
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D407A692545E249527229055295FF37D45B9B8FA.cer
File: D407A692545E249527229055295FF37D45B9B8FA.cer (raw, json)
Hash identifier: SU29bCg6AlpNvIZ7e+hXJNRVjsP9iuoV11y0OU/TmbE=
Subject key identifier: D4:07:A6:92:54:5E:24:95:27:22:90:55:29:5F:F3:7D:45:B9:B8:FA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 47545F00C6D8ED6BDA0FB1A6371168EB13B7F23F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/D407A692545E249527229055295FF37D45B9B8FA.mft
caRepository: rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 06 Apr 2026 16:54:37 +0000
Certificate not after: Mon 05 Apr 2027 16:59:37 +0000
Subordinate resources: AS: 271335
IP: 207.248.20.0/22
IP: 2804:79e8::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 13:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:54:5f:00:c6:d8:ed:6b:da:0f:b1:a6:37:11:68:eb:13:b7:f2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 6 16:54:37 2026 GMT
Not After : Apr 5 16:59:37 2027 GMT
Subject: CN=D407A692545E249527229055295FF37D45B9B8FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:9d:b3:11:c4:5d:69:f1:81:7f:05:56:33:
02:e2:a0:b1:77:96:ac:74:4e:70:68:a4:36:b3:26:
68:50:00:a6:ec:5e:e3:bb:1f:f6:41:de:cf:33:d7:
63:d1:a9:70:36:89:b7:c1:dd:1f:f4:84:87:95:67:
cf:ef:d1:8f:e6:e4:15:b5:8f:c4:e8:76:1d:51:e1:
8c:3a:a3:74:78:3d:40:9b:7c:07:a0:56:68:d7:0c:
7e:2a:93:3a:53:e9:59:06:cb:12:ca:bd:85:b1:0f:
b6:1b:64:a8:02:18:46:76:46:66:78:a6:de:3f:9c:
b6:3a:c8:7d:93:92:ee:75:65:c6:21:eb:20:68:8c:
1f:99:d4:55:69:3c:8e:b7:3d:17:98:42:5a:89:12:
30:a6:97:61:d5:c2:72:44:1d:9a:e8:2c:90:32:08:
50:e5:96:0e:fc:2f:2a:37:26:bb:a6:9f:75:68:b8:
42:e2:2d:f8:b5:4d:a5:14:e6:90:7b:c8:b5:d9:68:
c6:d8:af:c5:11:0b:87:9e:df:e9:c3:04:81:e7:be:
00:57:a6:94:f9:62:2f:2e:17:76:31:28:cf:89:67:
07:3d:fb:ea:14:d2:2b:ff:36:f5:a2:62:58:f0:68:
ac:d5:22:80:33:7e:e2:08:12:e0:9c:d6:ec:8e:20:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D4:07:A6:92:54:5E:24:95:27:22:90:55:29:5F:F3:7D:45:B9:B8:FA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/D407A692545E249527229055295FF37D45B9B8FA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.20.0/22
IPv6:
2804:79e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271335
Signature Algorithm: sha256WithRSAEncryption
3d:11:48:db:5a:5f:f4:41:df:ad:44:03:f7:13:87:83:08:92:
47:fc:97:a8:a4:5b:f8:39:dd:8e:d2:a0:70:55:42:09:1d:4c:
04:0a:a6:69:ef:23:48:5c:aa:da:e1:59:04:1b:50:4c:9e:b6:
36:34:93:ad:4c:f9:5b:64:6d:7d:c2:43:29:6c:dd:e8:e9:46:
a7:d7:06:e8:2e:2c:8b:a9:26:0a:ab:e4:45:b4:21:e6:d5:0b:
1e:12:ef:9b:ba:dd:5a:93:44:00:9a:42:6c:a8:82:84:1d:04:
71:c9:4c:eb:3f:ba:dc:f9:34:57:03:85:1f:30:bc:dd:50:16:
1f:67:f7:ab:fc:1b:18:38:7f:48:0a:67:db:13:a4:77:69:a4:
0f:d4:e2:af:49:54:cd:6d:0f:60:e8:a8:76:29:18:c2:f1:3a:
72:ca:d1:87:ec:27:5d:35:17:b9:bd:90:cd:b0:e5:b8:6f:ce:
80:3a:c7:26:24:ff:53:ce:69:3f:a7:ac:8a:dc:c5:d7:83:c4:
d1:94:8c:c3:17:8c:cf:4e:f7:bf:51:a0:96:6a:ff:77:91:f1:
99:fb:4d:09:d5:40:78:5e:24:1d:1f:2a:b5:ac:7d:43:15:27:
18:6d:28:b0:38:23:5d:b2:97:d1:9e:f6:d5:d6:9a:ba:87:17:
26:72:0c:99
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUR1RfAMbY7WvaD7GmNxFo6xO38j8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA0MDYxNjU0MzdaFw0yNzA0MDUxNjU5MzdaMDMxMTAvBgNV
BAMTKEQ0MDdBNjkyNTQ1RTI0OTUyNzIyOTA1NTI5NUZGMzdENDVCOUI4RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMp2zEcRdafGBfwVWMwLioLF3
lqx0TnBopDazJmhQAKbsXuO7H/ZB3s8z12PRqXA2ibfB3R/0hIeVZ8/v0Y/m5BW1
j8Todh1R4Yw6o3R4PUCbfAegVmjXDH4qkzpT6VkGyxLKvYWxD7YbZKgCGEZ2RmZ4
pt4/nLY6yH2Tku51ZcYh6yBojB+Z1FVpPI63PReYQlqJEjCml2HVwnJEHZroLJAy
CFDllg78Lyo3Jrumn3VouELiLfi1TaUU5pB7yLXZaMbYr8URC4ee3+nDBIHnvgBX
ppT5Yi8uF3YxKM+JZwc9++oU0iv/NvWiYljwaKzVIoAzfuIIEuCc1uyOIK87AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUB6aSVF4klSci
kFUpX/N9Rbm4+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkdw
Y1hwQ1ZDRnp2TVE4dUpuVmpqa1l6Umh2eWpuTjJzVjUxVzFIWEVvR3MvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZH
cGNYcENWQ0Z6dk1ROHVKblZqamtZelJodnlqbk4yc1Y1MVcxSFhFb0dzLzAvRDQw
N0E2OTI1NDVFMjQ5NTI3MjI5MDU1Mjk1RkYzN0Q0NUI5QjhGQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCz/gUMA0EAgACMAcDBQAoBHnoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQj5zANBgkqhkiG9w0BAQsFAAOCAQEAPRFI21pf9EHfrUQD
9xOHgwiSR/yXqKRb+DndjtKgcFVCCR1MBAqmae8jSFyq2uFZBBtQTJ62NjSTrUz5
W2RtfcJDKWzd6OlGp9cG6C4si6kmCqvkRbQh5tULHhLvm7rdWpNEAJpCbKiChB0E
cclM6z+63Pk0VwOFHzC83VAWH2f3q/wbGDh/SApn2xOkd2mkD9Tir0lUzW0PYOio
dikYwvE6csrRh+wnXTUXub2QzbDluG/OgDrHJiT/U85pP6esitzF14PE0ZSMwxeM
z073v1Gglmr/d5HxmftNCdVAeF4kHR8qtax9QxUnGG0osDgjXbKX0Z721daauocX
JnIMmQ==
-----END CERTIFICATE-----
Generated at Thu Apr 9 14:10:40 2026 by rpki-client