1Rm1tWWFlRkg4SHRNNG1ZdWR5VndiRkdmNHFGQy8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdGVO
R0FWU2lwcFFjd0Y1Rm1tWWFlRkg4SHRNNG1ZdWR5VndiRkdmNHFGQy8wL0NEN0NC
MjE4NTZGOEQ3MTFFRUE5RTg2Q0Y5N0NDRjFCNUExRUMzQ0MubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAslNBDANBAIAAjAHAwUAKARwKDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEIXUwDQYJKoZIhvcNAQELBQADggEBAGotzaw5vss+TFICkoLA
v3EPgtlCn8vYmQ2bEoTabdHgosjpa5Y6meS4nPVnKWDNDIhGB8LB9/piIJiDkyiK
6XdEtv1Cy3zm+oR5D1Ddf3pgvw38wTvX/pmldfxH1SYDwn02P1YH+cFhqItt44rE
obFKGv1nEaMIc83toDY0dCpqZ1wdwyOtoeBiA64nkjP+yT+3HrPO99luQrKx/daM
1EdLZjiQa6+dMT+3mfxM3DQjxWav+FR7/Yqn20FGOrOEYHQWW14ASm4Az4VE146r
UfEvZ2vxKYxTUmSL6eSH+JERQYvKmLVel/lpg9mUXgcPsRimGv7IXe6JWXUPnn1Y
q3Y=
-----END CERTIFICATE-----
Generated at Wed Jul 8 14:21:05 2026 by rpki-client