
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
File: DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer (raw, json)
Hash identifier: IsQlZtnyDn4NCvOgp/QSTVdPoGoprU/Jo3MS+DFi8XQ=
Subject key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 02733ABE707390F472C8C494C2FD5CAC7CE7C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
caRepository: rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 28 Feb 2026 13:52:58 +0000
Certificate not after: Sat 27 Feb 2027 13:57:58 +0000
Subordinate resources: AS: 271673
IP: 131.255.130.0/24
IP: 190.9.127.0/24
IP: 201.218.190.0/23
IP: 2804:7f34::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 18:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:73:3a:be:70:73:90:f4:72:c8:c4:94:c2:fd:5c:ac:7c:e7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 28 13:52:58 2026 GMT
Not After : Feb 27 13:57:58 2027 GMT
Subject: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:5e:42:40:0a:e8:10:16:43:e7:bf:c0:4f:
01:5a:41:02:17:ab:11:ac:cb:35:63:bd:77:56:c4:
69:b7:fc:93:99:f5:ef:42:30:ef:2b:99:eb:73:3e:
fd:83:84:c6:64:d2:2c:27:bf:29:3c:f9:c5:80:7e:
cc:b1:2f:d6:fb:43:c9:88:db:e1:5c:7d:ca:c4:2a:
04:84:f2:95:df:8b:2d:23:7c:22:d1:c4:8e:01:4f:
16:38:9d:e7:93:2e:60:a9:c0:79:79:89:e8:27:bc:
4c:2e:82:7a:24:56:01:f6:da:2a:37:97:fd:e9:02:
92:19:6f:e6:16:c4:8e:45:c3:c2:39:dd:c6:53:82:
71:89:0e:b9:f9:2f:2e:cc:9b:3d:76:a9:0a:11:f8:
83:f4:67:ef:28:98:68:e8:61:ac:54:49:db:96:fa:
a7:01:fe:7e:9f:60:99:24:4e:e6:08:ee:b9:9f:a0:
6e:27:c8:91:c0:cc:ba:bb:76:fe:3e:3e:a9:e5:1c:
d6:c5:c4:28:eb:83:2f:53:d0:36:d5:21:c4:63:28:
ef:23:23:3b:fd:e8:19:ee:c0:91:24:0a:f2:6d:e9:
d9:57:e5:a8:0c:3b:70:64:d1:30:af:98:63:d7:3a:
d0:0b:07:29:0a:3a:b5:bc:aa:6d:92:8f:a0:b9:1b:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.130.0/24
190.9.127.0/24
201.218.190.0/23
IPv6:
2804:7f34::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271673
Signature Algorithm: sha256WithRSAEncryption
77:d2:ff:4b:b2:9d:39:ea:4c:e3:0a:e1:14:2b:95:cd:53:4c:
2c:8f:5d:02:f3:53:da:4c:64:1b:f6:68:7e:d8:bd:92:b6:c7:
de:48:48:84:59:9d:35:1e:fb:b0:f4:95:af:2b:68:32:48:05:
ea:98:1e:9d:75:ff:8f:47:2d:ef:d4:76:39:37:4e:50:b4:69:
64:d9:42:9b:60:a7:9a:b0:4a:47:f0:62:43:e1:bf:3e:04:ec:
ed:9a:5b:75:03:0d:a7:3a:39:11:35:3a:a0:4a:16:3f:58:c7:
5e:a1:9b:59:0e:65:8f:23:52:d0:68:cb:86:a3:8b:27:44:a7:
98:43:ea:80:69:8a:39:0d:64:85:ad:88:d9:d5:ca:97:fa:6c:
10:f3:db:51:ba:5b:a9:78:8f:ca:09:0e:88:97:0e:ab:31:9f:
48:78:d4:81:d0:91:f0:b8:95:5a:74:0f:fd:b7:ef:c2:a4:2a:
ac:fd:f9:e2:7b:d5:67:6f:3b:e5:1c:d8:ec:36:b9:83:a6:17:
cd:43:f3:96:be:f9:61:70:d6:a5:b6:92:a2:c1:c6:23:7f:a0:
69:36:a5:cb:be:80:17:2d:01:3d:fb:7c:99:a3:3c:8e:5b:08:
57:27:01:27:5d:ad:a1:7c:d9:a7:36:2e:ba:27:32:65:a1:d0:
d8:d0:c6:bb
-----BEGIN CERTIFICATE-----
MIIGOTCCBSGgAwIBAgITAnM6vnBzkPRyyMSUwv1crHznxTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3
Q0E4QTRCMB4XDTI2MDIyODEzNTI1OFoXDTI3MDIyNzEzNTc1OFowMzExMC8GA1UE
AxMoREJBOUY0M0FGMUM1RDZENDE5MEEyMTNCNzE1Q0NDQ0Q4ODcwQjIxNDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANQuXkJACugQFkPnv8BPAVpBAher
EazLNWO9d1bEabf8k5n170Iw7yuZ63M+/YOExmTSLCe/KTz5xYB+zLEv1vtDyYjb
4Vx9ysQqBITyld+LLSN8ItHEjgFPFjid55MuYKnAeXmJ6Ce8TC6CeiRWAfbaKjeX
/ekCkhlv5hbEjkXDwjndxlOCcYkOufkvLsybPXapChH4g/Rn7yiYaOhhrFRJ25b6
pwH+fp9gmSRO5gjuuZ+gbifIkcDMurt2/j4+qeUc1sXEKOuDL1PQNtUhxGMo7yMj
O/3oGe7AkSQK8m3p2VflqAw7cGTRMK+YY9c60AsHKQo6tbyqbZKPoLkbAIsCAwEA
AaOCA0QwggNAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNup9DrxxdbUGQoh
O3FczM2IcLIUMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud
DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy
MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG
CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB
MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy
OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBPgYIKwYBBQUHAQsEggEwMIIBLDBdBggr
BgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby93N1J1
MU5DQ2hUZG9QOTVuakNuZlVaRHc3ZVNpbXYzNFZ6eFoxUm9BYnlNLzAvMIGJBggr
BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby93N1J1
MU5DQ2hUZG9QOTVuakNuZlVaRHc3ZVNpbXYzNFZ6eFoxUm9BYnlNLzAvREJBOUY0
M0FGMUM1RDZENDE5MEEyMTNCNzE1Q0NDQ0Q4ODcwQjIxNC5tZnQwPwYIKwYBBQUH
MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0
aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/
BCswKTAYBAIAATASAwQAg/+CAwQAvgl/AwQBydq+MA0EAgACMAcDBQAoBH80MBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQlOTANBgkqhkiG9w0BAQsFAAOCAQEAd9L/
S7KdOepM4wrhFCuVzVNMLI9dAvNT2kxkG/Zofti9krbH3khIhFmdNR77sPSVryto
MkgF6pgenXX/j0ct79R2OTdOULRpZNlCm2CnmrBKR/BiQ+G/PgTs7ZpbdQMNpzo5
ETU6oEoWP1jHXqGbWQ5ljyNS0GjLhqOLJ0SnmEPqgGmKOQ1kha2I2dXKl/psEPPb
UbpbqXiPygkOiJcOqzGfSHjUgdCR8LiVWnQP/bfvwqQqrP354nvVZ2875RzY7Da5
g6YXzUPzlr75YXDWpbaSosHGI3+gaTaly76AFy0BPft8maM8jlsIVycBJ12toXzZ
pzYuuicyZaHQ2NDGuw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:23:49 2026 by rpki-client