
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.cer
File: 8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.cer (raw, json)
Hash identifier: hn52hPiyTXTbIJlYSE+jY/iOErooQmDQ5JHbz24xxFQ=
Subject key identifier: 8A:C4:50:34:40:25:3C:4A:4B:47:1C:CC:1B:5D:B9:D6:F1:EC:6A:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3D2163CF12EB0C85A4A2B448B56D58D819B12443
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.mft
caRepository: rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 27 Sep 2026 12:21:57 +0000
Certificate not after: Sun 26 Sep 2027 12:26:57 +0000
Subordinate resources: AS: 270545
IP: 187.120.164.0/22
IP: 2804:6da0::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 29 Sep 2026 19:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:21:63:cf:12:eb:0c:85:a4:a2:b4:48:b5:6d:58:d8:19:b1:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 27 12:21:57 2026 GMT
Not After : Sep 26 12:26:57 2027 GMT
Subject: CN=8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:08:52:a7:9f:04:c2:2e:80:56:c8:f7:63:
a2:5b:f1:50:26:eb:b0:42:9c:dc:79:c4:04:93:3e:
16:17:81:ba:9d:b7:1b:ec:30:84:22:27:27:ba:d9:
2c:ce:01:eb:b5:59:bc:6a:2c:f8:75:ba:d7:ce:cf:
e4:7a:42:70:b5:7a:8e:24:2b:46:6f:15:d2:fb:62:
fb:bb:72:af:03:20:32:be:79:19:09:fc:d9:51:9e:
6c:e7:ef:c4:cc:0b:9e:45:b9:e2:7e:29:a5:05:88:
5d:6d:48:8e:e9:91:ba:3e:b8:73:52:fb:3f:30:82:
21:9a:71:1d:76:6e:ac:cb:c5:c5:e6:25:7f:89:42:
e0:1b:7b:3a:04:4d:7b:10:6a:28:31:fc:41:f0:0d:
15:93:55:43:e0:65:e1:d3:b0:26:3f:f7:74:e8:99:
58:5e:f2:b7:8c:da:c8:59:9e:e7:d6:86:c4:47:c9:
7c:ba:d8:7b:3b:27:98:6e:3f:ca:54:be:4a:ae:8a:
08:35:13:b2:32:3a:b7:ad:87:a4:df:c5:a1:53:28:
59:c5:75:01:67:16:71:4a:f6:16:31:03:6f:1c:8f:
9d:f2:4b:e3:ce:4d:bf:ae:b3:19:04:8d:0e:6a:fe:
f3:5b:96:9d:a7:88:35:87:c1:da:4b:1a:d0:dd:27:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8A:C4:50:34:40:25:3C:4A:4B:47:1C:CC:1B:5D:B9:D6:F1:EC:6A:C6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.120.164.0/22
IPv6:
2804:6da0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270545
Signature Algorithm: sha256WithRSAEncryption
c0:0d:69:05:c0:7f:ad:c8:14:d3:fb:6e:e0:42:c7:2b:cb:2d:
ff:05:b8:7b:6b:5b:a9:c2:e5:37:07:b6:67:2e:d0:7b:1b:7b:
7b:2c:0d:00:95:00:6b:2c:8c:58:b9:0c:63:63:a5:2d:4f:bf:
51:1c:81:74:6d:6d:c1:fb:8d:ba:28:da:9a:b5:67:f8:26:ff:
3d:6f:8a:5c:f0:7a:b3:f3:17:62:82:29:16:74:53:ab:1e:c9:
ce:71:92:cf:e8:03:d3:c3:ef:6f:a1:75:12:7a:6a:9b:17:3e:
b8:12:d6:3c:a7:d2:84:65:38:ce:fe:bc:e3:4b:da:f5:c3:8d:
37:68:ec:fd:c7:33:bb:4f:65:6e:75:d1:06:42:28:8b:9a:9d:
8a:c0:24:b0:0f:a3:35:18:39:cd:c0:62:96:84:3a:a7:8c:b8:
2d:21:0b:1d:c5:5a:c6:1b:82:7c:15:7d:e4:78:57:b6:03:8d:
e2:9e:6e:1b:1e:bc:3c:00:09:1e:3f:36:29:48:81:ea:e9:be:
ed:67:51:48:2a:c7:a8:05:81:31:b1:3d:cb:95:89:27:ad:c7:
1c:2e:14:98:8a:4c:7d:df:3b:23:cc:03:16:27:2a:4d:da:f5:
c1:2b:32:a1:79:81:d3:af:07:02:1b:34:27:d1:1d:0f:6c:c9:
de:47:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:18:16 2026 by rpki-client