
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
File: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer (raw, json)
Hash identifier: l2qqglh34JdoaBOITb51l5jRl2sFfbf5nySg/Bi5yeo=
Subject key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1A194D499AA765A9406C523EF8D2B57F4205879E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
caRepository: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 13 Jun 2026 17:35:35 +0000
Certificate not after: Sat 12 Jun 2027 17:40:35 +0000
Subordinate resources: AS: 273404
IP: 2804:8e20::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 15 Jun 2026 01:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:19:4d:49:9a:a7:65:a9:40:6c:52:3e:f8:d2:b5:7f:42:05:87:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 13 17:35:35 2026 GMT
Not After : Jun 12 17:40:35 2027 GMT
Subject: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:53:b7:30:18:89:bc:39:f6:44:e4:b6:2a:
42:db:1e:c2:37:c0:8e:70:b4:68:33:4c:7b:3e:db:
7c:8d:c1:05:0d:5d:c4:ff:a6:df:2b:7a:3d:0c:1a:
10:9d:43:bc:93:e6:cc:87:f9:81:ff:9d:b1:b0:61:
e2:33:47:44:37:85:e6:8e:e5:57:2e:d2:40:53:9d:
de:19:4c:2b:93:61:d9:0c:96:82:16:61:71:8f:04:
2d:09:32:c0:0d:03:d1:b4:9d:eb:ba:67:a4:41:fc:
7e:2e:e5:bf:3c:94:7f:fe:c1:52:3e:21:fb:79:ff:
91:aa:a6:fb:21:5b:d0:84:5b:6a:d3:95:b0:2c:41:
38:1c:45:b1:36:bf:6e:57:dc:7a:a7:00:6f:42:30:
9f:58:fa:e2:05:88:7b:95:a1:58:19:25:85:0e:ae:
68:27:70:e5:2a:b5:f9:a0:31:29:aa:63:2f:34:59:
4a:31:a5:34:bd:ff:b2:bf:84:32:ca:a9:d7:42:4d:
48:f6:ac:87:39:b5:d5:37:4f:30:e8:f0:a7:24:f1:
cc:da:eb:40:01:e2:a1:85:6d:fa:6c:97:1e:3a:09:
85:f2:f9:c7:1a:21:3d:ed:1b:33:2c:63:66:55:df:
cb:f0:6f:a2:35:d8:ae:70:76:ad:be:e8:fc:7d:b7:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8e20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273404
Signature Algorithm: sha256WithRSAEncryption
74:8a:cd:18:d9:40:ce:23:14:36:77:84:02:f7:be:bf:79:c8:
21:98:ba:a5:c7:51:45:75:b6:18:7b:4b:75:65:55:b5:d7:d0:
c4:12:78:b7:78:b0:f9:94:94:f5:17:b2:a2:66:b6:34:09:e6:
c4:76:a5:0d:5e:c9:18:77:1a:75:ca:2b:8e:f5:8e:3a:60:e3:
8a:2e:c1:f4:1b:fc:aa:16:61:d7:cc:9c:b1:73:e4:ee:82:be:
a9:13:ab:e1:b9:6d:40:0e:70:ca:f3:c6:ae:3e:be:04:79:30:
14:f2:ae:96:32:79:7c:2a:49:c3:6c:49:64:8e:89:eb:62:03:
11:8b:7d:91:97:88:20:90:ff:69:13:09:da:5f:72:82:16:53:
2e:db:f2:5c:e7:8a:ac:4b:17:1e:7e:ef:42:18:f0:f9:22:2f:
1e:ba:65:06:06:a5:ab:21:00:0a:93:2e:88:d6:9d:e9:56:3d:
c6:a8:6f:63:59:3b:2b:fb:94:c4:30:2b:fb:a4:fc:20:8c:f8:
49:d2:c4:2e:f1:9a:1b:d0:63:b8:ac:bb:f3:30:9c:18:67:e1:
d5:51:42:ff:cb:0c:58:b4:fc:44:99:de:c8:96:24:10:1d:f3:
27:b5:d5:61:1e:49:f9:7f:05:b2:c1:28:cc:5c:26:95:c4:6a:
3e:55:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:44:28 2026 by rpki-client