
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25B4E386B09A862CE44224CE2900E93C0B99AEBC.cer
File: 25B4E386B09A862CE44224CE2900E93C0B99AEBC.cer (raw, json)
Hash identifier: +KsdPtdyZoetHqk6jJ/IUA9dlswNriEo+kBaqCowB4k=
Subject key identifier: 25:B4:E3:86:B0:9A:86:2C:E4:42:24:CE:29:00:E9:3C:0B:99:AE:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1462B61497F3D1D3858C9AE0A7CAC852A1FE2D02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/25B4E386B09A862CE44224CE2900E93C0B99AEBC.mft
caRepository: rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 14 Apr 2026 20:51:45 +0000
Certificate not after: Tue 13 Apr 2027 20:56:45 +0000
Subordinate resources: AS: 273477
IP: 2804:8f38::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 20:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:62:b6:14:97:f3:d1:d3:85:8c:9a:e0:a7:ca:c8:52:a1:fe:2d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 14 20:51:45 2026 GMT
Not After : Apr 13 20:56:45 2027 GMT
Subject: CN=25B4E386B09A862CE44224CE2900E93C0B99AEBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:df:d3:0f:ed:97:78:b7:eb:99:7b:f3:ec:
7d:44:72:e5:8c:27:cd:14:de:a4:8d:29:82:85:13:
eb:79:15:97:df:6d:5a:07:ee:25:cf:db:50:ca:a9:
ed:f0:cd:8c:74:f0:8f:3c:90:b1:13:3a:25:39:e4:
ba:99:a6:a6:eb:4b:d1:7c:65:32:1a:10:b1:50:59:
c6:4a:74:a4:34:22:0f:50:68:25:44:13:90:06:41:
8f:f5:33:03:3b:3f:29:b7:5d:5d:79:d5:55:d9:a4:
38:04:e7:3a:dd:b5:7c:3c:17:84:cc:af:34:46:97:
fa:ac:eb:2f:c5:a1:be:21:04:0f:02:1e:03:d8:42:
7f:53:4c:fc:d2:1f:b1:90:3d:21:ea:0f:30:f0:91:
24:0a:d0:98:7f:e7:b5:3a:87:a4:81:1c:1d:11:08:
07:ed:f8:ad:99:00:69:18:12:52:84:bd:39:c8:1c:
d2:67:a1:db:7a:2e:2d:3d:5f:47:8b:29:e7:05:d4:
e9:41:0c:ea:5b:23:ec:cf:6f:f6:e6:ab:2f:e6:94:
82:33:30:d2:b9:10:56:74:1d:58:96:07:2b:93:5a:
2f:2a:91:c5:62:87:07:02:a4:5f:7c:b7:ca:7c:21:
3b:62:74:74:2f:19:29:45:76:6e:c2:26:c4:76:5b:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
25:B4:E3:86:B0:9A:86:2C:E4:42:24:CE:29:00:E9:3C:0B:99:AE:BC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/25B4E386B09A862CE44224CE2900E93C0B99AEBC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8f38::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273477
Signature Algorithm: sha256WithRSAEncryption
7a:16:a0:93:d5:46:69:3a:a1:b8:b6:39:39:ab:62:92:92:3a:
ae:a8:09:9a:36:7e:ad:64:e7:ca:44:11:d6:d8:5a:15:38:f5:
82:51:98:71:a2:63:82:c2:50:21:5c:53:08:52:1d:6f:00:ae:
9d:f2:03:09:29:5f:62:f7:00:ee:81:bc:96:dd:4e:02:3d:d1:
78:3b:ef:a5:c1:c7:90:3b:37:14:3c:e1:2f:58:1c:48:1a:28:
32:12:81:bc:bb:46:ce:56:13:a1:99:be:fa:54:e7:67:d6:f9:
90:a8:35:63:74:be:2c:b6:0f:dc:af:26:cd:14:9e:85:7e:e3:
5c:f0:86:2a:a3:52:27:a9:37:ee:dd:4d:09:08:c5:1a:30:21:
6e:f1:37:ad:0d:13:b3:e5:2c:5d:73:36:c9:18:f1:d7:9f:03:
6e:62:e4:6d:fd:38:b7:ba:94:b1:04:57:b7:3e:89:2d:5e:20:
83:9d:93:52:a7:18:ab:11:65:01:a0:81:15:99:72:5c:2b:f2:
c7:85:26:6b:4b:f3:16:8c:f3:ce:d3:cb:8b:76:67:c8:7f:4e:
a6:07:69:a7:af:7d:18:4e:70:6a:17:7d:09:1d:9a:40:8a:7f:
d6:0b:b5:6d:f7:d4:9d:6f:8e:f4:6e:8f:98:48:37:dd:c6:be:
0f:ef:da:c6
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIUFGK2FJfz0dOFjJrgp8rIUqH+LQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA0MTQyMDUxNDVaFw0yNzA0MTMyMDU2NDVaMDMxMTAvBgNV
BAMTKDI1QjRFMzg2QjA5QTg2MkNFNDQyMjRDRTI5MDBFOTNDMEI5OUFFQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgd/TD+2XeLfrmXvz7H1EcuWM
J80U3qSNKYKFE+t5FZffbVoH7iXP21DKqe3wzYx08I88kLETOiU55LqZpqbrS9F8
ZTIaELFQWcZKdKQ0Ig9QaCVEE5AGQY/1MwM7Pym3XV151VXZpDgE5zrdtXw8F4TM
rzRGl/qs6y/Fob4hBA8CHgPYQn9TTPzSH7GQPSHqDzDwkSQK0Jh/57U6h6SBHB0R
CAft+K2ZAGkYElKEvTnIHNJnodt6Li09X0eLKecF1OlBDOpbI+zPb/bmqy/mlIIz
MNK5EFZ0HViWByuTWi8qkcVihwcCpF98t8p8ITtidHQvGSlFdm7CJsR2W4OFAgMB
AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQltOOGsJqGLORC
JM4pAOk8C5muvDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU0h2
TVh5U1pGVmkzcnBndDNjNHoxTGNjTkpWVERHU2V4U2E3QkdDTVp0Ui8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU0h2
TVh5U1pGVmkzcnBndDNjNHoxTGNjTkpWVERHU2V4U2E3QkdDTVp0Ui8wLzI1QjRF
Mzg2QjA5QTg2MkNFNDQyMjRDRTI5MDBFOTNDMEI5OUFFQkMubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEjzgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCxF
MA0GCSqGSIb3DQEBCwUAA4IBAQB6FqCT1UZpOqG4tjk5q2KSkjquqAmaNn6tZOfK
RBHW2FoVOPWCUZhxomOCwlAhXFMIUh1vAK6d8gMJKV9i9wDugbyW3U4CPdF4O++l
wceQOzcUPOEvWBxIGigyEoG8u0bOVhOhmb76VOdn1vmQqDVjdL4stg/crybNFJ6F
fuNc8IYqo1InqTfu3U0JCMUaMCFu8TetDROz5SxdczbJGPHXnwNuYuRt/Ti3upSx
BFe3PoktXiCDnZNSpxirEWUBoIEVmXJcK/LHhSZrS/MWjPPO08uLdmfIf06mB2mn
r30YTnBqF30JHZpAin/WC7Vt99Sdb470bo+YSDfdxr4P79rG
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:14 2026 by rpki-client