
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.cer
File: EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.cer (raw, json)
Hash identifier: L/qCzjpGWd8M2S3MQp+FXiXRLB0n4IQij00iKiDHUls=
Subject key identifier: EA:23:AB:40:E4:81:E8:BE:E7:FD:B7:F6:D7:BD:7D:60:CD:62:57:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 37DB1BA45C28CFA1D0E8DC162BB9BF05FAD5D447
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.mft
caRepository: rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 10 Aug 2026 12:28:15 +0000
Certificate not after: Mon 09 Aug 2027 12:33:15 +0000
Subordinate resources: AS: 266648
IP: 128.201.204.0/22
IP: 2804:3f40::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 04:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:db:1b:a4:5c:28:cf:a1:d0:e8:dc:16:2b:b9:bf:05:fa:d5:d4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 10 12:28:15 2026 GMT
Not After : Aug 9 12:33:15 2027 GMT
Subject: CN=EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:a5:17:68:c4:61:02:13:a3:87:db:c8:c1:
c9:6d:72:12:87:5a:43:ca:c1:c8:07:8e:ea:7b:5a:
6c:f6:fc:46:43:ec:3a:7b:62:74:50:ef:9c:8e:fb:
49:98:35:77:a1:e4:13:dc:88:6a:7a:d2:9b:f2:c8:
36:27:28:e8:5f:79:3b:01:4b:16:0b:ad:85:3b:af:
dc:e2:48:7c:28:10:8a:cb:f7:09:bb:23:c8:6b:50:
f3:94:bd:df:d0:4f:be:f3:43:ab:45:34:86:e1:13:
0e:6b:d9:29:54:67:b2:d5:6b:ac:ea:e7:49:b6:6b:
c6:be:9c:9e:1c:8d:c6:38:9a:79:68:4b:03:74:47:
61:f3:79:49:8f:38:42:86:43:85:21:d3:ac:29:61:
cc:39:19:5c:15:ab:b7:61:b4:61:3f:6b:4d:ee:08:
d7:d2:9c:24:95:e2:9a:92:fd:63:4e:bf:42:ee:f3:
a6:b3:54:8f:df:6c:b3:cb:03:2d:07:c1:ba:58:86:
b4:5f:b6:83:fc:be:3b:f3:3a:ca:b4:92:96:f6:dd:
a8:f8:85:54:71:2b:f4:39:41:63:b9:07:6a:7f:02:
b5:17:ec:b7:2f:4a:26:e5:f9:e8:11:8e:17:bd:86:
a6:1d:8d:c0:21:e7:66:10:df:cb:7e:f6:e4:08:29:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EA:23:AB:40:E4:81:E8:BE:E7:FD:B7:F6:D7:BD:7D:60:CD:62:57:E8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.204.0/22
IPv6:
2804:3f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266648
Signature Algorithm: sha256WithRSAEncryption
a2:b6:b1:c7:f3:01:db:48:8b:d2:80:1f:f1:07:53:b9:12:70:
a3:01:ee:4e:21:56:b4:dc:29:b5:63:e6:00:38:e3:94:a9:dd:
e0:c3:45:ad:23:d7:8b:5e:72:58:ef:c4:06:69:8b:ab:10:d4:
65:e8:dd:27:00:35:6e:42:55:31:96:db:4d:55:08:1e:f9:3f:
6d:7d:26:86:ca:80:09:c8:a4:b6:49:9a:90:1c:c7:1e:30:4b:
a2:79:d4:5e:ca:e1:d1:05:ae:b6:eb:7c:69:4d:a5:7e:2f:83:
84:4e:8b:bf:63:b9:17:dc:46:4c:22:3a:34:67:41:20:1c:70:
92:64:44:17:f2:2b:79:8a:50:9b:46:87:c9:2b:44:1a:98:60:
41:1b:e2:cb:6b:5a:87:07:e2:34:17:2d:c7:dc:4d:b4:4b:69:
1f:a2:87:7f:98:70:0a:93:9e:eb:03:66:87:fb:1e:96:ff:4b:
d8:46:c7:33:58:bd:b4:31:df:85:cb:18:e8:b8:f7:c5:c7:07:
3a:89:0c:ef:e9:29:6a:16:55:dd:50:2b:1c:fb:14:97:b7:13:
27:72:40:ae:4e:56:0e:97:71:7d:71:18:4e:ec:90:02:15:5d:
27:34:4a:c7:03:7a:86:90:70:9b:40:c5:9a:72:85:1b:d4:37:
19:69:0b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:14:51 2026 by rpki-client