Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/712D040138EF2BA2C1BC78BD35E8B28644359A83.cer
File:                     712D040138EF2BA2C1BC78BD35E8B28644359A83.cer (raw, json)
Hash identifier:          UDqndY/qchS7CxGihRtuT1NcAeCkXRpp0DAZQx0Jras=
Subject key identifier:   71:2D:04:01:38:EF:2B:A2:C1:BC:78:BD:35:E8:B2:86:44:35:9A:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       023A0D0CBEAA1FE91B1019A323EDD570B9ED23DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/zhqWtjo7T9ZsckqtJfTp2P3aMgfeAq5sf4mG26qJ898/0/712D040138EF2BA2C1BC78BD35E8B28644359A83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/zhqWtjo7T9ZsckqtJfTp2P3aMgfeAq5sf4mG26qJ898/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Oct 2026 17:45:43 +0000
Certificate not after:    Thu 30 Sep 2027 17:50:43 +0000
Subordinate resources:    AS: 28137
                          IP: 187.45.160.0/20
                          IP: 2804:458::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 14:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3a:0d:0c:be:aa:1f:e9:1b:10:19:a3:23:ed:d5:70:b9:ed:23:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  1 17:45:43 2026 GMT
            Not After : Sep 30 17:50:43 2027 GMT
        Subject: CN=712D040138EF2BA2C1BC78BD35E8B28644359A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:81:6d:17:f3:07:5f:49:48:4a:47:11:85:
                    29:e9:2f:dd:f7:a9:00:13:fe:72:27:e6:ec:64:11:
                    8b:b5:99:aa:a7:55:52:d1:91:71:e9:27:a5:a9:cf:
                    25:85:22:38:5a:ad:02:d6:91:1e:1c:05:20:9c:e6:
                    b6:61:13:18:5d:99:69:0d:8b:28:61:87:ab:f2:d9:
                    2c:d8:89:e9:b2:73:46:67:76:df:87:3c:58:89:db:
                    45:12:7f:d0:7c:a1:fd:56:e0:4c:45:27:8c:fa:fd:
                    e3:8b:02:8c:27:e5:0e:d4:a7:af:be:0e:e8:94:e0:
                    b5:96:ee:ba:c4:ab:b4:97:4f:9a:a3:de:32:d5:7f:
                    b0:89:fd:e1:e9:7c:e7:14:00:e4:25:49:b6:e0:80:
                    f3:47:3d:19:18:ec:b2:c5:e1:aa:7b:6a:19:f6:4c:
                    b6:2e:7c:81:4d:68:9d:02:75:9a:7d:e6:c9:85:3c:
                    12:6d:33:5b:ba:a7:13:79:f1:19:cc:22:58:0e:95:
                    13:b7:58:17:44:a7:19:a9:da:bb:da:b3:50:1f:67:
                    00:20:04:ab:69:0d:55:e6:d2:da:bc:83:d6:ee:ac:
                    c8:4e:f1:3a:ad:6f:b2:90:0b:1f:1f:d4:38:9f:13:
                    ea:ff:d6:f1:7c:04:8f:f3:47:16:eb:1e:ba:cd:a0:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:2D:04:01:38:EF:2B:A2:C1:BC:78:BD:35:E8:B2:86:44:35:9A:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/zhqWtjo7T9ZsckqtJfTp2P3aMgfeAq5sf4mG26qJ898/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/zhqWtjo7T9ZsckqtJfTp2P3aMgfeAq5sf4mG26qJ898/0/712D040138EF2BA2C1BC78BD35E8B28644359A83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.160.0/20
                IPv6:
                  2804:458::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28137

    Signature Algorithm: sha256WithRSAEncryption
         ae:e1:fd:0a:c1:1f:1c:6f:ce:68:90:50:e7:0e:73:9a:71:ff:
         c0:13:de:03:db:f7:75:d1:94:e8:6b:ba:c7:50:86:fb:13:3d:
         a8:6e:4c:39:f2:72:6a:92:ea:c7:06:63:5e:4b:ea:dc:03:05:
         bd:9e:63:4e:e5:b2:f7:d7:df:d7:c2:e1:36:9c:fa:44:65:fc:
         44:70:00:8d:2b:3f:ee:0e:77:9d:f5:51:bb:f0:b5:33:21:64:
         02:1c:51:79:b2:49:d7:d8:e1:6c:29:fe:01:d7:51:fe:6a:73:
         ea:59:00:b0:3c:b5:89:ea:c9:4c:ff:ea:ea:93:c7:c7:b1:86:
         77:09:45:9c:ea:1c:f1:ea:ff:cd:49:a8:4a:3e:72:d5:b0:dd:
         28:ab:b4:72:9a:65:7c:31:38:e6:69:e6:28:3c:c8:e4:79:12:
         6a:97:13:97:3d:67:6c:04:c0:a3:09:c4:2d:4e:9d:b7:02:36:
         6e:8b:d1:79:0b:8c:5f:42:4f:fd:41:79:92:8e:99:1d:c8:09:
         24:59:38:4e:0f:46:b0:d8:93:b1:3a:17:93:34:33:e6:a8:2b:
         be:13:3f:50:f1:86:55:2c:16:54:bc:b6:0f:68:bd:c2:45:7b:
         2d:2e:14:dc:53:a5:65:be:5c:63:25:8b:5f:df:33:3f:14:05:
         b5:8a:b6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:14:21 2026 by rpki-client