
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
File: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer (raw, json)
Hash identifier: BmNXw6PSNPTGe1akh5MbHSFtiJHngsPAkvPfIxlejmM=
Subject key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5988385E347D5EB8371FF7FB57D72F6B723EBC2C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
caRepository: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 05 Mar 2025 18:35:41 +0000
Certificate not after: Wed 04 Mar 2026 18:40:41 +0000
Subordinate resources: AS: 52635
IP: 177.125.20.0/22
IP: 2804:d80::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:88:38:5e:34:7d:5e:b8:37:1f:f7:fb:57:d7:2f:6b:72:3e:bc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 5 18:35:41 2025 GMT
Not After : Mar 4 18:40:41 2026 GMT
Subject: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:c9:c1:62:4b:c1:b5:a7:9f:8f:f3:56:ed:
d3:27:2d:21:cc:94:b3:e8:07:f0:f8:3d:c7:33:74:
a2:9d:35:c5:c3:68:2e:d9:a8:bc:ea:d8:b0:f5:b0:
a0:c8:44:da:dd:77:4c:15:73:c7:0c:48:8a:45:e6:
fb:78:d5:3f:f2:4b:44:2b:de:53:76:2d:57:91:74:
cf:d6:24:5b:df:77:4b:f6:cd:32:8f:fd:7a:f8:8d:
e2:30:62:41:dd:67:12:72:2a:82:8e:2a:55:ae:b2:
ac:87:3a:e0:ea:ae:70:2f:fe:69:eb:63:a0:42:78:
a7:01:76:ec:5f:39:49:51:bb:80:c9:34:7c:92:6a:
6a:af:f1:6c:74:00:db:59:f4:e1:59:55:66:94:04:
9a:5a:f9:e9:34:47:88:56:3b:9c:0d:dc:34:0a:6b:
9d:23:3c:cc:30:80:2d:f8:ee:6c:57:6e:16:22:17:
70:b1:93:3d:04:2a:2e:a1:c0:0f:6f:ec:df:1e:19:
e9:80:ce:09:0e:c3:82:2a:13:14:ae:d5:7b:ab:29:
af:88:a9:0c:f6:76:bc:5b:29:2b:6e:85:5a:f7:52:
64:c1:84:d0:71:bf:54:e1:7e:ad:47:76:46:8a:f5:
3f:83:11:1f:09:fc:9f:70:f2:de:c9:ec:91:9f:fe:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.20.0/22
IPv6:
2804:d80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52635
Signature Algorithm: sha256WithRSAEncryption
d7:70:1f:5c:8c:c0:f0:f9:71:6a:2f:01:93:ba:53:70:fe:fb:
19:18:20:88:68:9b:1c:3d:96:6c:60:4f:8f:9e:55:4f:93:b6:
8e:c4:98:58:9a:5a:bd:e6:fb:da:b4:42:47:5e:06:7a:1a:c7:
ee:d3:7c:55:b8:2f:b5:9f:4b:90:5d:f4:95:1e:df:4b:7e:85:
65:f4:b1:8b:61:e9:16:f0:1e:ed:0e:d0:86:e9:47:f1:4e:ca:
46:f8:e2:5d:c9:b2:96:2c:7d:b0:9b:3e:04:79:8b:26:30:aa:
37:11:c5:66:55:6c:56:19:88:c4:da:cb:74:53:93:f1:1f:73:
6e:d4:11:f0:2d:c2:f5:7a:45:81:43:e7:81:17:8e:1c:c6:c4:
f5:00:e7:b7:f9:4c:6a:86:83:7b:ee:b5:48:97:7a:29:be:54:
6b:23:52:17:5a:15:9e:41:0f:4f:b2:7c:9b:d6:4c:8b:4d:b7:
f5:02:ff:ec:d9:4b:c6:cf:17:c7:5b:96:e5:ae:49:3f:6f:cd:
55:a8:43:61:57:c3:9d:65:26:07:e8:fb:68:2d:61:21:63:4c:
df:e4:7a:2e:65:bf:67:2a:1a:ac:5e:71:77:ea:49:8d:99:d8:
2c:2f:e1:02:4f:75:97:f9:6c:60:6b:58:5d:c1:73:35:56:c4:
35:dd:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:33:08 2025 by rpki-client