Certificate
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
File: BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer (raw, json)
Hash identifier: k+9+SjvtipTidgZ3ajbFfpp2s0XQKkDxZYt/IH99/d4=
Subject key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 422765E5729260E16765DE82BED9D6101CFA53F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
caRepository: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 28 Aug 2026 13:14:09 +0000
Certificate not after: Fri 27 Aug 2027 13:19:09 +0000
Subordinate resources: AS: 28220
IP: 45.4.64.0/22
IP: 45.165.20.0/22
IP: 45.175.188.0/22
IP: 45.227.188.0/22
IP: 45.232.88.0/22
IP: 45.238.116.0/22
IP: 131.108.228.0/22
IP: 131.161.108.0/22
IP: 131.196.76.0/22
IP: 131.221.68.0/22
IP: 131.255.156.0/22
IP: 138.0.100.0/22
IP: 138.117.124.0/22
IP: 138.121.220.0/22
IP: 138.122.236.0/22
IP: 138.255.172.0/22
IP: 138.255.216.0/22
IP: 143.255.112.0/22
IP: 160.238.220.0/22
IP: 168.121.52.0/22
IP: 168.121.148.0/22
IP: 168.196.20.0/22
IP: 168.227.44.0/22
IP: 168.227.108.0/22
IP: 168.228.68.0/22
IP: 168.228.128.0/22
IP: 168.232.116.0/22
IP: 170.0.204.0/22
IP: 170.82.92.0/22
IP: 170.82.132.0/22
IP: 170.150.112.0/22
IP: 170.150.204.0/22
IP: 170.245.100.0/22
IP: 170.246.68.0/22
IP: 170.247.52.0/22
IP: 170.247.236.0/22
IP: 177.8.48.0/21
IP: 177.53.128.0/21
IP: 177.55.48.0/20
IP: 177.66.64.0/21
IP: 177.67.0.0/21
IP: 177.70.128.0/20
IP: 177.75.192.0/19
IP: 177.87.144.0/21
IP: 177.89.0.0/16
IP: 177.125.184.0/21
IP: 177.130.192.0/19
IP: 177.137.192.0/20
IP: 179.96.192.0/21
IP: 179.96.240.0/20
IP: 179.190.128.0/17
IP: 179.191.128.0/19
IP: 186.192.16.0/20
IP: 186.193.96.0/20
IP: 186.208.208.0/21
IP: 186.219.144.0/20
IP: 186.233.72.0/21
IP: 186.235.0.0/20
IP: 186.236.192.0/19
IP: 186.251.112.0/21
IP: 187.18.128.0/17
IP: 187.45.48.0/20
IP: 187.49.192.0/20
IP: 187.60.64.0/19
IP: 187.61.128.0/17
IP: 187.73.192.0/19
IP: 187.86.96.0/20
IP: 187.87.112.0/20
IP: 187.95.48.0/20
IP: 187.95.176.0/20
IP: 187.108.64.0/20
IP: 187.108.96.0/20
IP: 187.109.176.0/20
IP: 187.110.208.0/20
IP: 187.111.224.0/19
IP: 189.45.16.0/20
IP: 189.45.64.0/18
IP: 189.50.144.0/20
IP: 189.124.128.0/17
IP: 191.6.80.0/21
IP: 191.37.144.0/21
IP: 191.241.32.0/20
IP: 192.141.196.0/22
IP: 200.9.160.0/22
IP: 200.94.240.0/22
IP: 200.233.80.0/20
IP: 201.55.196.0/22
IP: 201.148.188.0/22
IP: 201.149.120.0/22
IP: 201.158.40.0/21
IP: 2804:54::/32
IP: 2804:880::/32
IP: 2804:a3c::/32
IP: 2804:fec::/32
IP: 2804:1134::/32
IP: 2804:1d2c::/32
IP: 2804:2140::/32
IP: 2804:343c::/32
IP: 2804:47c0::/32
IP: 2804:4f60::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 29 Sep 2026 19:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:27:65:e5:72:92:60:e1:67:65:de:82:be:d9:d6:10:1c:fa:53:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 28 13:14:09 2026 GMT
Not After : Aug 27 13:19:09 2027 GMT
Subject: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:20:e5:96:7f:80:49:4a:2f:0a:d2:a1:77:81:
e2:9d:13:70:15:d2:2a:72:2c:8a:dd:c6:9f:7b:d2:
f4:7c:88:e2:1b:c7:ee:95:12:2e:47:6b:00:c0:62:
ee:fe:2a:cf:28:91:51:c0:18:6d:9c:68:04:f0:7a:
4e:7a:26:81:54:49:e4:e7:93:9b:72:67:75:a0:c3:
