
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
File: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer (raw, json)
Hash identifier: cyilC/OsGXN4M1GhOAQ7JU1rjW79akCRVm9BcyLzkLs=
Subject key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7627DCF9AE482C79D760CA0BCD74A4EE6A8F99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
caRepository: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 02 Jun 2025 15:45:27 +0000
Certificate not after: Mon 01 Jun 2026 15:50:27 +0000
Subordinate resources: AS: 273755
IP: 2804:8bbc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:27:dc:f9:ae:48:2c:79:d7:60:ca:0b:cd:74:a4:ee:6a:8f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 2 15:45:27 2025 GMT
Not After : Jun 1 15:50:27 2026 GMT
Subject: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:fc:f8:58:7c:dc:a9:83:02:e0:7a:7f:a9:
6a:e1:78:cf:3e:61:9e:b6:c8:b9:29:b0:03:cb:a6:
d3:2e:1a:c5:e8:4a:e0:66:5a:68:c3:4a:c3:e2:ca:
93:76:87:65:4f:39:bf:8d:1b:d5:04:36:9a:65:59:
2f:00:22:32:1d:bd:72:2f:8e:fa:85:c7:a1:1c:0d:
4a:6b:88:84:83:a1:e6:d8:48:b8:1b:e6:d9:68:c0:
a7:23:78:01:1d:a6:2d:7a:f2:c6:af:72:b4:8e:f6:
45:d0:ca:2a:1a:71:46:d3:d5:f7:0c:a3:21:e1:85:
5e:24:c0:2a:db:ba:5d:2b:66:42:b3:5a:51:e3:57:
dd:f2:9a:0c:3b:cc:bb:d2:3a:f5:34:2a:ce:51:71:
c8:56:d2:3a:1e:6a:70:12:a4:c6:bc:f3:21:9b:4c:
3a:e4:60:c5:c7:52:da:2e:a0:0a:36:eb:d5:ce:81:
4c:06:eb:15:d7:d6:3e:a3:96:24:06:6e:22:4e:74:
e2:51:17:85:3e:84:07:08:83:80:e0:0d:bb:cd:09:
15:dd:51:62:f5:dc:4c:39:58:97:d2:3f:4b:25:bf:
19:19:60:27:62:98:20:2c:54:75:f1:29:ff:ca:71:
39:87:f1:8a:d1:f7:a1:b4:14:c1:0d:0c:88:5b:2c:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8bbc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273755
Signature Algorithm: sha256WithRSAEncryption
7d:45:cf:53:21:a1:46:a6:37:9e:3c:5b:a8:64:91:22:91:38:
4d:a1:e1:c4:9b:bd:30:63:09:98:3c:85:25:5d:e6:84:96:87:
cc:6c:8f:36:ab:ae:af:06:34:68:b6:a9:2f:34:a8:ca:ba:7b:
90:28:6f:29:07:56:b3:b9:80:ce:73:4f:f0:99:40:c5:72:44:
99:52:33:d7:10:d9:f0:3a:90:b1:d3:ae:1a:d3:f1:70:b6:e5:
56:c0:39:d2:af:d4:e6:2e:41:76:98:80:34:1f:45:f1:9a:87:
75:74:db:b7:d5:bd:6e:a5:90:b7:cc:13:02:4c:57:00:ba:41:
fd:6e:c1:8a:30:35:d3:4b:07:d1:2b:3a:70:78:d8:0d:f5:30:
13:6b:f4:a3:cb:51:ff:1a:8a:91:f4:2f:3f:bc:4f:bf:4f:94:
13:84:f0:02:e7:0e:76:09:4f:16:14:1d:cf:a4:d1:cc:bc:37:
61:87:d5:54:99:b0:bb:94:c3:87:e8:91:27:10:a8:ce:ee:c1:
f4:0b:ec:0e:06:a3:5f:22:ac:4d:10:02:b3:62:08:4b:96:59:
ce:54:44:02:9d:f0:89:52:80:a0:53:c0:7e:88:90:a6:55:c2:
8b:d0:cb:1e:1e:65:66:21:1a:7f:a1:21:24:cd:c5:90:c0:3b:
7e:67:8d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:26:47 2025 by rpki-client