
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer
File: A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer (raw, json)
Hash identifier: 9fQi+SbTsSS7Jc9e0+mKlsmN1q7cIKROTt/J2inBIeI=
Subject key identifier: A9:DD:57:81:2F:FB:02:46:BB:0A:64:36:54:70:56:BD:2F:4A:A3:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 216A6FE381A63700A832BE39B8DD2C1BFBDAFA2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.mft
caRepository: rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 11 Jun 2026 19:06:04 +0000
Certificate not after: Thu 10 Jun 2027 19:11:04 +0000
Subordinate resources: AS: 266319
IP: 170.238.128.0/22
IP: 2804:35fc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 15 Jun 2026 01:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6a:6f:e3:81:a6:37:00:a8:32:be:39:b8:dd:2c:1b:fb:da:fa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 11 19:06:04 2026 GMT
Not After : Jun 10 19:11:04 2027 GMT
Subject: CN=A9DD57812FFB0246BB0A6436547056BD2F4AA3CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:26:d0:3c:ba:36:b0:e5:56:08:e7:6f:91:
37:2f:85:f2:36:ff:68:67:a5:05:1a:6b:b8:a1:de:
f4:27:08:b8:89:9f:18:a3:ac:f9:f7:4b:b6:96:60:
c3:53:85:43:82:e8:1a:1f:76:77:77:ad:24:c9:c3:
d7:a6:7f:2b:80:59:39:2a:d6:02:0e:df:ff:c9:9a:
7c:42:55:de:ba:ec:30:5e:bf:fe:c5:d5:5f:b3:9a:
50:6b:75:0e:cf:08:37:42:4e:64:73:c6:9f:3f:7c:
0e:90:d2:af:38:35:eb:62:6f:78:b0:e8:5d:53:98:
3e:89:b3:33:63:7f:ea:65:b0:21:c1:87:62:8b:12:
44:53:e1:df:bf:f5:65:2f:49:ca:1b:c9:13:e9:52:
4d:ba:1c:09:d5:c3:38:f2:28:c0:2f:5b:3b:c3:72:
91:65:65:2e:fe:12:0f:c2:b1:a8:62:90:b0:e4:80:
96:45:50:fc:b6:af:21:aa:15:fb:47:f3:8c:2c:92:
b1:93:db:ff:f5:c8:a2:9c:c6:6d:98:42:aa:69:c2:
19:df:7d:78:64:86:b7:96:2b:21:5d:79:cb:ac:74:
14:50:7f:af:c9:84:88:13:94:67:03:88:03:2c:c4:
a8:8c:20:8e:fe:39:e6:09:5b:db:c4:63:b1:09:f4:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A9:DD:57:81:2F:FB:02:46:BB:0A:64:36:54:70:56:BD:2F:4A:A3:CC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.128.0/22
IPv6:
2804:35fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266319
Signature Algorithm: sha256WithRSAEncryption
a0:64:81:48:3a:68:d7:1b:15:5a:9e:04:65:67:dc:b5:25:33:
93:f0:29:39:f4:07:93:c6:10:7c:99:50:22:57:fc:e4:e3:12:
67:ca:b3:20:1d:7b:d3:1a:57:99:9a:e0:bc:4e:fb:90:f9:39:
d1:83:71:d3:a8:c7:54:6b:65:78:8b:f5:45:f4:b4:42:e9:5e:
6a:4a:32:91:b5:c8:54:d9:51:2e:7e:ae:64:46:66:09:3c:2a:
41:8a:6b:06:a3:38:6e:e9:7b:10:5d:60:42:d0:32:32:26:16:
8c:ab:65:a5:13:42:e5:8c:bc:5d:4f:d8:f3:2f:7c:32:28:9a:
ad:58:0f:e5:0d:88:7f:8e:88:c2:cf:78:78:8d:d8:db:7e:1d:
27:f1:81:e1:f2:b2:84:5a:ce:8d:1d:b3:da:4d:d5:6a:bb:73:
55:1b:bb:ff:f1:33:f8:2d:b3:eb:e4:28:e5:ca:60:92:9d:4f:
99:ef:d7:5f:92:4b:a6:c3:cc:a8:eb:5c:ab:f5:38:d5:8a:fa:
37:be:60:6c:79:38:86:62:8b:2c:ed:1e:28:e6:24:3f:b8:40:
9c:4a:f8:a2:20:8f:88:5d:1c:6e:95:90:e5:c2:e4:ca:f0:49:
5a:9d:f6:c2:1b:cb:8b:ed:34:78:77:4b:b6:66:80:97:e4:55:
3b:33:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:27:35 2026 by rpki-client