
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.cer
File: D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.cer (raw, json)
Hash identifier: g2qJc8xJ2pJ6+M4GajGLwoLrv8+5p83TVp4IWX3q5lg=
Subject key identifier: D2:75:1A:D2:D4:C9:D5:D7:A8:31:53:0F:F2:0E:B4:6A:9D:2F:36:0D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4292E3A0184A5A8A3E855FAD89CBDD3687896B1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.mft
caRepository: rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 17 Aug 2026 23:53:34 +0000
Certificate not after: Mon 16 Aug 2027 23:58:34 +0000
Subordinate resources: AS: 266217
IP: 192.144.120.0/22
IP: 2804:3c84::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 14:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:92:e3:a0:18:4a:5a:8a:3e:85:5f:ad:89:cb:dd:36:87:89:6b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 17 23:53:34 2026 GMT
Not After : Aug 16 23:58:34 2027 GMT
Subject: CN=D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:24:9e:b8:12:0b:ea:b5:83:ba:6d:71:b1:
a5:16:41:15:42:8c:78:12:45:4d:d8:99:43:17:8b:
fe:fd:e8:69:92:ba:b3:c9:20:df:86:b7:a5:5d:89:
96:15:ef:c0:02:fa:45:c2:44:cf:ca:58:59:ec:4e:
1a:1e:92:cc:ae:d4:7f:a0:de:75:2e:83:2c:72:31:
5a:e2:7b:54:b9:ba:28:8c:bd:1a:fb:75:a4:ab:e4:
11:ed:e5:c6:09:a3:6c:67:3a:6e:7f:ed:b4:89:82:
7d:e2:aa:66:f3:68:20:a2:f8:18:66:11:48:0b:c9:
bb:1a:bb:d1:22:c4:a7:df:15:07:da:8e:7f:be:81:
27:e4:e9:1b:30:00:e1:93:4f:11:57:85:15:cf:b5:
01:86:2c:6a:b2:74:8c:5b:e7:4e:c2:82:60:99:62:
e9:eb:86:26:3f:e8:dd:63:99:34:36:63:35:ad:ab:
3c:13:38:88:cd:c9:8b:b1:17:a1:07:04:88:63:3d:
47:4d:17:6f:79:b6:fd:fc:10:c5:61:ab:17:58:76:
2a:8a:52:82:b4:2d:a7:b2:2a:9b:45:19:7a:55:cf:
9a:57:8a:c9:d5:79:ec:d7:6c:e6:5a:f9:b2:fd:8a:
5b:17:dc:c4:ac:46:1c:65:36:68:1b:9f:6c:a6:26:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D2:75:1A:D2:D4:C9:D5:D7:A8:31:53:0F:F2:0E:B4:6A:9D:2F:36:0D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.120.0/22
IPv6:
2804:3c84::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266217
Signature Algorithm: sha256WithRSAEncryption
a0:af:70:4d:bb:8a:73:dc:a7:28:b7:2c:ca:24:4e:db:cb:d9:
5b:83:4e:42:36:c6:98:85:d7:c4:89:f3:2c:fc:64:b2:85:f9:
02:2d:f0:e5:84:88:96:fa:41:77:77:ec:3b:9f:ea:16:d1:57:
53:8c:13:21:50:2b:67:e3:da:8c:ec:13:6c:03:4c:4e:73:4b:
3c:79:69:6c:8b:fc:0b:d8:0a:d2:4d:65:a8:fc:c2:98:98:54:
26:4e:94:79:0b:21:4e:f3:0a:81:55:e4:0b:c1:2b:e9:75:89:
77:d4:7b:7a:4d:0f:cc:48:8f:ee:dc:0e:a4:0b:33:28:4c:ca:
58:e7:a7:d0:28:76:16:0c:62:06:ab:aa:69:40:58:b4:a5:72:
29:c7:7c:39:13:a9:38:86:85:84:a7:c2:16:9c:f7:d1:23:2e:
5b:c2:bc:29:1d:26:b0:8d:e6:7c:ca:6b:9f:2b:9c:97:70:d4:
8d:c5:3c:0f:cd:af:cf:12:5e:8b:74:03:f1:ce:bc:3d:79:85:
7b:98:75:d9:36:a1:dc:f1:c1:f2:7b:d2:81:66:db:a7:bf:02:
1d:0a:b1:8b:ae:8d:75:a4:1e:fa:6c:0b:aa:84:6b:6d:16:8b:
71:82:22:66:e6:f3:ca:66:10:24:6d:7f:70:49:af:cf:3f:56:
b7:8a:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:46:45 2026 by rpki-client