
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8AE88351A51784420EFC90F9CD2ED9479621FCA8.cer
File: 8AE88351A51784420EFC90F9CD2ED9479621FCA8.cer (raw, json)
Hash identifier: ZtTMx6ZKoSFu4gRq0oNsAz+JIAnQptN758FxglsCLOg=
Subject key identifier: 8A:E8:83:51:A5:17:84:42:0E:FC:90:F9:CD:2E:D9:47:96:21:FC:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 68FD5397E32947B6FABF1344FFF564D429377123
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/8AE88351A51784420EFC90F9CD2ED9479621FCA8.mft
caRepository: rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 17 Apr 2026 12:43:36 +0000
Certificate not after: Fri 16 Apr 2027 12:48:36 +0000
Subordinate resources: AS: 267522
IP: 192.141.100.0/22
IP: 2804:42bc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 19 Apr 2026 05:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:fd:53:97:e3:29:47:b6:fa:bf:13:44:ff:f5:64:d4:29:37:71:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 17 12:43:36 2026 GMT
Not After : Apr 16 12:48:36 2027 GMT
Subject: CN=8AE88351A51784420EFC90F9CD2ED9479621FCA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:3e:51:41:20:ab:e8:36:86:09:36:f6:c8:
52:7c:c8:da:86:44:76:74:ac:04:6c:14:cc:b1:5b:
ff:d2:f6:09:07:06:d5:9b:a6:5f:f5:07:2b:7b:42:
eb:35:38:50:40:d7:e9:8f:51:7a:f3:fa:3f:67:83:
38:a6:1e:e5:0e:01:42:0f:d0:46:dc:49:5d:57:94:
1a:57:82:65:e6:85:87:68:90:e3:26:23:42:4c:fe:
82:ff:e4:fb:10:21:83:57:33:c7:c0:b9:09:53:83:
b4:30:0b:80:7e:33:1b:2e:41:9a:63:40:13:c1:28:
d4:82:94:ec:c9:91:ef:c9:df:1c:26:60:bd:07:22:
bc:aa:44:4e:5a:62:81:a6:49:96:3d:93:44:21:b5:
00:7b:d3:42:06:8e:94:e6:fe:29:40:08:d5:12:37:
a6:51:69:30:d1:00:62:91:39:7d:9e:5d:4f:e7:ba:
47:1f:78:5d:28:55:83:93:ae:d5:27:54:f3:f8:e3:
31:84:34:75:6c:01:cf:6c:f5:9e:14:71:59:8f:80:
96:65:d4:eb:d8:69:72:e2:e0:b4:5e:f7:cb:2d:8a:
af:9a:2b:fc:07:52:ab:07:65:4c:6d:5c:75:e9:a4:
a6:33:dc:aa:cd:9d:dc:86:eb:e2:3f:7c:07:bd:06:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8A:E8:83:51:A5:17:84:42:0E:FC:90:F9:CD:2E:D9:47:96:21:FC:A8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/8AE88351A51784420EFC90F9CD2ED9479621FCA8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.100.0/22
IPv6:
2804:42bc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267522
Signature Algorithm: sha256WithRSAEncryption
97:57:ed:36:45:13:85:cb:74:8c:75:e7:a5:60:e4:f3:4c:5b:
fa:4e:f8:47:2a:74:33:7a:83:95:ff:3a:82:d5:a6:52:f0:41:
21:ee:15:5d:9d:dd:12:68:f9:e8:c4:ce:f4:42:07:44:d0:ff:
ce:53:c8:62:8f:f3:2e:7d:ad:ed:31:90:8b:84:bc:ed:5f:83:
92:30:cd:0c:79:08:2a:38:56:aa:4f:9c:89:13:3d:01:7e:00:
3e:99:69:0d:57:75:0d:ff:4b:0a:69:ed:a2:e8:7e:3a:90:44:
a8:04:30:2c:32:ae:8a:c1:25:2a:5c:7c:e3:61:1d:4a:60:a9:
c9:9c:ed:0e:92:31:64:d6:0f:8f:1b:cf:58:0b:cb:3a:54:dd:
a7:d5:66:48:cc:1f:0e:3a:60:37:b2:da:3a:fe:ed:7e:d4:9e:
70:c0:b2:35:b8:0f:77:b9:c2:f3:c3:8a:84:15:39:fa:5a:ab:
a2:59:e5:51:f2:d6:79:6f:08:af:46:08:1d:fb:3a:48:c0:4d:
42:2e:d5:0d:31:ed:8b:fc:31:37:4e:97:f7:d6:78:da:5c:63:
ef:db:e1:95:27:bd:3f:de:1b:20:bb:5f:56:24:07:9d:f9:ef:
89:31:44:d1:01:30:44:ba:ae:4e:62:10:e8:f5:51:3e:0b:9d:
2e:56:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:20:40 2026 by rpki-client