
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
File: D79C7E4BAE4953730FE72125E941901AFC590C0B.cer (raw, json)
Hash identifier: 33qXCEH3RBIiVUPtLNBsvKxvrNrNix4pAFll2haoZSc=
Subject key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2131AF798E997A12397E62A3511EC9D36EF00961
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
caRepository: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 01 Mar 2026 16:51:30 +0000
Certificate not after: Sun 28 Feb 2027 16:56:30 +0000
Subordinate resources: AS: 11921
IP: 200.150.128.0/20
IP: 200.194.96.0/20
IP: 200.233.64.0/20
IP: 201.49.0.0/18
IP: 2804:1470::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 18:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:31:af:79:8e:99:7a:12:39:7e:62:a3:51:1e:c9:d3:6e:f0:09:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 1 16:51:30 2026 GMT
Not After : Feb 28 16:56:30 2027 GMT
Subject: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:1e:b7:3d:dc:5a:2f:02:de:22:fe:fe:17:
d6:70:3d:23:e4:95:69:37:05:59:84:57:90:cd:7d:
1c:ea:fe:2a:2f:29:f4:f1:0b:0f:e6:5c:99:4e:a7:
3b:1d:cd:78:9b:c7:b9:95:9b:95:1e:39:dd:ea:93:
2e:9c:e1:60:31:ea:05:61:40:7b:56:14:e7:8a:0f:
12:35:eb:32:73:0a:6d:ec:55:35:ae:52:90:cb:70:
d3:f3:0e:fd:a0:fa:c9:7a:ce:c1:f1:d2:aa:82:b9:
f1:3a:a6:c3:ea:18:39:80:64:1d:6f:0e:73:a0:70:
4d:7e:60:a8:d6:23:72:bd:2b:ee:64:20:98:7f:48:
98:76:d6:f4:c0:5e:f4:3a:b4:ca:a8:da:e9:05:f2:
3c:f1:86:59:6a:23:f6:3f:94:36:c0:0f:f2:7e:9c:
d2:8d:4a:7f:c4:36:82:12:68:13:79:c2:1c:24:24:
9b:16:a0:38:6f:79:7e:30:cc:23:7d:42:82:0c:97:
5d:c8:ce:5c:b1:14:a9:a3:23:7a:34:dc:5c:6e:66:
26:8a:eb:7c:28:03:f6:f5:db:ce:26:fb:84:82:55:
f1:08:59:ce:ab:ab:a1:68:81:a5:e2:2e:f0:46:2d:
14:10:d1:a0:72:f0:56:92:9a:62:c4:3c:18:ae:ed:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.150.128.0/20
200.194.96.0/20
200.233.64.0/20
201.49.0.0/18
IPv6:
2804:1470::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11921
Signature Algorithm: sha256WithRSAEncryption
a3:9f:32:23:ab:06:ff:b0:bc:e2:a3:3f:39:75:0c:c3:f3:b1:
f5:d3:df:c9:a9:d2:4c:76:71:24:41:48:5e:cd:00:52:fa:78:
67:1a:4f:45:05:e2:d7:50:e3:4d:a3:23:3c:94:9d:f7:6f:22:
cd:42:d8:74:0a:e7:74:91:0c:e1:37:20:47:f0:27:69:69:5e:
47:db:b9:9b:2d:19:90:37:67:86:44:87:d4:4d:1f:71:d6:6b:
16:e9:08:06:f6:4e:f4:ff:f5:e1:c5:d5:ea:d8:dd:d7:d1:60:
6f:b9:15:4c:66:34:91:7c:5b:36:d6:cf:8e:d2:8c:8b:d8:90:
c1:f2:e2:d6:70:8d:a6:22:95:31:96:70:39:63:7d:0e:58:4a:
9a:8f:0d:6e:54:18:3b:c2:17:79:0e:ae:59:6f:59:59:75:62:
dc:d2:2b:9f:cb:2e:1f:20:c7:36:4d:a5:9e:6f:3b:59:21:5e:
9a:27:aa:e0:82:11:45:04:56:b9:30:c7:ad:7e:a0:42:e9:d0:
9e:e4:2f:d5:34:6b:cb:ad:4e:f8:c1:34:97:4d:89:7d:ac:11:
3d:31:06:e8:8d:1b:13:2f:da:64:63:e3:ad:b6:86:38:50:47:
61:91:97:c9:58:01:1c:75:52:4d:a9:38:f0:a9:86:ab:c3:7e:
cc:7a:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:30:34 2026 by rpki-client