
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer
File: 4856F1A3B30D5C7881DA87018005E5D420414FCA.cer (raw, json)
Hash identifier: YIxjCdbqqOR9w5vHA1sOKnU6XX7N5YdKi5okzXpll9c=
Subject key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 26C529B6399B9C5C2E0789EF12D94F8D415E800F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
caRepository: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 26 Feb 2026 06:32:18 +0000
Certificate not after: Thu 25 Feb 2027 06:37:18 +0000
Subordinate resources: AS: 53088
IP: 177.21.80.0/20
IP: 187.33.208.0/20
IP: 2804:360::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 18:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c5:29:b6:39:9b:9c:5c:2e:07:89:ef:12:d9:4f:8d:41:5e:80:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 26 06:32:18 2026 GMT
Not After : Feb 25 06:37:18 2027 GMT
Subject: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:d3:21:3d:6e:ea:31:59:39:3f:42:f6:2e:
08:77:e5:77:55:ee:29:70:d2:c6:f0:50:18:88:3b:
a0:c9:1e:a1:da:f8:b3:4d:85:ce:47:1b:61:d2:50:
ef:29:ec:7a:79:eb:da:21:9d:d5:9a:9e:35:cd:43:
83:62:92:de:36:4e:9d:a9:0f:df:e6:8d:fc:e0:e4:
b4:29:ba:53:f0:f8:0c:a3:bc:e4:27:7f:1f:ea:66:
1a:6b:0e:4a:af:09:b1:4c:89:0b:fc:7f:86:41:82:
55:2f:c4:9a:75:46:22:48:8a:8d:1d:85:54:80:2c:
36:0a:9d:12:52:7b:2c:16:0e:36:04:5e:ae:70:2f:
08:b2:6f:9c:5d:bf:67:6c:89:9e:dd:70:d7:e2:29:
28:d3:79:08:8d:e3:89:87:eb:8b:62:67:ad:9d:bc:
fa:60:42:e3:71:86:54:96:c8:3f:75:2a:c8:a0:3c:
e6:6a:a2:d0:6b:17:c9:9c:4a:93:96:7f:ba:7f:39:
1e:b1:f6:2d:ac:26:5e:7a:f9:cb:97:0c:2b:5a:c6:
f7:40:0c:eb:9d:86:cd:a6:b1:49:32:8b:48:35:54:
df:fd:b3:17:7d:28:31:27:e5:70:69:e7:61:4c:ea:
35:20:0d:ce:22:87:0d:b6:90:53:01:fb:0e:a0:8b:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.21.80.0/20
187.33.208.0/20
IPv6:
2804:360::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53088
Signature Algorithm: sha256WithRSAEncryption
18:f0:7e:24:7d:4f:94:16:5f:df:7b:d0:bc:53:40:67:3f:15:
30:88:8b:2e:80:9e:e0:e7:92:21:98:3b:59:f0:ae:26:2c:ac:
4f:7d:f3:d7:02:fd:c3:dd:c9:83:96:49:73:a9:f0:b8:fb:43:
27:3a:e8:c7:9e:1e:fd:c7:98:78:a8:05:22:38:b4:01:f8:dc:
7e:83:13:f1:5f:0d:3d:f9:a9:f4:97:24:3e:a5:0d:99:e2:52:
4e:df:a2:57:9b:ee:e6:1c:dc:01:35:c7:29:1e:d4:bc:5e:b0:
13:96:69:0d:f3:69:ec:d3:3e:e5:36:99:81:44:07:23:35:f3:
be:21:ea:9b:58:ca:09:26:11:69:ad:14:1f:c8:1b:67:ba:a6:
1b:33:13:5f:57:af:94:a2:3a:8b:02:97:bc:cc:0f:7f:0b:de:
5c:a5:e3:9d:01:d9:f4:9e:9a:c5:58:f7:10:1e:11:b7:1b:eb:
6d:23:92:fe:6c:ea:1b:a1:b7:dc:2b:e6:b6:4c:a6:64:82:f5:
78:92:fa:63:81:76:d1:f0:f3:e2:d4:f9:e5:5c:e4:f8:d7:3f:
d8:36:af:2a:54:7e:ac:65:b0:85:3f:a6:16:b0:b5:4c:db:c1:
27:a4:d7:26:01:a5:16:83:4d:d7:a8:0d:89:64:fc:f4:2a:41:
b8:a8:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:22:43 2026 by rpki-client