
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer
File: F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer (raw, json)
Hash identifier: 9F3K+fkruNmOsRqzIU8HTpS0X0hEqAG3g6Lz2xbXtW8=
Subject key identifier: F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4706B46145C5CD3308554426941002580DFEBDB0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft
caRepository: rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 16 May 2025 22:34:24 +0000
Certificate not after: Fri 15 May 2026 22:39:24 +0000
Subordinate resources: AS: 270792
IP: 189.39.184.0/22
IP: 2804:717c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 00:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:06:b4:61:45:c5:cd:33:08:55:44:26:94:10:02:58:0d:fe:bd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 16 22:34:24 2025 GMT
Not After : May 15 22:39:24 2026 GMT
Subject: CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:1b:d2:d9:4e:b8:91:60:ca:b6:76:d4:25:
8a:6f:e5:08:86:c6:01:0b:c2:13:1e:e9:f1:b9:6c:
d3:7b:74:48:17:30:0d:79:b9:26:e1:8a:60:02:83:
f1:49:57:a1:8f:2e:d8:46:e3:52:56:25:04:cb:7f:
31:f5:d7:5c:94:a7:f1:39:d5:8b:20:91:47:8a:46:
fe:79:25:a6:1f:58:0f:3f:44:af:c5:98:1c:66:df:
c1:dc:aa:56:30:16:45:6a:46:48:e6:81:46:fe:6d:
bf:bb:d5:8a:d7:55:34:ce:51:bb:88:ea:8e:d3:a0:
15:65:b3:3e:86:89:09:81:a7:07:d0:d8:59:53:61:
17:b8:51:ac:9a:78:b8:cc:d9:44:9a:35:3e:e1:2b:
fa:f1:2f:c4:76:89:8e:e5:8f:3c:1d:ef:ee:72:a2:
30:29:04:c7:ca:a3:69:d0:ba:9d:e5:89:8a:4a:40:
f8:3c:5d:4c:49:8c:c4:47:7e:de:77:9e:5d:f0:1f:
df:c2:6f:45:77:42:bc:6c:ef:bd:f3:2e:fd:9b:b3:
c8:37:cd:82:d2:1a:87:3d:28:3b:35:cd:86:9b:ee:
db:4d:5a:aa:b1:a1:92:df:06:12:60:21:1e:57:f6:
7b:f7:7a:1e:26:f2:db:28:63:ba:57:5a:a9:fc:28:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.39.184.0/22
IPv6:
2804:717c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270792
Signature Algorithm: sha256WithRSAEncryption
41:b2:7c:27:75:4a:fb:f1:00:12:46:06:7f:d9:a7:48:30:90:
7d:c0:28:2a:23:57:97:c6:94:24:4e:07:7e:6a:b6:4b:4d:fc:
f0:2b:df:c3:97:cb:5a:63:eb:b1:4c:8b:16:ae:fe:a7:4e:05:
fb:00:1e:54:2f:d7:eb:6e:d4:e5:b0:91:9f:96:79:bd:23:e3:
64:b8:82:97:a4:4c:a0:fe:ee:5e:e4:5d:9d:e6:c2:45:85:1a:
bb:06:46:31:91:c7:c3:88:0c:09:49:fb:75:73:24:34:fc:8a:
27:ee:af:cf:64:8c:62:1b:6b:60:ea:f6:cf:35:de:12:dc:5e:
56:24:96:10:18:33:48:c6:db:33:95:87:70:0a:e1:4e:6c:9d:
c6:e5:22:12:00:ce:5d:15:37:a4:8b:30:99:5b:b5:a3:90:18:
48:62:52:37:7a:92:1c:bd:37:c0:7c:7e:a8:2f:a5:cd:6a:92:
5c:d1:e4:6b:50:ef:38:bd:ce:c2:53:35:d2:98:70:b0:d1:86:
0e:39:b0:81:06:97:87:80:b4:c1:00:d7:cf:d7:a0:00:e1:28:
84:6d:ea:f2:f8:e3:31:1c:e0:85:d9:3f:96:49:bc:4b:c2:04:
1a:33:c7:7b:3a:72:e2:30:2a:2b:ef:a7:f6:3c:bb:fb:a5:03:
71:5b:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 23:02:17 2025 by rpki-client