
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer
File: FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer (raw, json)
Hash identifier: t4KiDw5JhaG7qDVwdJAXIuC4gsi7mTr+acfQG4o0UHE=
Subject key identifier: FF:9A:6A:49:4A:C8:BD:42:AC:BA:6F:13:A8:42:AB:B2:E5:B5:C0:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 10F2725E8177B73DF96D9B549259717E23BB656C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft
caRepository: rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 24 Feb 2026 17:30:00 +0000
Certificate not after: Tue 23 Feb 2027 17:35:00 +0000
Subordinate resources: AS: 271185
IP: 190.5.208.0/22
IP: 2804:778c::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 21:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f2:72:5e:81:77:b7:3d:f9:6d:9b:54:92:59:71:7e:23:bb:65:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 24 17:30:00 2026 GMT
Not After : Feb 23 17:35:00 2027 GMT
Subject: CN=FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:33:ff:f3:58:1d:6d:7a:b5:5a:7a:27:a5:
43:59:2e:cc:0f:be:dc:54:87:12:96:88:52:00:15:
af:82:72:66:2b:ad:3b:28:f9:9d:34:0b:ff:e9:22:
07:38:63:9b:93:06:7b:88:66:d8:5a:8f:89:be:9a:
b8:9f:9e:e7:e4:f9:b0:ff:f9:48:03:e6:08:0f:05:
e6:8b:0c:8d:8b:35:69:62:1c:b7:71:0d:d8:6d:e4:
00:5d:5e:c0:19:ce:f2:30:16:24:c6:12:28:a2:51:
3d:1a:f5:77:e1:13:c4:bb:6f:0e:f8:b6:55:47:88:
d9:a0:75:e5:af:82:b4:46:fb:54:6c:19:e9:49:c9:
8f:f4:c5:e0:d7:14:81:d0:b4:a6:77:de:69:7d:e6:
d3:3f:c1:61:51:16:a7:af:47:d3:13:fc:38:66:68:
df:7f:7a:a5:3f:e9:b6:fe:2f:a4:d0:4c:38:4a:13:
6d:0c:53:4a:30:57:bf:3c:7a:5f:a8:c0:9b:3a:f5:
39:56:3b:4d:02:98:30:71:4f:9f:72:d1:62:1d:ad:
45:f6:f6:af:24:19:68:75:37:76:5d:41:81:da:16:
93:15:6e:28:d1:52:a9:c5:e6:5b:6f:ba:91:63:1e:
07:78:7c:3d:6a:4c:bd:13:de:dd:5c:17:40:d8:b4:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FF:9A:6A:49:4A:C8:BD:42:AC:BA:6F:13:A8:42:AB:B2:E5:B5:C0:71
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.5.208.0/22
IPv6:
2804:778c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271185
Signature Algorithm: sha256WithRSAEncryption
77:eb:5e:3f:1e:ac:d6:e8:8b:7b:97:c9:9c:d4:94:01:fa:8b:
25:86:e4:12:e7:a2:2a:a8:f4:a8:82:c3:a5:98:06:c6:52:ac:
6b:11:c4:6d:87:08:ec:e8:2b:8f:00:94:38:75:ad:1f:0b:6c:
43:94:17:ec:86:00:b1:97:2b:6c:36:0a:89:e5:64:03:70:9f:
f3:16:95:e4:02:00:17:eb:10:5a:4f:44:28:ba:db:f9:eb:4e:
7c:94:a6:51:4d:b0:58:f6:87:b1:44:f9:99:fd:87:04:84:73:
3f:f7:01:93:1f:c0:e7:8e:c0:c5:53:b8:7c:ae:9d:98:29:23:
4e:9d:8c:2f:42:57:d2:72:eb:69:e8:58:e8:ed:66:14:50:58:
3a:7f:e0:30:a8:b4:7c:48:f2:ab:fd:c6:be:7f:cf:32:66:06:
03:cd:80:6c:2a:87:e3:9d:32:df:ec:cb:d1:9e:30:b4:ea:eb:
37:42:c8:36:c3:9d:a9:8c:fa:10:93:ae:e5:0f:45:f2:e6:cb:
ea:b4:8c:b0:cf:d7:a2:d2:a5:97:ac:32:57:ad:ee:55:bb:cc:
1c:84:29:13:1d:e9:76:6d:15:2e:76:e7:e8:01:27:df:29:3d:
23:a1:c3:0b:64:49:ea:c3:86:ee:ba:74:64:bd:33:3b:1f:c6:
8c:6d:bf:98
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUEPJyXoF3tz35bZtUkllxfiO7ZWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAyMjQxNzMwMDBaFw0yNzAyMjMxNzM1MDBaMDMxMTAvBgNV
BAMTKEZGOUE2QTQ5NEFDOEJENDJBQ0JBNkYxM0E4NDJBQkIyRTVCNUMwNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyzP/81gdbXq1WnonpUNZLswP
vtxUhxKWiFIAFa+CcmYrrTso+Z00C//pIgc4Y5uTBnuIZthaj4m+mrifnufk+bD/
+UgD5ggPBeaLDI2LNWliHLdxDdht5ABdXsAZzvIwFiTGEiiiUT0a9XfhE8S7bw74
tlVHiNmgdeWvgrRG+1RsGelJyY/0xeDXFIHQtKZ33ml95tM/wWFRFqevR9MT/Dhm
aN9/eqU/6bb+L6TQTDhKE20MU0owV788el+owJs69TlWO00CmDBxT59y0WIdrUX2
9q8kGWh1N3ZdQYHaFpMVbijRUqnF5ltvupFjHgd4fD1qTL0T3t1cF0DYtC6pAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/mmpJSsi9Qqy6
bxOoQquy5bXAcTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRllG
UDJHcGZjQUNUS3JuS2ljOEFBdG42bnFzNUpyQ1BLTlpkSFJ5OUdxSzEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZZ
RlAyR3BmY0FDVEtybktpYzhBQXRuNm5xczVKckNQS05aZEhSeTlHcUsxLzAvRkY5
QTZBNDk0QUM4QkQ0MkFDQkE2RjEzQTg0MkFCQjJFNUI1QzA3MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvgXQMA0EAgACMAcDBQAoBHeMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjUTANBgkqhkiG9w0BAQsFAAOCAQEAd+tePx6s1uiLe5fJ
nNSUAfqLJYbkEueiKqj0qILDpZgGxlKsaxHEbYcI7OgrjwCUOHWtHwtsQ5QX7IYA
sZcrbDYKieVkA3Cf8xaV5AIAF+sQWk9EKLrb+etOfJSmUU2wWPaHsUT5mf2HBIRz
P/cBkx/A547AxVO4fK6dmCkjTp2ML0JX0nLraehY6O1mFFBYOn/gMKi0fEjyq/3G
vn/PMmYGA82AbCqH450y3+zL0Z4wtOrrN0LINsOdqYz6EJOu5Q9F8ubL6rSMsM/X
otKll6wyV63uVbvMHIQpEx3pdm0VLnbn6AEn3yk9I6HDC2RJ6sOG7rp0ZL0zOx/G
jG2/mA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:58:11 2026 by rpki-client