
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
File: D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer (raw, json)
Hash identifier: eKD9VLP/Ol14cd4fg5dVDH1rvcYLQCd9t8jnymA94lA=
Subject key identifier: D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2C60EA531990E41E5B35AF6384A4210C8336B92B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
caRepository: rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 10 Feb 2026 13:33:30 +0000
Certificate not after: Tue 09 Feb 2027 13:38:30 +0000
Subordinate resources: AS: 266109
IP: 45.5.236.0/22
IP: 2804:3ac8::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 22:21:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:60:ea:53:19:90:e4:1e:5b:35:af:63:84:a4:21:0c:83:36:b9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 10 13:33:30 2026 GMT
Not After : Feb 9 13:38:30 2027 GMT
Subject: CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:bf:68:d8:17:b2:92:de:83:76:d0:a5:74:
14:aa:6c:13:e4:5d:52:04:8f:b9:e8:ee:a0:fd:58:
1e:70:7f:8b:9a:b9:f6:bd:fb:08:c2:6e:2e:ad:e8:
66:0f:99:0f:26:a8:84:ea:9b:85:9b:93:a4:59:dc:
96:d3:58:97:7f:3b:3a:73:d2:b2:ce:88:d6:26:c1:
b6:05:2f:26:eb:e0:dc:2d:c4:12:41:00:e8:35:2d:
00:be:8b:f8:7c:1e:3e:c8:9e:b0:04:13:d7:64:fc:
b4:e4:7d:6c:2b:60:38:78:37:b0:50:3e:dd:da:48:
f0:18:bd:73:bb:74:85:a3:46:29:5e:d3:9a:95:e5:
53:49:85:0b:b6:65:9e:33:bf:39:f8:52:c9:59:28:
c8:c7:6c:f8:a9:03:84:17:5e:09:a1:a7:95:80:2f:
64:e5:76:9c:65:78:a6:6f:71:cc:c1:56:b2:f9:e3:
20:42:b9:1f:e4:d5:35:ac:a8:44:aa:14:de:2a:40:
15:1a:0b:37:0a:2d:2f:b6:7f:b4:0c:02:42:54:b3:
ce:69:a7:cb:d9:3c:01:8d:b5:b8:b4:43:42:56:1f:
99:46:70:ba:b8:8b:e3:f6:15:11:bd:66:d1:14:c9:
5d:3a:3c:f8:a5:65:96:44:b9:5e:52:ac:db:1a:5c:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.236.0/22
IPv6:
2804:3ac8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266109
Signature Algorithm: sha256WithRSAEncryption
53:cb:7d:27:0d:e8:b4:8b:f0:03:42:a5:1c:55:71:61:5c:8e:
31:4c:35:9f:f4:4c:0b:d9:70:5c:d1:8e:a0:71:85:ae:52:d4:
23:80:27:68:36:4f:0d:ec:ca:9e:c3:1d:20:aa:7a:f3:30:e1:
5d:e3:a0:24:6b:19:98:8e:44:b2:f1:c2:07:af:22:e2:f4:a1:
ed:58:72:68:00:5b:33:0f:1e:76:9c:22:3e:12:a2:a8:84:d4:
e9:0c:83:01:20:34:9e:10:30:2f:ce:47:36:cc:45:9b:75:ac:
fd:a0:d4:ae:b4:3f:7d:30:cb:c7:eb:26:b9:0c:df:9b:90:aa:
17:a4:bd:4a:54:43:84:4b:35:51:76:cd:d0:93:47:2e:9f:2c:
21:c4:8e:cc:ed:fc:ce:fc:ad:c3:46:e5:d5:af:0b:3c:35:25:
91:0d:59:e7:a3:31:34:d6:2a:e6:53:2f:da:e0:32:36:f0:9f:
1e:33:7d:77:c0:45:82:24:10:24:cc:5d:5e:07:c5:47:9d:e8:
5a:a9:0a:b7:29:f0:99:43:4e:5c:6e:ad:fe:03:ae:df:f5:72:
6a:41:8d:80:59:5a:d8:d5:67:4b:b8:f7:d1:8f:2a:30:b0:a7:
78:1d:12:88:92:ef:5b:9d:9d:b4:53:21:2e:a5:9f:bc:88:78:
47:a4:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:21:19 2026 by rpki-client