ab:37:23:a4:40:a0:c6:02:46:7b:74:e9:cd:9e:50:
33:a9:ee:11:28:fa:ce:2c:1e:93:78:99:e9:eb:0b:
96:db:69:f4:ef:d0:21:3f:f8:7d:40:fc:4c:6e:41:
a4:a4:87:18:f0:53:06:52:ad:2b:f9:bf:b4:87:67:
5e:90:d7:30:ed:82:ad:a0:14:d0:4f:c6:2a:24:70:
c5:be:57:03:8f:8b:02:c9:b5:c1:78:34:4c:57:02:
90:c0:25:85:1b:7c:8b:9e:61:59:4d:64:01:19:7e:
38:94:b0:b9:a6:bc:09:7a:6c:0f:54:f5:6e:31:0f:
22:91:fb:cf:52:67:ce:af:0e:57:6c:39:64:c0:b7:
d8:20:6d:a5:da:e0:2b:24:04:cc:c3:8d:0e:e2:ca:
33:82:74:8c:0b:62:3a:e5:87:65:87:6c:54:e5:17:
fd:ad:d3:98:a0:48:c0:42:d6:7c:9a:a8:51:c5:b1:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.64.0/22
45.165.20.0/22
45.175.188.0/22
45.227.188.0/22
45.232.88.0/22
45.238.116.0/22
131.108.228.0/22
131.161.108.0/22
131.196.76.0/22
131.221.68.0/22
131.255.156.0/22
138.0.100.0/22
138.117.124.0/22
138.121.220.0/22
138.122.236.0/22
138.255.172.0/22
138.255.216.0/22
143.255.112.0/22
160.238.220.0/22
168.121.52.0/22
168.121.148.0/22
168.196.20.0/22
168.227.44.0/22
168.227.108.0/22
168.228.68.0/22
168.228.128.0/22
168.232.116.0/22
170.0.204.0/22
170.82.92.0/22
170.82.132.0/22
170.150.112.0/22
170.150.204.0/22
170.245.100.0/22
170.246.68.0/22
170.247.52.0/22
170.247.236.0/22
177.8.48.0/21
177.53.128.0/21
177.55.48.0/20
177.66.64.0/21
177.67.0.0/21
177.70.128.0/20
177.75.192.0/19
177.87.144.0/21
177.89.0.0/16
177.125.184.0/21
177.130.192.0/19
177.137.192.0/20
179.96.192.0/21
179.96.240.0/20
179.190.128.0/17
179.191.128.0/19
186.192.16.0/20
186.193.96.0/20
186.208.208.0/21
186.219.144.0/20
186.233.72.0/21
186.235.0.0/20
186.236.192.0/19
186.251.112.0/21
187.18.128.0/17
187.45.48.0/20
187.49.192.0/20
187.60.64.0/19
187.61.128.0/17
187.73.192.0/19
187.86.96.0/20
187.87.112.0/20
187.95.48.0/20
187.95.176.0/20
187.108.64.0/20
187.108.96.0/20
187.109.176.0/20
187.110.208.0/20
187.111.224.0/19
189.45.16.0/20
189.45.64.0/18
189.50.144.0/20
189.124.128.0/17
191.6.80.0/21
191.37.144.0/21
191.241.32.0/20
192.141.196.0/22
200.9.160.0/22
200.94.240.0/22
200.233.80.0/20
201.55.196.0/22
201.148.188.0/22
201.149.120.0/22
201.158.40.0/21
IPv6:
2804:54::/32
2804:880::/32
2804:a3c::/32
2804:fec::/32
2804:1134::/32
2804:1d2c::/32
2804:2140::/32
2804:343c::/32
2804:47c0::/32
2804:4f60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28220
Signature Algorithm: sha256WithRSAEncryption
9b:05:73:19:55:50:e1:92:2d:d9:ba:1f:06:69:19:4a:9c:12:
60:91:7c:49:13:4c:39:12:fc:91:e6:99:9e:6a:36:b6:47:dd:
68:d5:e7:06:f4:b8:bc:d3:29:f8:07:05:f2:2a:05:3d:6a:7f:
57:4a:2d:a8:93:33:56:8d:9b:fe:16:bf:85:5e:8f:24:ef:64:
6d:25:32:bf:06:69:07:f3:fa:97:80:d4:0e:85:20:aa:42:dc:
6d:d3:03:81:00:4d:bf:eb:97:83:0b:f7:2b:63:e8:db:90:39:
48:42:f7:6d:40:49:c5:38:da:24:2d:30:5b:7f:8b:86:1e:21:
70:ec:38:93:af:81:b6:8e:11:5f:9d:31:4b:8b:ee:ce:d0:ba:
3e:70:3c:67:68:64:85:59:86:94:49:0c:2b:11:1e:12:6c:b3:
05:8b:c3:d6:0e:31:1b:56:d6:38:d7:46:eb:1c:88:7f:48:e4:
e5:ae:27:46:ce:50:7f:5b:fc:2e:94:74:8f:49:77:89:34:36:
82:c2:eb:df:fc:2a:e5:76:c4:43:a6:98:7d:d0:43:8b:93:cf:
68:a5:6b:e6:92:cd:db:22:5c:95:94:af:ef:de:bb:72:cf:07:
c3:fd:d8:2b:67:8a:19:ca:1b:b6:69:89:0d:51:1c:60:13:79:
66:af:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:26:04 2026 by rpki-client