
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer
File: 33B6EA309A04207739CA6004EC33B135FCE12550.cer (raw, json)
Hash identifier: tNvPNaLIE+0eic9xTLoAzcB1GAmg0q/TzCKn45XRigI=
Subject key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 165B013A58EA43E5291E6BE128B48101477F3189
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft
caRepository: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Jun 2026 02:58:13 +0000
Certificate not after: Wed 02 Jun 2027 03:03:13 +0000
Subordinate resources: AS: 22133
IP: 200.160.32.0/20
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 15 Jun 2026 01:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:5b:01:3a:58:ea:43:e5:29:1e:6b:e1:28:b4:81:01:47:7f:31:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 3 02:58:13 2026 GMT
Not After : Jun 2 03:03:13 2027 GMT
Subject: CN=33B6EA309A04207739CA6004EC33B135FCE12550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:89:f5:be:3c:d0:4e:6e:31:02:b3:1a:7a:
25:12:eb:09:a6:8d:2e:5e:3d:00:ca:3e:d8:05:72:
ff:09:0c:8e:a0:ac:86:d9:46:b6:79:cf:43:9a:43:
27:14:26:58:dd:e1:3f:af:3b:f9:7d:e0:96:bf:50:
c7:30:d5:04:0c:9a:49:4c:12:91:51:0a:11:fe:ec:
3a:57:23:8e:55:c4:c7:8b:ed:9d:2a:f0:71:03:61:
41:96:68:12:76:16:f2:46:e3:97:e2:de:ff:54:5f:
8e:f1:51:e8:54:4a:9a:99:c3:4c:db:9a:56:1f:c6:
0e:b2:ae:31:80:53:f6:7d:2c:14:24:c2:b5:be:5a:
e0:5f:d5:a3:4b:4c:be:e1:b0:40:ad:ac:c2:ec:55:
9f:75:1c:5e:4c:b8:5e:fe:24:2a:41:70:e7:61:d3:
78:37:38:b6:81:8a:d4:28:7c:7f:a7:91:42:d9:5f:
fb:62:0a:56:dc:f0:8f:5e:80:5a:ab:c7:3b:54:0f:
84:d6:8b:b9:cf:88:9b:c7:f9:a5:3d:19:3e:11:4e:
0f:a1:14:86:f8:04:96:42:92:ae:23:64:9a:ac:2d:
9e:ef:1f:9f:84:32:bf:fa:da:34:bb:ca:b7:93:96:
45:6d:2c:d1:42:86:ea:ed:be:3e:09:61:04:51:b4:
ce:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.160.32.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22133
Signature Algorithm: sha256WithRSAEncryption
15:8d:ea:5a:ec:c9:5a:94:0f:84:df:61:d9:29:cf:67:d1:cd:
e1:03:95:5e:bd:3a:13:eb:a1:a7:32:0d:71:04:cd:fe:0f:58:
56:f4:9f:a1:ef:d8:7e:50:ef:25:b7:b6:04:09:cb:b1:2b:1d:
07:98:5e:91:a0:84:56:43:47:71:3c:8c:6d:3b:d9:a7:a5:e1:
70:93:98:46:3b:2d:14:b6:c8:85:21:c5:2e:d1:59:2c:f7:8f:
af:b0:90:06:b5:75:ce:6f:4c:86:96:5e:1b:fe:0d:8e:95:9d:
28:a3:d2:3c:e3:ee:39:3f:a1:c7:e9:c4:d5:12:b4:3e:0d:04:
eb:14:5c:25:00:49:41:c4:49:d7:4e:f2:97:5f:26:cf:bc:4c:
5a:5e:3b:09:03:38:1f:12:9d:24:e6:f1:8c:07:7c:74:b0:c8:
31:c6:64:0d:fd:18:d6:8d:49:6d:1b:78:35:5b:24:8a:a9:b4:
0f:72:c8:e3:f4:04:e6:af:d8:ab:55:ed:83:e1:58:ab:42:ca:
35:21:37:5e:d3:74:0a:48:48:8c:dc:51:f4:b9:bb:9f:e0:d7:
aa:0f:07:a7:39:c0:69:c3:46:d6:f4:1b:fa:15:cb:4f:2f:af:
7f:94:0d:0d:a8:2c:b6:1f:87:09:ef:47:17:18:1b:6f:cb:60:
e1:41:fc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:22:16 2026 by rpki-client