
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
File: D296B69B93C13271557656EE54E2511823349A12.cer (raw, json)
Hash identifier: S+9XM6mmgg98OprPAAKy189gUQjfCroqc7LDLWbQwq8=
Subject key identifier: D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5135A7DD00F788F61D0438BA776BA544EBD26BDA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
caRepository: rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Feb 2026 18:45:06 +0000
Certificate not after: Wed 03 Feb 2027 18:50:06 +0000
Subordinate resources: AS: 262761
IP: 170.245.104.0/22
IP: 177.21.32.0/20
IP: 186.225.128.0/19
IP: 2804:44c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 23:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:35:a7:dd:00:f7:88:f6:1d:04:38:ba:77:6b:a5:44:eb:d2:6b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 4 18:45:06 2026 GMT
Not After : Feb 3 18:50:06 2027 GMT
Subject: CN=D296B69B93C13271557656EE54E2511823349A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:ea:f7:81:0b:da:89:f8:fd:f1:3b:ba:05:
79:e4:64:32:92:97:3e:c6:75:89:a9:98:2c:71:7b:
55:dc:1e:a8:16:f9:b0:62:17:a3:aa:e5:69:78:6f:
7d:e8:a6:1a:17:a8:0d:c6:7b:6f:8f:02:ad:c1:6d:
ff:b0:e0:f7:33:28:7c:0e:ca:2e:89:40:fe:20:de:
2b:a9:97:58:f9:a2:18:b1:21:df:54:5b:66:25:e9:
d3:30:4e:a5:0a:ab:81:3b:44:d2:c4:2e:3a:4f:20:
f5:fa:81:9e:f2:d9:18:b9:8e:fd:59:e0:ee:8e:d8:
5a:61:db:5f:59:f5:45:9f:2f:0f:81:c1:09:b7:17:
5f:0e:4a:3c:19:6e:ae:61:3a:f6:e7:2f:11:86:eb:
ef:c0:c0:f7:23:17:3c:76:32:a3:68:48:65:be:db:
52:24:e9:e4:b1:c8:20:f8:57:8a:35:3c:c4:b4:1a:
73:55:c8:fd:bd:71:25:c4:92:3d:8d:d6:0d:39:c1:
c5:e7:a2:33:b3:99:2a:30:21:4a:05:61:91:40:43:
83:4e:31:04:35:17:ea:a8:be:34:94:13:86:50:67:
16:54:2d:25:be:f7:ca:be:24:97:6f:34:d5:26:6b:
e5:30:b4:04:7d:ec:de:ad:d6:0b:76:a6:b1:9c:a1:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.104.0/22
177.21.32.0/20
186.225.128.0/19
IPv6:
2804:44c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262761
Signature Algorithm: sha256WithRSAEncryption
ba:2f:ad:e6:36:e7:3e:c9:48:4b:83:f9:45:bd:e8:69:9d:fe:
34:9e:e7:c1:25:7b:58:be:23:ca:dc:ec:34:16:33:c9:20:85:
3d:db:45:b9:6d:0f:30:6c:27:e4:07:75:a6:ab:bd:05:a6:06:
2a:dd:05:29:8a:db:42:a9:c0:c1:fc:07:ab:3e:6a:13:51:5d:
49:11:1d:d0:3e:bb:e5:42:86:56:2a:c1:47:be:d7:64:b0:97:
7d:11:de:94:f8:65:5a:90:4e:73:7c:30:fd:5c:e2:d3:f6:e8:
e8:9f:3b:29:4b:4c:cc:1a:a4:f7:1c:81:cb:78:07:80:89:0e:
e2:e3:07:ea:41:c3:8d:b7:a0:9f:4f:91:45:90:94:8a:9c:24:
83:2b:90:8f:69:c9:3a:a3:83:98:e2:69:db:5b:3f:65:7a:03:
db:d0:99:16:e8:f8:5a:d4:aa:00:b8:63:ef:b3:16:c2:76:4a:
dd:67:61:96:05:4f:78:99:48:65:6d:f3:b7:45:59:86:74:6b:
d4:c4:36:1f:c6:d4:cb:ff:4a:ed:c8:73:2f:31:fd:cc:b1:4d:
c0:a2:b7:f4:9b:0d:20:a4:8d:6e:78:7a:d6:c1:b8:3e:c2:61:
bd:f0:5e:f1:e5:2f:e9:95:3a:6d:3b:47:dd:fe:91:dc:73:5f:
57:ae:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:26:06 2026 by rpki-client