
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer
File: 66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer (raw, json)
Hash identifier: TbJ3v8KJUyIG8J4ZbKJQPT9h0xO9BMYK7KOX84VIAUY=
Subject key identifier: 66:AB:3C:6D:69:62:BB:C2:0D:BF:F5:97:96:9F:5D:2B:8E:D6:E1:A7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0413D5A89D4A9FC0CAF6E8B0F38D7E70DF06F8DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.mft
caRepository: rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 16 Apr 2026 18:30:47 +0000
Certificate not after: Thu 15 Apr 2027 18:35:47 +0000
Subordinate resources: AS: 265088
IP: 170.233.140.0/22
IP: 2804:329c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 13:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:13:d5:a8:9d:4a:9f:c0:ca:f6:e8:b0:f3:8d:7e:70:df:06:f8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 16 18:30:47 2026 GMT
Not After : Apr 15 18:35:47 2027 GMT
Subject: CN=66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:04:60:21:c3:53:2f:7c:1b:83:49:ff:28:
a7:f9:b6:bc:0f:d6:90:cd:66:2b:36:ec:8b:17:7a:
a4:2c:36:32:52:32:ae:cc:c0:f4:4b:32:71:0a:57:
74:32:47:64:bc:87:36:19:39:7f:41:ed:31:84:e5:
db:a0:21:03:3a:87:a6:4c:93:e5:26:58:99:94:54:
d6:de:f2:fc:d2:08:ee:4a:84:1e:bb:d7:a6:ed:ca:
7b:c4:93:f7:ed:d9:ac:2f:31:cf:c6:5c:01:80:09:
6c:ab:f2:f8:fe:f9:60:4d:c7:fb:96:60:29:ff:74:
91:58:6c:4c:d0:ed:ea:26:0c:61:02:c3:57:e9:6b:
55:0d:66:40:e9:6f:4f:c9:d8:b0:7e:59:39:55:27:
e5:45:51:65:69:f3:21:ff:31:02:7f:38:c9:9d:be:
cc:47:a6:4f:ad:84:c4:91:fe:b2:08:49:12:13:2d:
24:a2:c2:c0:27:6f:0a:8d:ed:24:b4:21:83:f1:7e:
7a:b0:dd:23:43:3e:40:52:db:ce:f9:af:f0:2e:07:
0c:73:34:3f:9e:c8:81:f8:f0:19:6c:b3:7a:77:11:
21:e6:63:50:59:4f:ae:91:73:8a:f5:78:83:20:7c:
c9:3f:1b:67:30:3e:12:bd:67:d5:11:38:3e:17:a1:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
66:AB:3C:6D:69:62:BB:C2:0D:BF:F5:97:96:9F:5D:2B:8E:D6:E1:A7
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.140.0/22
IPv6:
2804:329c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265088
Signature Algorithm: sha256WithRSAEncryption
99:5a:e6:d1:b5:93:25:a0:74:e8:5a:75:fa:b4:59:4e:9e:6c:
93:b0:aa:07:41:67:a9:dd:c1:c7:4a:70:c9:a6:04:d2:d2:5f:
66:c5:74:ef:67:79:f1:c5:d1:be:49:e9:4d:b3:e7:61:d7:16:
31:3d:24:a8:65:17:3a:14:b8:b8:29:d1:80:be:b0:52:ad:fb:
4d:ac:58:a4:64:2e:06:a3:b9:61:76:fa:33:62:ff:d3:db:04:
c3:69:66:67:bc:fd:bf:ed:85:76:2e:ba:56:60:20:0a:5e:23:
46:a2:e6:94:8d:9a:98:e6:96:3a:86:88:d1:9b:ac:e4:e9:5f:
84:8e:1e:4e:be:a4:68:44:85:38:c6:64:54:60:36:1c:1a:28:
0c:d7:cf:b2:e9:4b:bb:36:c5:21:a4:a0:da:6f:e7:f3:9b:29:
8a:3f:b4:9c:47:b0:39:09:ed:c1:f9:9e:63:cc:bf:c0:be:b1:
8f:6f:4d:8d:71:7c:88:ed:6b:fa:0a:5a:26:8f:7b:84:7f:b6:
88:46:09:b1:2a:07:bc:cf:5f:c1:1f:02:54:e9:98:41:09:c8:
b7:b5:06:b6:69:b0:0e:b5:b1:06:00:9c:77:47:22:51:7b:fc:
67:0c:38:65:2a:c3:78:ed:ab:a0:73:6d:79:bb:01:95:4a:64:
7e:53:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:11 2026 by rpki-client