
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
File: 601AB4C2CB27698A7EF0684324D416B8646A9B75.cer (raw, json)
Hash identifier: 645V2Xj39/2CEGymcAA2OY/3IfUeC/07536dt0rS6hE=
Subject key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2092221D4A902464A68482434890746B92B50435
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
caRepository: rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 23 Oct 2026 07:17:55 +0000
Certificate not after: Fri 22 Oct 2027 07:22:55 +0000
Subordinate resources: AS: 273443
IP: 177.21.208.0/20
IP: 186.196.68.0/22
IP: 186.196.100.0/22
IP: 186.198.144.0/21
IP: 186.226.216.0 -- 186.226.218.255
IP: 187.86.20.0/22
IP: 2804:8eb4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 10:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:92:22:1d:4a:90:24:64:a6:84:82:43:48:90:74:6b:92:b5:04:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 23 07:17:55 2026 GMT
Not After : Oct 22 07:22:55 2027 GMT
Subject: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:25:85:6c:02:c6:21:ae:65:03:5d:46:09:
78:bf:45:e0:99:76:fc:ec:e0:12:7b:c0:61:4e:9c:
2e:7b:16:27:cc:f0:e1:18:3a:84:c8:b3:b5:d9:d9:
df:db:67:74:ba:4d:6c:ae:e1:4b:91:f5:f2:b0:04:
b0:79:af:0a:86:2d:63:02:b2:eb:0d:5d:8c:ba:9d:
dd:e9:e7:26:16:c7:96:9e:dd:d6:f3:e3:67:f4:bd:
3f:17:f7:43:80:6f:c5:8f:7f:5d:92:40:d9:4a:95:
34:80:17:b5:7e:93:b9:25:bc:3c:54:6e:24:0a:7d:
1e:52:87:f8:32:e4:35:87:55:1e:89:16:6a:98:39:
96:6e:26:a3:09:dc:e4:cb:e4:ac:9f:a9:e6:aa:ea:
c7:79:8d:41:67:1a:33:7c:58:e3:42:77:cc:86:e6:
82:73:e9:36:65:06:60:5d:bb:fe:3e:b9:f2:4f:2d:
52:47:ac:77:3f:88:a8:65:b3:ef:f1:5f:31:2b:ca:
ba:77:5f:a5:ca:60:f8:7d:86:c9:c8:b8:0c:1d:13:
8f:da:3f:65:93:97:27:37:2a:35:1c:5a:13:96:94:
40:15:ad:3b:97:5c:10:ed:da:fa:28:60:53:71:da:
2f:0a:65:11:5b:69:6e:3d:ef:c8:c5:c3:1c:38:6c:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.21.208.0/20
186.196.68.0/22
186.196.100.0/22
186.198.144.0/21
186.226.216.0-186.226.218.255
187.86.20.0/22
IPv6:
2804:8eb4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273443
Signature Algorithm: sha256WithRSAEncryption
2e:6a:39:dd:54:39:7d:7b:29:e3:23:05:e1:9a:f0:ae:b6:60:
d5:06:3b:6f:45:5c:dc:42:cf:4b:48:0e:bc:7e:6c:44:3f:35:
ef:ac:74:c1:7b:47:68:1f:f5:af:f8:50:0e:04:32:1b:6d:da:
c8:71:41:40:e1:8d:63:27:f1:0e:40:fa:81:bd:32:60:c3:e0:
fb:56:ee:1b:f0:55:b7:ba:c8:9d:9d:4e:d2:bc:a7:4c:fb:52:
7a:6d:61:f2:f7:ec:c2:8f:93:ce:de:d5:04:d1:d0:66:1f:d0:
60:7e:5d:29:2e:6f:b2:2b:c0:aa:6c:39:34:69:a1:b4:65:b8:
38:91:76:3a:ed:de:8a:bc:fd:d6:64:55:2c:0b:c8:c0:82:4d:
2a:32:11:62:8f:16:3e:46:0b:d9:e4:70:db:8f:77:3f:02:de:
d8:30:e0:20:83:1a:ca:a7:1f:d6:45:bc:df:97:7c:6e:82:0c:
fa:0a:30:48:d4:88:d7:7c:1d:6a:68:84:f8:72:63:c7:de:cb:
32:cb:52:af:45:9a:6d:77:58:f6:44:33:a1:f3:6b:cd:17:cf:
4b:c6:19:c9:52:3c:20:e4:44:17:86:5d:7e:b6:c4:bc:57:a4:
45:af:f4:83:56:86:7b:6c:ad:f8:5b:18:f9:2c:df:e0:de:fe:
a6:ee:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:46:33 2026 by rpki-client