
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/ED3B3BA45546351061AEEB665480B9D38FE9066C.cer
File: ED3B3BA45546351061AEEB665480B9D38FE9066C.cer (raw, json)
Hash identifier: i7r0zI/Uu027P7teYh3stur7ah4luEoYNqz6Ww0LsFc=
Subject key identifier: ED:3B:3B:A4:55:46:35:10:61:AE:EB:66:54:80:B9:D3:8F:E9:06:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3A9B13F8C37827D1D56D13674B5DCEE523C62F0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/ED3B3BA45546351061AEEB665480B9D38FE9066C.mft
caRepository: rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 22 Aug 2026 14:47:44 +0000
Certificate not after: Sat 21 Aug 2027 14:52:44 +0000
Subordinate resources: AS: 53160
IP: 138.186.132.0/22
IP: 187.19.112.0/20
IP: 2804:26d8::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 04:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:9b:13:f8:c3:78:27:d1:d5:6d:13:67:4b:5d:ce:e5:23:c6:2f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 22 14:47:44 2026 GMT
Not After : Aug 21 14:52:44 2027 GMT
Subject: CN=ED3B3BA45546351061AEEB665480B9D38FE9066C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:61:3f:d2:83:29:9a:48:c2:46:2c:f3:13:
34:7a:91:8e:95:f1:e7:11:da:63:92:fa:ab:f8:ce:
c5:16:d6:da:28:02:be:77:e5:be:c9:ba:44:58:ad:
b9:21:c7:bf:81:9e:e3:f3:99:d1:66:f7:ff:d4:d4:
c4:1f:8f:1b:f9:68:18:1c:5a:81:12:0c:f9:32:75:
5a:c7:33:24:49:73:8c:62:42:1f:30:0e:50:4d:ee:
50:a3:47:47:10:9d:65:35:7c:a8:37:b6:0e:10:e4:
6e:ac:76:61:43:4d:5a:9e:e1:f5:54:e7:84:25:b6:
79:9b:fd:36:29:0a:1b:17:e4:76:ca:46:92:bc:36:
e8:e0:d1:2d:a6:da:08:13:af:11:b8:eb:3d:6f:b5:
3e:d8:fd:c5:43:9b:6c:d3:9c:ca:54:2a:da:7c:eb:
0f:b3:ad:94:09:a3:18:22:04:16:d1:5c:d9:17:a6:
2b:ee:6a:ef:b8:7c:8e:07:22:e2:ef:bb:02:af:4b:
1c:a8:9e:30:77:85:bc:81:bc:85:ad:ce:19:03:c3:
46:ab:98:4e:97:fe:ae:88:19:7b:e1:15:26:75:3f:
fd:70:24:64:06:22:7f:44:ee:85:b3:44:49:99:90:
df:60:a4:97:5b:d1:59:e6:05:82:01:ed:e6:91:9e:
48:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
ED:3B:3B:A4:55:46:35:10:61:AE:EB:66:54:80:B9:D3:8F:E9:06:6C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/ED3B3BA45546351061AEEB665480B9D38FE9066C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.132.0/22
187.19.112.0/20
IPv6:
2804:26d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53160
Signature Algorithm: sha256WithRSAEncryption
20:6c:c4:5d:58:c4:53:48:a8:1e:2d:81:cb:82:a1:be:a6:50:
3b:c8:49:3b:3e:49:84:db:17:bf:17:0e:ad:c3:22:3f:e1:89:
57:b3:bb:72:64:d1:d3:a1:99:bd:35:22:be:03:d1:4b:c0:00:
0a:d3:a5:41:af:75:f2:b2:a5:7c:8a:f0:4d:1c:56:a2:1b:52:
95:7e:d4:b6:ac:78:a9:ad:6a:c7:d4:ee:b8:4b:23:8c:fe:1f:
0d:08:cc:71:20:5d:8f:ea:90:f5:66:20:e4:ee:a1:5c:75:67:
b1:cd:ea:59:83:9f:a6:6f:da:ac:97:9a:57:9c:76:69:32:d2:
47:a6:40:ef:d7:51:c3:33:2e:52:72:51:b6:ec:1c:6d:c0:b1:
3d:8d:3a:fb:dd:0f:97:c9:cd:83:60:3d:1c:d3:76:29:58:5c:
d5:02:c3:5b:e3:f0:98:a3:16:82:cb:35:d2:a4:bc:6b:63:9c:
a8:5a:d1:e8:ce:8c:b8:3b:5e:e4:ec:7b:d2:3f:90:be:6c:69:
f1:cc:e6:de:5c:8f:7c:af:9d:8a:cd:89:4f:aa:da:12:8a:12:
7d:48:cd:45:3c:2a:69:ce:02:00:14:c0:91:dd:33:f3:73:cf:
79:0b:72:30:40:49:0c:e6:53:04:1f:01:96:da:5a:3c:1e:7f:
cb:00:ca:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:31:10 2026 by rpki-client