
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C33FD763F841162CFCC74A69D66C4198565155E8.cer
File: C33FD763F841162CFCC74A69D66C4198565155E8.cer (raw, json)
Hash identifier: 3s/j5tlPG6C/lxPhEtxAFArWWuo4w7fOAXTK0T6sNok=
Subject key identifier: C3:3F:D7:63:F8:41:16:2C:FC:C7:4A:69:D6:6C:41:98:56:51:55:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0844A934339D503C71C0E8850CB6416B9C1D9233
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/0/C33FD763F841162CFCC74A69D66C4198565155E8.mft
caRepository: rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 13 Apr 2026 14:17:42 +0000
Certificate not after: Mon 12 Apr 2027 14:22:42 +0000
Subordinate resources: AS: 53102
IP: 186.195.48.0/20
IP: 187.103.160.0/20
IP: 2804:928::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 19 Apr 2026 00:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:44:a9:34:33:9d:50:3c:71:c0:e8:85:0c:b6:41:6b:9c:1d:92:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 13 14:17:42 2026 GMT
Not After : Apr 12 14:22:42 2027 GMT
Subject: CN=C33FD763F841162CFCC74A69D66C4198565155E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:6f:44:dd:8f:02:02:60:5a:89:b5:4e:08:
14:88:b0:87:bb:f0:f3:03:4f:b8:26:b5:e4:a0:6f:
6a:57:65:37:78:4b:84:7f:24:65:04:09:c0:76:08:
fe:d3:21:3c:c6:a2:07:1f:59:b7:1e:a5:9d:2e:58:
67:64:62:ce:86:ad:d7:19:5d:93:62:bd:16:0e:07:
ff:64:80:25:b0:21:b3:91:ec:90:61:66:f2:1e:f4:
03:12:ae:69:b9:a5:64:98:a3:12:05:84:5d:89:1f:
aa:73:f9:0c:fb:38:c1:6b:10:15:9c:be:ad:fd:fe:
36:ff:90:0e:f6:27:fc:ae:8b:e5:9e:47:b2:d2:f9:
51:78:9e:dc:6f:fa:c4:06:8d:2c:56:80:39:5a:bf:
c7:f5:ff:e5:a1:9b:ad:f1:40:f1:63:40:90:24:29:
44:ea:02:1d:f0:ba:b8:8e:71:78:e1:99:da:38:3e:
c3:d8:b2:b8:cf:42:01:5d:24:8e:9c:f7:8f:d0:a6:
5d:cc:2b:a3:f9:6f:41:60:73:2c:e7:61:7a:36:78:
3c:60:25:fa:7b:22:ff:6f:a0:eb:c6:64:17:0e:da:
ee:1d:15:d2:b4:cb:7f:b5:43:6a:d7:bf:5c:96:27:
4a:87:09:86:ba:86:93:56:3d:87:44:02:a2:92:27:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C3:3F:D7:63:F8:41:16:2C:FC:C7:4A:69:D6:6C:41:98:56:51:55:E8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/0/C33FD763F841162CFCC74A69D66C4198565155E8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.195.48.0/20
187.103.160.0/20
IPv6:
2804:928::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53102
Signature Algorithm: sha256WithRSAEncryption
da:89:a6:ba:d6:5a:42:77:5e:ce:4a:74:83:9d:95:0f:ce:cc:
21:88:67:01:6a:58:3a:29:89:8d:7d:50:27:3f:ac:28:61:fa:
4f:80:fa:19:d5:00:e9:b0:cc:10:aa:f2:12:e4:68:6f:50:d4:
7b:d0:5e:00:fb:42:5d:92:0e:72:e7:f6:72:aa:c2:69:c9:93:
dc:24:3f:91:c9:14:7b:bd:0e:f8:20:ff:e0:cb:47:44:4c:da:
b3:71:48:28:6e:03:18:3b:77:18:78:38:0e:6e:92:a1:e6:f1:
ac:76:b2:08:b1:a0:b7:6f:9b:cf:9f:85:ec:92:51:a0:45:e3:
ba:e5:24:33:b4:24:df:d6:bb:41:c9:b3:3a:39:50:46:a4:e9:
f6:91:94:50:05:b2:9a:d3:57:f4:e6:ac:68:50:72:58:6a:de:
c3:91:2d:21:6a:14:a9:ee:a5:ec:49:a5:27:0a:92:41:ad:b1:
ea:e9:e1:74:8a:4b:d6:e1:2f:36:4b:03:57:96:51:41:81:c2:
9a:0a:3b:28:19:22:22:f4:45:1b:62:3b:cf:b3:8b:92:a6:b4:
66:97:0f:79:f8:2a:a9:fe:a9:a5:a1:0c:f2:0f:fd:ac:67:d5:
a2:f4:20:34:65:29:18:9c:ca:ad:a7:0f:6d:ca:c1:16:aa:82:
d7:1f:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:59:19 2026 by rpki-client