Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6D96C282C35B12901D999723E12BD1E5FDD51D7C.cer
File:                     6D96C282C35B12901D999723E12BD1E5FDD51D7C.cer (raw, json)
Hash identifier:          ZKm9s0fyr5mPTCZeleMxRCXsnTIlSDS9XIumCi1x4aA=
Subject key identifier:   6D:96:C2:82:C3:5B:12:90:1D:99:97:23:E1:2B:D1:E5:FD:D5:1D:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1C969A879C623D0B26385B2EF01D3217918F2728
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/6D96C282C35B12901D999723E12BD1E5FDD51D7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Mar 2026 15:13:16 +0000
Certificate not after:    Wed 24 Mar 2027 15:18:16 +0000
Subordinate resources:    AS: 267618
                          IP: 45.71.88.0/22
                          IP: 2804:440c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:96:9a:87:9c:62:3d:0b:26:38:5b:2e:f0:1d:32:17:91:8f:27:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 15:13:16 2026 GMT
            Not After : Mar 24 15:18:16 2027 GMT
        Subject: CN=6D96C282C35B12901D999723E12BD1E5FDD51D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:23:03:17:58:8e:c3:25:35:01:94:98:93:
                    a8:8b:b5:64:17:c1:05:93:9d:97:92:de:d6:c0:2f:
                    05:50:f8:b4:f3:27:28:a5:11:ee:f2:bc:80:eb:c2:
                    5a:61:9d:0c:2a:3b:5c:bf:1d:be:86:f9:f3:67:9d:
                    73:6c:af:9f:8a:24:57:56:fc:76:29:e8:aa:2d:b0:
                    99:a0:7f:1b:79:19:1f:4e:27:c9:e3:3f:e9:b1:4a:
                    2e:c7:32:15:4b:bf:1b:fe:66:ea:43:35:32:df:a4:
                    e1:33:37:fa:61:c5:19:80:71:02:31:52:ba:5e:95:
                    a8:a5:0d:d5:9f:02:83:4f:35:c2:18:4a:6e:c1:09:
                    4a:40:a3:1e:d6:c9:32:42:d8:cb:e8:8c:4e:c5:5d:
                    61:7a:86:52:66:9e:04:ae:4c:d8:ee:33:51:74:9e:
                    22:6f:f5:fb:64:bd:29:f7:0d:6e:c8:62:ae:8f:ed:
                    79:98:46:95:22:7b:84:b6:c3:51:fc:de:3f:b4:38:
                    63:a8:8f:3e:f7:96:67:38:33:72:25:ba:31:a4:42:
                    20:6b:43:06:ee:fb:1e:ef:2b:c7:9b:26:25:66:ef:
                    43:ca:48:fb:d4:95:66:e8:b5:7a:71:d9:7a:cd:9d:
                    01:15:2f:6f:b6:7b:13:fd:18:f9:58:6c:5a:9b:c8:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:96:C2:82:C3:5B:12:90:1D:99:97:23:E1:2B:D1:E5:FD:D5:1D:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/6D96C282C35B12901D999723E12BD1E5FDD51D7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.88.0/22
                IPv6:
                  2804:440c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267618

    Signature Algorithm: sha256WithRSAEncryption
         c1:2e:8f:d2:6e:ff:85:ec:0e:50:f1:0a:31:cf:e8:36:66:91:
         76:a1:de:b0:3c:9b:28:50:67:06:d5:ef:6b:09:e0:91:5c:19:
         0a:48:7d:cb:10:e6:8c:d3:31:f8:ad:3b:ea:1b:ff:e5:08:78:
         2f:8c:9b:53:ae:8f:36:f5:bf:e4:1b:7d:01:73:d6:52:00:6d:
         19:00:cb:28:0f:31:c0:64:9b:8f:94:2f:79:8b:05:4f:28:95:
         66:7e:c7:19:79:48:d7:49:75:0e:65:a7:eb:fd:40:10:c2:25:
         f5:30:e3:f6:89:2b:7d:e9:7e:28:37:14:09:18:23:dc:50:b3:
         b6:b5:10:ad:77:b8:a7:85:4d:45:0c:02:68:5d:1b:d9:29:ff:
         b1:db:54:16:87:0d:77:5c:fc:50:86:54:fc:f5:50:10:c1:27:
         09:ec:53:19:e8:c6:fd:a6:09:8e:41:fd:12:36:a7:0e:bf:d0:
         72:df:8c:c7:e0:2a:3c:20:26:20:ae:62:aa:28:c0:01:56:3d:
         1d:fe:80:91:ac:bc:94:89:2f:ea:cc:46:3d:f9:36:b5:b5:c6:
         29:0c:49:cc:83:40:f2:02:e5:6a:39:7e:c7:bd:68:a8:58:63:
         a3:9e:1c:db:c6:d7:9d:b0:96:6c:c8:01:50:dd:a9:ac:20:cc:
         7a:b7:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:29:56 2026 by rpki-client