
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/58FDF95FE13704225DDE0AD28DDFCC2AE13B4C99.cer
File: 58FDF95FE13704225DDE0AD28DDFCC2AE13B4C99.cer (raw, json)
Hash identifier: IG6gpeo+hHMttupUMcckaHKsD9sYZCbE8MVSLX+FSEM=
Subject key identifier: 58:FD:F9:5F:E1:37:04:22:5D:DE:0A:D2:8D:DF:CC:2A:E1:3B:4C:99
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 072FB7F66E0756AD7CCEEDDE57511B58EE74E5C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/58FDF95FE13704225DDE0AD28DDFCC2AE13B4C99.mft
caRepository: rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 10 Jun 2026 18:56:59 +0000
Certificate not after: Wed 09 Jun 2027 19:01:59 +0000
Subordinate resources: AS: 61713
IP: 131.72.16.0/22
IP: 170.150.172.0/22
IP: 2804:1b2c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 15 Jun 2026 03:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:2f:b7:f6:6e:07:56:ad:7c:ce:ed:de:57:51:1b:58:ee:74:e5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 10 18:56:59 2026 GMT
Not After : Jun 9 19:01:59 2027 GMT
Subject: CN=58FDF95FE13704225DDE0AD28DDFCC2AE13B4C99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:85:49:cd:32:74:bd:64:97:ed:a9:fc:04:
8e:43:13:17:7b:13:82:0e:69:2d:f1:4b:3c:43:a4:
16:c1:92:cf:1e:c3:b0:f0:73:a1:43:18:36:43:85:
2f:8b:2a:f0:d6:10:7d:a6:20:0f:53:89:ae:1e:a3:
e7:29:b4:48:a3:a3:6d:64:7e:8e:61:a0:83:a9:42:
cb:c7:d9:77:d4:38:b6:38:ec:f3:f4:60:a4:49:14:
e7:48:25:f5:01:5a:3f:8b:37:3c:33:91:dc:22:b6:
27:87:41:4c:3d:a2:15:52:64:7b:fa:3c:8e:c7:f8:
86:78:c7:18:2c:62:f3:36:5b:ec:44:d2:de:eb:7b:
bc:48:53:54:15:b1:b7:f2:76:1f:34:d1:03:6f:8d:
07:b1:ac:04:69:f9:00:49:39:d3:5a:ad:9d:70:0e:
93:82:8b:d4:93:8e:90:9a:f6:04:41:8b:7c:b8:1c:
f7:97:fc:36:e9:78:b8:ab:88:85:7a:d3:ad:81:98:
18:ff:c0:1c:b7:ef:0f:cf:a0:3d:da:bc:60:5e:81:
86:1a:66:7f:62:0b:28:14:03:19:9e:a3:8b:3a:32:
2c:eb:1f:78:9f:98:d3:39:57:41:9b:fc:38:6f:40:
6b:b0:69:50:59:ca:3f:9f:0b:fa:46:e5:78:24:46:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
58:FD:F9:5F:E1:37:04:22:5D:DE:0A:D2:8D:DF:CC:2A:E1:3B:4C:99
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/58FDF95FE13704225DDE0AD28DDFCC2AE13B4C99.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.16.0/22
170.150.172.0/22
IPv6:
2804:1b2c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61713
Signature Algorithm: sha256WithRSAEncryption
04:73:2f:a3:8c:21:ef:85:d3:c5:5d:8e:08:00:1c:44:77:dd:
b4:f6:97:1e:f1:f7:9c:5e:d4:06:e9:97:bc:bc:ce:a3:fb:64:
61:11:81:11:a2:40:c8:94:79:e1:c5:d5:c2:c2:29:be:7e:5d:
83:06:11:0a:03:e7:5c:75:51:78:53:cd:52:8b:3a:95:78:01:
f1:ec:89:93:3c:c0:84:10:6f:30:2e:64:4e:be:03:81:bb:e8:
e5:35:9a:3f:db:53:51:41:ef:86:c8:3e:5e:ec:38:2b:bc:24:
c3:c9:33:08:aa:c5:ba:22:f0:93:9a:d4:2f:34:2c:30:9c:76:
39:92:c4:c7:78:44:67:72:13:85:05:0f:7d:1b:ea:5f:ad:90:
1e:63:19:a4:4b:d0:d4:ff:24:8d:9b:a9:30:31:85:85:62:f0:
e3:4c:d8:3d:24:c9:bd:55:61:76:85:76:36:fd:b1:10:fb:2c:
8c:7f:5d:03:3d:a0:68:45:d8:d7:25:1b:af:9e:d8:62:8d:d0:
8d:1d:58:a4:a1:57:4f:85:f9:a1:21:68:90:ec:df:f0:e2:68:
98:83:9b:25:c6:f2:ae:d6:81:71:26:22:ff:be:17:41:aa:97:
e4:46:e3:3a:f7:82:70:b6:e9:76:65:ba:19:d0:3c:21:4c:8b:
bc:19:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:46:35 2026 by rpki-client