
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
File: D296B69B93C13271557656EE54E2511823349A12.cer (raw, json)
Hash identifier: yUpQBPt2n8fwLsMJGsP8xb5IhW6afXnXDCsc1uuSDno=
Subject key identifier: D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 79EDE02F55CE672A1D7C54EC5ABB6F56BEA1AABB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
caRepository: rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 05 Mar 2025 18:35:04 +0000
Certificate not after: Wed 04 Mar 2026 18:40:04 +0000
Subordinate resources: AS: 262761
IP: 170.245.104.0/22
IP: 177.21.32.0/20
IP: 186.225.128.0/19
IP: 2804:44c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Apr 2025 09:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ed:e0:2f:55:ce:67:2a:1d:7c:54:ec:5a:bb:6f:56:be:a1:aa:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 5 18:35:04 2025 GMT
Not After : Mar 4 18:40:04 2026 GMT
Subject: CN=D296B69B93C13271557656EE54E2511823349A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:ea:f7:81:0b:da:89:f8:fd:f1:3b:ba:05:
79:e4:64:32:92:97:3e:c6:75:89:a9:98:2c:71:7b:
55:dc:1e:a8:16:f9:b0:62:17:a3:aa:e5:69:78:6f:
7d:e8:a6:1a:17:a8:0d:c6:7b:6f:8f:02:ad:c1:6d:
ff:b0:e0:f7:33:28:7c:0e:ca:2e:89:40:fe:20:de:
2b:a9:97:58:f9:a2:18:b1:21:df:54:5b:66:25:e9:
d3:30:4e:a5:0a:ab:81:3b:44:d2:c4:2e:3a:4f:20:
f5:fa:81:9e:f2:d9:18:b9:8e:fd:59:e0:ee:8e:d8:
5a:61:db:5f:59:f5:45:9f:2f:0f:81:c1:09:b7:17:
5f:0e:4a:3c:19:6e:ae:61:3a:f6:e7:2f:11:86:eb:
ef:c0:c0:f7:23:17:3c:76:32:a3:68:48:65:be:db:
52:24:e9:e4:b1:c8:20:f8:57:8a:35:3c:c4:b4:1a:
73:55:c8:fd:bd:71:25:c4:92:3d:8d:d6:0d:39:c1:
c5:e7:a2:33:b3:99:2a:30:21:4a:05:61:91:40:43:
83:4e:31:04:35:17:ea:a8:be:34:94:13:86:50:67:
16:54:2d:25:be:f7:ca:be:24:97:6f:34:d5:26:6b:
e5:30:b4:04:7d:ec:de:ad:d6:0b:76:a6:b1:9c:a1:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.104.0/22
177.21.32.0/20
186.225.128.0/19
IPv6:
2804:44c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262761
Signature Algorithm: sha256WithRSAEncryption
79:af:a2:7b:a4:ca:90:32:91:e8:bf:bc:ad:1d:df:b9:6e:3d:
28:17:3c:b8:81:50:11:3b:74:cc:74:4e:f6:9a:f6:77:e0:74:
fe:4f:8f:05:11:0f:09:0a:f4:9e:8e:83:eb:5c:f4:ce:88:79:
cf:43:b6:57:ba:51:ba:0e:63:d2:13:d2:72:ae:51:11:2c:65:
2c:04:93:e9:71:c1:76:d0:e4:9c:b2:ec:b0:4a:56:47:cb:96:
3c:b3:2b:d6:7f:02:21:1f:b9:b3:2c:ba:19:c5:ed:26:e3:d9:
89:81:ee:7b:e1:52:d3:b9:77:db:5c:4e:6e:12:85:80:d7:44:
a7:93:40:d6:88:76:46:c5:8a:3a:49:c4:91:65:e4:ac:9f:3c:
d0:a9:0e:b8:df:54:c8:b3:46:d3:b1:21:2c:a8:09:70:aa:49:
cc:19:50:cb:ed:35:4f:24:04:14:34:4c:b6:04:f5:b7:7e:94:
0e:02:63:6e:5e:05:04:25:23:31:0b:47:6c:80:cc:42:88:35:
b4:e0:01:50:f1:e4:5e:e7:cd:a9:1a:6f:68:ef:a1:c5:2b:a2:
a1:c9:e4:0c:2b:db:52:4b:cb:cc:c3:4f:25:34:60:7f:2c:5c:
6d:1d:6e:a5:e3:f6:37:a3:7a:56:80:77:09:e6:71:9d:e3:20:
be:67:27:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:52:43 2025 by rpki-client