
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
File: D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer (raw, json)
Hash identifier: r0aP/yxaUBX+PCF/fz9qH1t/b90k1siER+ttOmppHH4=
Subject key identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 555CAE94087FDA6AFA35FB11249C2B523D0CC724
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft
caRepository: rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Mar 2025 14:37:15 +0000
Certificate not after: Fri 06 Mar 2026 14:42:15 +0000
Subordinate resources: AS: 266498
AS: 269051
IP: 45.178.248.0/22
IP: 170.244.72.0/22
IP: 2804:38bc::/32
IP: 2804:5eb4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 00:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:5c:ae:94:08:7f:da:6a:fa:35:fb:11:24:9c:2b:52:3d:0c:c7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 7 14:37:15 2025 GMT
Not After : Mar 6 14:42:15 2026 GMT
Subject: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:96:6e:20:01:f6:c8:ab:f6:e4:19:92:2b:
93:d1:40:25:0a:90:ca:3a:ef:41:06:4d:44:40:0b:
eb:ff:d8:fb:b2:d1:0b:6c:a3:0c:e2:00:4e:a7:37:
91:c9:da:00:2b:12:dd:73:43:01:ed:09:5e:dd:8e:
4a:b0:71:44:db:bb:9f:40:4d:fe:d4:aa:4d:ee:e5:
95:0e:3b:44:e5:ca:b7:e4:e2:a8:76:c4:b5:52:5e:
62:42:37:a7:78:79:8c:73:fc:37:20:b5:77:f2:bc:
40:bb:c0:c0:ae:85:ee:5d:09:6d:08:5e:a5:d1:71:
a0:69:59:7f:9c:95:d4:05:1e:73:40:b8:b3:bf:a8:
8e:e1:b4:2a:5b:68:b8:87:8d:63:5a:2d:53:9f:c4:
44:0e:94:3e:77:95:c6:d3:19:1e:79:e9:74:f0:d8:
39:07:9f:95:03:93:a3:a2:f7:2f:78:b7:34:24:7b:
a5:9c:77:69:ba:d6:f1:5f:f2:7a:fd:f9:dc:bb:da:
02:14:a5:7d:fe:e7:16:fc:ce:0c:6e:81:01:be:cc:
bf:38:31:8c:55:fc:87:cf:44:51:f5:68:32:4e:a7:
33:d2:b1:63:18:f2:94:27:a9:14:00:64:0b:e8:10:
74:f9:c9:1a:6c:b5:a4:cf:d0:19:70:ca:01:7f:1d:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.248.0/22
170.244.72.0/22
IPv6:
2804:38bc::/32
2804:5eb4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266498
269051
Signature Algorithm: sha256WithRSAEncryption
a2:d7:92:2a:3d:87:56:65:5e:a8:4d:ab:cc:8e:d3:a5:7e:89:
d6:de:76:4e:14:07:2d:ca:08:07:00:4a:9e:5c:75:ec:ec:df:
2f:b0:d4:56:3c:03:28:df:1c:ce:4c:c1:e3:ff:3b:a5:41:eb:
fb:b4:85:db:20:0e:19:5c:58:fb:3e:cc:0a:9d:12:e3:30:df:
94:00:49:a9:5a:00:d7:dd:e7:4a:b4:38:7c:c1:7d:52:7f:ff:
f1:fa:2e:a5:ea:68:ee:ec:03:51:30:cb:52:c8:2a:ff:6e:7a:
11:1d:97:a5:95:92:cb:aa:29:cf:47:68:74:42:e6:bf:b7:6b:
f4:c7:89:6a:27:94:75:a8:ae:e3:1f:a3:4b:1b:54:59:c5:02:
85:00:03:03:23:87:5d:a1:eb:a9:88:20:fe:aa:af:57:cb:20:
29:d5:17:76:c8:cb:51:0f:fb:dd:d3:bd:f8:5e:db:e2:22:80:
58:36:7a:df:af:a4:65:4e:eb:43:82:4d:ba:93:76:9d:2b:29:
a2:bf:cd:1e:92:a3:d3:8e:85:a1:6c:24:bd:bb:07:63:22:2e:
df:49:3e:ab:92:ab:7d:a6:fd:39:5e:e5:58:88:f3:f5:ce:9e:
66:bd:17:4a:19:6d:09:07:0a:4d:e7:aa:86:6b:bf:4d:a2:11:
41:b7:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 23:02:29 2025 by rpki-client