
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
File: EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer (raw, json)
Hash identifier: U5mRlsmQW/ErdpSd1W8ot0YdebVvxu0Ha/OhW/k83XM=
Subject key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 22DCDA5D42F87B1A71030B0DC07BF3D1D5F500BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
caRepository: rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 22 Aug 2026 04:50:19 +0000
Certificate not after: Sat 21 Aug 2027 04:55:19 +0000
Subordinate resources: AS: 266635
IP: 128.201.156.0/22
IP: 2804:3f08::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 04:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:dc:da:5d:42:f8:7b:1a:71:03:0b:0d:c0:7b:f3:d1:d5:f5:00:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 22 04:50:19 2026 GMT
Not After : Aug 21 04:55:19 2027 GMT
Subject: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:53:cc:93:6b:2a:6f:43:03:82:d4:8d:90:
aa:07:bf:94:f5:15:12:3f:68:fe:80:00:10:2d:7a:
7b:11:1d:55:ab:32:4a:05:61:d0:6f:5f:59:b3:67:
97:01:35:8a:d1:e7:e8:ed:13:7a:4f:3c:6b:27:b2:
a4:e9:62:fe:c9:a3:62:79:fe:4a:81:06:5d:f7:7b:
e6:31:d5:52:e1:70:11:a7:5a:7a:cf:59:57:25:ff:
d8:b7:8e:e7:da:e9:c5:ab:bf:68:f1:65:80:5b:e0:
cb:ca:50:c9:18:33:15:76:aa:f2:64:cd:f2:cd:bd:
46:a7:f1:84:1f:1c:b2:11:48:c1:15:6f:b6:6b:79:
0b:00:07:01:18:31:76:77:43:8b:01:4c:b9:5f:d5:
49:de:69:f3:61:f5:53:81:c7:21:84:ef:87:11:96:
b5:0e:75:ad:27:c4:81:55:2c:cc:54:35:e8:1d:3b:
51:2b:36:d0:d2:10:92:78:02:89:af:72:e9:db:ef:
0c:4b:74:e6:59:e4:b5:4b:f3:af:56:85:0b:ab:2c:
fc:f2:95:bb:25:37:c8:09:17:b2:c2:68:bc:ee:c5:
dc:7f:a5:8b:ec:48:8d:96:4c:aa:bf:22:ed:24:e6:
25:3a:f4:99:0e:6d:14:f8:d9:d5:e6:52:ea:fb:8d:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.156.0/22
IPv6:
2804:3f08::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266635
Signature Algorithm: sha256WithRSAEncryption
43:98:00:bf:1f:f5:d8:bd:1a:80:6d:fb:65:a2:7b:c9:03:91:
1e:cb:1a:85:5c:37:df:22:cc:11:0c:f0:81:fe:78:4e:e8:2d:
d0:8e:a4:1d:e8:37:54:30:7c:67:5b:93:c4:f2:3c:d1:ee:6a:
a5:69:6f:22:a0:b4:e1:3e:2a:7c:6e:7a:ed:08:fe:27:af:99:
ac:c9:0d:f8:ff:df:37:e0:71:c4:c6:20:f2:e9:55:31:cc:67:
1f:f3:d4:43:f7:85:af:80:8d:71:5d:c8:db:e2:83:89:da:28:
87:5f:f5:b7:95:f0:2f:96:21:27:63:73:d2:48:50:18:dc:ae:
14:ee:d5:d1:97:5a:33:f3:0a:46:23:e4:9e:b2:20:c2:6b:ec:
81:1a:b0:35:71:80:5d:7c:ca:47:ed:32:6d:21:a8:70:d8:02:
e1:00:66:df:9f:86:8f:00:46:ea:d0:70:36:e6:ba:9d:c4:54:
f5:a6:3c:6e:54:2b:de:1d:9f:ee:6e:97:db:d5:54:b3:77:1a:
1e:41:ce:a4:1b:fc:5f:34:da:af:c2:48:93:e2:56:67:75:b6:
75:65:ca:83:67:86:28:23:44:e1:c4:f7:11:c6:ac:8d:77:91:
f5:26:9c:7a:de:7e:87:20:82:5b:19:27:2e:03:7d:8b:2d:fb:
ee:4d:a2:de
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUItzaXUL4expxAwsNwHvz0dX1AL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA4MjIwNDUwMTlaFw0yNzA4MjEwNDU1MTlaMDMxMTAvBgNV
BAMTKEVBMThBODZBOUJGM0M4Q0YyQzkyM0Q0MUM0NDg5QTAwNDM5MkFCRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhFPMk2sqb0MDgtSNkKoHv5T1
FRI/aP6AABAtensRHVWrMkoFYdBvX1mzZ5cBNYrR5+jtE3pPPGsnsqTpYv7Jo2J5
/kqBBl33e+Yx1VLhcBGnWnrPWVcl/9i3jufa6cWrv2jxZYBb4MvKUMkYMxV2qvJk
zfLNvUan8YQfHLIRSMEVb7ZreQsABwEYMXZ3Q4sBTLlf1UneafNh9VOBxyGE74cR
lrUOda0nxIFVLMxUNegdO1ErNtDSEJJ4Aomvcunb7wxLdOZZ5LVL869WhQurLPzy
lbslN8gJF7LCaLzuxdx/pYvsSI2WTKq/Iu0k5iU69JkObRT42dXmUur7jdEfAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTqGKhqm/PIzyyS
PUHESJoAQ5Kr+zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2Jq
anN0RHNkczdRdENjcmRnZXpUREJ0ZjFaY1VVYURLTjViOE1UMVE2VEEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdi
ampzdERzZHM3UXRDY3JkZ2V6VERCdGYxWmNVVWFES041YjhNVDFRNlRBLzEvRUEx
OEE4NkE5QkYzQzhDRjJDOTIzRDQxQzQ0ODlBMDA0MzkyQUJGQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCgMmcMA0EAgACMAcDBQAoBD8IMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQRizANBgkqhkiG9w0BAQsFAAOCAQEAQ5gAvx/12L0agG37
ZaJ7yQORHssahVw33yLMEQzwgf54Tugt0I6kHeg3VDB8Z1uTxPI80e5qpWlvIqC0
4T4qfG567Qj+J6+ZrMkN+P/fN+BxxMYg8ulVMcxnH/PUQ/eFr4CNcV3I2+KDidoo
h1/1t5XwL5YhJ2Nz0khQGNyuFO7V0ZdaM/MKRiPknrIgwmvsgRqwNXGAXXzKR+0y
bSGocNgC4QBm35+GjwBG6tBwNua6ncRU9aY8blQr3h2f7m6X29VUs3caHkHOpBv8
XzTar8JIk+JWZ3W2dWXKg2eGKCNE4cT3EcasjXeR9Sacet5+hyCCWxknLgN9iy37
7k2i3g==
-----END CERTIFICATE-----
Generated at Sun Aug 23 03:42:32 2026 by rpki-client