
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
File: EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer (raw, json)
Hash identifier: 19FjCnwzBIq5mpe4wCPL93evYJ2es3IHTJIu3/NrGS8=
Subject key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 32D76D401127054E03AF2B967144B329C5B2DAAE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
caRepository: rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 14 Oct 2026 19:08:01 +0000
Certificate not after: Wed 13 Oct 2027 19:13:01 +0000
Subordinate resources: AS: 266635
IP: 128.201.156.0/22
IP: 2804:3f08::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 10:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d7:6d:40:11:27:05:4e:03:af:2b:96:71:44:b3:29:c5:b2:da:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 14 19:08:01 2026 GMT
Not After : Oct 13 19:13:01 2027 GMT
Subject: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:53:cc:93:6b:2a:6f:43:03:82:d4:8d:90:
aa:07:bf:94:f5:15:12:3f:68:fe:80:00:10:2d:7a:
7b:11:1d:55:ab:32:4a:05:61:d0:6f:5f:59:b3:67:
97:01:35:8a:d1:e7:e8:ed:13:7a:4f:3c:6b:27:b2:
a4:e9:62:fe:c9:a3:62:79:fe:4a:81:06:5d:f7:7b:
e6:31:d5:52:e1:70:11:a7:5a:7a:cf:59:57:25:ff:
d8:b7:8e:e7:da:e9:c5:ab:bf:68:f1:65:80:5b:e0:
cb:ca:50:c9:18:33:15:76:aa:f2:64:cd:f2:cd:bd:
46:a7:f1:84:1f:1c:b2:11:48:c1:15:6f:b6:6b:79:
0b:00:07:01:18:31:76:77:43:8b:01:4c:b9:5f:d5:
49:de:69:f3:61:f5:53:81:c7:21:84:ef:87:11:96:
b5:0e:75:ad:27:c4:81:55:2c:cc:54:35:e8:1d:3b:
51:2b:36:d0:d2:10:92:78:02:89:af:72:e9:db:ef:
0c:4b:74:e6:59:e4:b5:4b:f3:af:56:85:0b:ab:2c:
fc:f2:95:bb:25:37:c8:09:17:b2:c2:68:bc:ee:c5:
dc:7f:a5:8b:ec:48:8d:96:4c:aa:bf:22:ed:24:e6:
25:3a:f4:99:0e:6d:14:f8:d9:d5:e6:52:ea:fb:8d:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.156.0/22
IPv6:
2804:3f08::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266635
Signature Algorithm: sha256WithRSAEncryption
cb:0f:19:7b:cd:47:c8:e5:da:6a:b4:88:a1:c9:ac:b4:28:6c:
66:87:c8:b7:df:0c:8e:fc:93:1f:3e:bb:66:f7:8f:9d:01:d2:
83:9c:47:90:d6:a8:c4:8e:e5:08:86:61:3d:a4:c4:d5:f1:17:
a4:18:34:84:e3:ac:92:bf:cc:d2:53:64:9f:66:88:f6:ca:d0:
c2:21:1a:b9:a8:53:a6:50:2a:4b:d5:37:a7:a3:8c:8c:e0:64:
bd:7d:b8:5f:30:ca:df:ee:4d:d1:ae:40:71:d2:78:d9:5e:4b:
cf:e1:02:ab:b5:c1:26:1c:36:16:63:8b:d6:bf:25:2d:95:a4:
7d:09:15:d1:49:63:fc:e8:e3:bd:06:bd:57:26:6c:3c:9d:a5:
bc:79:9e:76:7c:d5:5d:4d:a4:2d:ed:8a:a6:ba:b4:50:f7:2d:
31:4b:f0:51:93:1d:57:2b:63:1c:f0:a1:39:e0:e1:bf:15:fb:
a3:4e:c4:2d:8f:06:75:9b:60:23:c0:b7:60:73:bd:d6:bf:d3:
04:52:88:99:3d:77:68:97:da:fc:1f:62:08:ed:26:00:b3:a5:
e4:19:bf:50:37:7d:4f:07:d9:59:ef:fa:80:9d:8e:1a:76:a1:
8a:7f:4e:c3:f3:43:eb:34:ac:82:bb:30:d4:d6:af:f0:76:7c:
21:85:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:50:42 2026 by rpki-client