
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D95B60ABC643FFF407B377AB1394401E3A261DEC.cer
File: D95B60ABC643FFF407B377AB1394401E3A261DEC.cer (raw, json)
Hash identifier: GMROkcTH8DIvWgiSMnVCNbjX/2nf2TMRIMYKQMixhx0=
Subject key identifier: D9:5B:60:AB:C6:43:FF:F4:07:B3:77:AB:13:94:40:1E:3A:26:1D:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 62F62074855065DD959367AED06F4AE2367FFF80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/D95B60ABC643FFF407B377AB1394401E3A261DEC.mft
caRepository: rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 12 Jun 2026 17:52:15 +0000
Certificate not after: Fri 11 Jun 2027 17:57:15 +0000
Subordinate resources: AS: 52566
IP: 131.221.72.0/22
IP: 143.202.176.0/22
IP: 177.86.24.0/22
IP: 2804:1e00::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Jun 2026 21:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f6:20:74:85:50:65:dd:95:93:67:ae:d0:6f:4a:e2:36:7f:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 12 17:52:15 2026 GMT
Not After : Jun 11 17:57:15 2027 GMT
Subject: CN=D95B60ABC643FFF407B377AB1394401E3A261DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:8f:ad:59:42:37:15:68:b9:ff:17:75:52:
ef:b9:26:13:0d:fc:47:80:1b:17:07:36:48:8f:d6:
cd:54:8c:f2:c5:a0:57:d5:09:39:c4:bd:a8:da:7c:
b5:dd:59:bd:5a:e5:22:24:44:d5:ad:94:3c:c3:3e:
94:a7:57:ce:f4:fd:2f:01:0e:94:f8:74:56:19:1e:
52:f8:4c:dd:ac:3e:70:da:10:e3:bf:ef:c5:5a:8a:
e0:17:21:88:c8:c6:9f:4f:e1:0d:53:23:14:97:ee:
27:87:31:55:95:8d:16:73:0f:48:af:e2:a8:16:51:
67:b7:de:c9:05:47:b5:ae:a7:41:aa:4d:ab:35:f7:
fa:9c:ab:a5:c2:7f:ff:d8:ff:9a:d3:06:3c:e8:64:
a2:be:5d:e4:57:ea:5b:0b:5e:33:a5:46:1a:0f:77:
bb:ef:f8:1f:7b:94:8c:09:fa:6e:68:86:32:9b:22:
1d:7d:42:28:7e:ae:4d:fe:88:f8:bb:2a:cb:9c:6c:
91:73:1d:13:fe:d8:22:2a:fb:b5:f5:3f:4a:1a:8a:
2d:96:c6:5f:fa:6b:93:07:38:1e:9a:0e:eb:93:8e:
59:fc:28:a6:ef:d6:04:62:ff:7b:52:dd:66:02:77:
68:ea:50:71:d4:e9:5b:86:5f:34:0e:f4:75:e4:d1:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D9:5B:60:AB:C6:43:FF:F4:07:B3:77:AB:13:94:40:1E:3A:26:1D:EC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/D95B60ABC643FFF407B377AB1394401E3A261DEC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.72.0/22
143.202.176.0/22
177.86.24.0/22
IPv6:
2804:1e00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52566
Signature Algorithm: sha256WithRSAEncryption
06:b1:06:b2:9f:27:65:27:e8:52:e9:16:44:70:39:a1:80:4f:
e9:0e:a4:e7:8c:56:68:89:5e:c7:cb:4b:f3:b9:a8:1e:f9:e3:
ed:1c:95:41:cc:87:42:6f:de:4f:56:c8:bf:77:f4:e7:12:cd:
fb:2e:ae:7c:6a:e2:0b:5e:c2:4c:91:c5:16:e6:3e:c7:ea:ff:
f3:43:e9:42:71:c0:05:ab:46:5c:30:77:e9:38:3d:cb:f4:a6:
45:41:e7:2b:ea:fa:9c:eb:86:91:5f:a6:d6:20:4f:62:17:c1:
b1:46:bb:7c:30:11:1e:8b:c4:36:cc:44:62:fa:25:d8:f3:6d:
e3:db:21:f5:b1:18:ce:e0:23:1d:31:61:d5:06:2f:0c:da:b5:
9f:56:a5:30:43:c3:63:bf:c1:7d:98:b0:0b:91:bc:0d:c9:94:
58:6a:a7:94:dc:f8:10:c3:7f:51:4c:b8:f6:2e:dc:0e:28:3e:
03:af:c8:f1:f8:8a:17:d7:44:46:89:ee:88:cd:59:84:c1:9f:
90:b4:47:0d:c5:8b:47:96:5d:70:ca:b3:de:cf:1e:83:54:de:
65:16:63:62:c1:8b:3a:0e:79:4a:1b:f3:8c:73:d6:25:8c:09:
28:51:54:64:a0:6a:37:18:36:36:06:21:09:83:93:ea:a1:a2:
84:2b:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:40:22 2026 by rpki-client