Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/62216C11971D25A79D655649CB8436FC80631F08.cer
File:                     62216C11971D25A79D655649CB8436FC80631F08.cer (raw, json)
Hash identifier:          kjA5uoPgzh75Q8vrFtn3kyhA6cAZ0X6iMg8yXJi8pA8=
Subject key identifier:   62:21:6C:11:97:1D:25:A7:9D:65:56:49:CB:84:36:FC:80:63:1F:08
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C7696799AEBE3C078552062932C24636C3D2E8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/62216C11971D25A79D655649CB8436FC80631F08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Mar 2026 12:51:16 +0000
Certificate not after:    Mon 22 Mar 2027 12:56:16 +0000
Subordinate resources:    AS: 264968
                          IP: 170.0.104.0/22
                          IP: 2804:30ac::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:76:96:79:9a:eb:e3:c0:78:55:20:62:93:2c:24:63:6c:3d:2e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 23 12:51:16 2026 GMT
            Not After : Mar 22 12:56:16 2027 GMT
        Subject: CN=62216C11971D25A79D655649CB8436FC80631F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:8f:9d:b0:13:70:d6:fc:e6:7d:a3:df:5b:
                    72:ca:a0:94:d1:01:71:70:8b:33:1c:58:fa:c9:91:
                    be:de:90:b7:c8:ab:8f:ea:76:2f:88:6b:9a:b1:fb:
                    c0:67:5e:12:23:f6:db:0e:62:97:13:91:85:b1:07:
                    e1:3a:09:b3:12:b8:1a:c6:6f:5a:9a:8f:99:fb:37:
                    ec:1a:63:fc:0f:52:ba:ca:dd:4b:4c:75:1b:93:08:
                    0e:02:34:74:9f:3b:5d:26:c1:63:d7:ec:b5:d3:74:
                    92:c4:99:27:d3:35:3b:69:90:3b:e8:43:3b:4d:18:
                    40:bf:6d:7a:10:bf:60:3d:41:42:ae:c5:3d:57:cd:
                    3e:a7:09:28:0a:e1:3d:57:b1:6b:5c:5c:51:f9:cb:
                    e4:51:d1:4f:2e:f2:c6:92:b4:56:36:c1:86:77:c4:
                    71:88:dd:a2:be:60:50:6b:40:52:ef:68:34:8a:1c:
                    54:4d:c9:2c:9a:88:cd:58:99:c7:56:d2:f4:f7:e3:
                    72:8c:21:c0:47:46:a8:5b:2c:4e:4b:56:ce:c5:fb:
                    d1:c8:8b:5d:64:d6:f0:9f:fb:4a:9c:dc:76:62:f5:
                    f1:5b:d5:bb:77:13:2f:27:59:8e:52:51:9d:ad:0d:
                    ae:9b:68:4e:38:24:51:ef:07:c4:45:29:d8:d8:b7:
                    eb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:21:6C:11:97:1D:25:A7:9D:65:56:49:CB:84:36:FC:80:63:1F:08
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/62216C11971D25A79D655649CB8436FC80631F08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.104.0/22
                IPv6:
                  2804:30ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264968

    Signature Algorithm: sha256WithRSAEncryption
         b0:10:fb:52:7c:a1:0e:24:f5:09:83:dc:9d:04:ea:f1:ae:33:
         21:07:47:81:2b:9c:08:b2:32:4b:ee:bd:fe:a8:6c:89:72:a8:
         c2:e6:74:6d:e4:f4:4e:af:f1:74:26:29:86:94:d7:bb:a8:a0:
         03:34:59:f8:b6:5b:95:50:74:53:3e:0e:b8:9f:eb:6e:b4:3c:
         29:76:23:f6:7e:7d:00:82:a7:07:17:b3:67:49:84:c3:bf:0a:
         41:ca:6d:f7:21:0f:e7:12:8f:b9:72:4b:b6:e4:76:fa:91:59:
         b7:9e:27:67:3e:5d:5c:e7:5a:b1:54:d5:04:33:93:f6:74:b2:
         4d:0a:c3:08:0b:1e:df:88:2f:6c:42:ca:78:da:77:c0:97:23:
         12:16:ff:13:2d:72:3e:65:d7:42:a9:28:c5:42:ff:c2:9e:54:
         60:e3:a1:13:17:51:fd:e6:0a:b3:64:bf:5c:b3:4a:03:6d:15:
         30:f3:be:b0:99:26:72:aa:bf:b0:4b:3b:47:86:d8:68:fe:3b:
         27:33:d9:1f:b7:0e:c2:a6:7c:df:df:a4:45:30:27:eb:0c:00:
         9f:64:4d:83:e5:21:ad:7c:47:09:f7:fc:5d:42:33:ed:df:44:
         ee:94:1e:e3:cb:7a:72:c7:a3:1c:30:8f:e0:c1:08:01:f4:76:
         29:e6:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:34 2026 by rpki-client