
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.cer
File: CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.cer (raw, json)
Hash identifier: xyV7P6Qc1pvSPTW49Pl3uAndbDu8iI44+3I4A3aggv0=
Subject key identifier: CF:E2:F3:8B:E1:5B:E6:0D:09:B1:11:0A:8B:A4:99:22:0A:9A:CA:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0E7360C061F27AD58B2ACEFE1E66FF4AAE332AFA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.mft
caRepository: rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 03 Feb 2026 17:09:21 +0000
Certificate not after: Tue 02 Feb 2027 17:14:21 +0000
Subordinate resources: AS: 275639
IP: 2804:97b0::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 22:21:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:73:60:c0:61:f2:7a:d5:8b:2a:ce:fe:1e:66:ff:4a:ae:33:2a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 3 17:09:21 2026 GMT
Not After : Feb 2 17:14:21 2027 GMT
Subject: CN=CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:0b:c7:38:53:7f:22:7c:26:3d:12:33:a5:
48:6d:20:86:aa:32:9a:72:29:2d:28:57:b0:19:4e:
63:20:35:e2:32:c8:0b:e9:dc:c0:f7:cb:dc:2c:99:
ac:32:ca:1e:ba:b2:4d:65:aa:ff:93:ff:b5:ae:90:
57:ed:06:41:54:5d:03:a5:02:a4:83:87:5a:9e:5a:
84:64:cd:40:80:cf:28:5f:3c:c6:c4:17:97:15:39:
67:d5:a1:04:e4:51:f0:54:33:05:1d:0d:1e:90:c8:
6e:72:6c:52:2d:b1:e8:02:10:cf:31:11:59:1b:8a:
aa:91:a5:24:92:cf:bd:79:3d:a3:be:fb:50:77:f9:
f7:d8:61:86:7b:79:6e:fb:d9:42:8a:53:18:73:51:
ef:25:e9:8f:59:c1:5d:0d:68:6e:46:b4:41:43:85:
74:24:99:08:3f:f4:7a:20:37:f9:ea:61:e4:ae:d7:
d9:15:29:18:1d:da:59:e5:36:bc:98:58:ab:6b:29:
97:3f:ee:c8:58:7c:12:71:6a:01:74:fa:16:9a:49:
cf:b2:81:a3:28:df:45:50:8d:8a:7b:25:ac:92:c7:
1d:fc:ea:cf:d6:7f:66:d4:e5:b1:89:db:88:8d:77:
0f:c0:93:92:25:f0:12:13:de:9d:a6:d8:42:44:b1:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CF:E2:F3:8B:E1:5B:E6:0D:09:B1:11:0A:8B:A4:99:22:0A:9A:CA:D5
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:97b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
275639
Signature Algorithm: sha256WithRSAEncryption
57:61:f3:04:be:6a:61:62:05:68:b9:cc:fc:d9:0f:8a:bf:0b:
87:b1:b3:bf:55:93:d9:ec:4d:7c:f2:cc:04:3f:bd:f1:e3:b0:
7e:b9:05:e1:c5:a1:e3:20:5f:99:e9:89:19:de:fb:a9:d1:8c:
9c:fb:48:d5:42:4e:74:8d:15:3c:3d:0b:37:cb:09:14:b5:7c:
7d:86:2c:05:53:bc:aa:2c:0d:32:08:82:f0:85:15:9c:21:5b:
b3:10:41:fc:29:85:59:12:41:0c:05:c8:2a:f9:1e:36:0b:10:
f3:01:df:69:0d:2e:ed:47:14:6c:91:71:16:b9:58:e8:af:10:
f1:61:16:97:a6:39:35:e9:9c:e0:2c:ad:ac:e0:68:12:7f:e3:
b3:a7:22:0a:3a:65:4e:fa:97:ed:fc:01:9b:e2:6b:17:94:ed:
ea:8d:5d:bb:e3:a8:10:c4:60:b3:7b:01:9d:ec:3b:54:ad:19:
b3:12:15:06:c5:ff:74:9a:5c:e2:b4:61:46:a7:18:58:84:1a:
d2:f9:f4:e6:2c:75:a5:2d:7e:99:e4:2b:a4:a1:24:6c:63:34:
96:56:4f:7d:8e:55:00:b1:6f:7c:18:47:27:27:59:4b:4f:b9:
c8:fe:a6:b3:00:ca:37:5b:f7:a4:23:6f:5d:be:4f:56:c5:52:
73:e1:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:21:42 2026 by rpki-client