Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89981F30F6E27EB7EA02168C27E449645D5F7290.cer
File:                     89981F30F6E27EB7EA02168C27E449645D5F7290.cer (raw, json)
Hash identifier:          XJ6x29p8psQXt5Dov3T+mvbOh3OMjeAEPhDxQUYlKv0=
Subject key identifier:   89:98:1F:30:F6:E2:7E:B7:EA:02:16:8C:27:E4:49:64:5D:5F:72:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1128F595035CE4825A521FF9E3154289BB034D5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/89981F30F6E27EB7EA02168C27E449645D5F7290.mft
caRepository:             rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Mar 2026 17:41:16 +0000
Certificate not after:    Thu 18 Mar 2027 17:46:16 +0000
Subordinate resources:    AS: 267078
                          IP: 45.228.148.0/22
                          IP: 2804:47d0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:28:f5:95:03:5c:e4:82:5a:52:1f:f9:e3:15:42:89:bb:03:4d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 19 17:41:16 2026 GMT
            Not After : Mar 18 17:46:16 2027 GMT
        Subject: CN=89981F30F6E27EB7EA02168C27E449645D5F7290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:0c:a2:9c:e3:d3:33:4a:1e:68:4a:54:20:
                    e3:03:ad:2d:bf:80:5f:fd:a4:95:73:3f:6a:f6:39:
                    dd:e2:2c:d4:4d:bd:13:45:42:92:b9:8d:87:02:e8:
                    3a:86:1d:5e:b9:da:d1:d8:58:34:bd:75:54:99:41:
                    9a:76:f9:3a:ff:e9:1f:ac:e0:34:2b:c2:f1:f3:b6:
                    bc:13:c3:70:4e:76:63:5d:7d:34:88:24:6d:62:a8:
                    3e:36:6f:25:a8:03:75:5c:1c:a3:51:99:93:d4:3a:
                    2c:5f:bc:ee:0f:6d:77:87:a8:47:72:3d:35:51:31:
                    cf:a7:d2:b7:2c:df:02:ba:b0:a4:33:65:2b:b7:28:
                    f7:ea:39:db:3f:ce:a1:6a:2b:83:47:9d:cc:61:c4:
                    69:21:c5:13:81:4a:f1:fd:ea:23:86:66:bd:6b:b7:
                    17:de:b0:85:33:fa:26:f7:df:8a:dd:33:55:47:57:
                    84:fe:d6:41:49:b1:00:8a:09:4f:28:d8:2e:a9:46:
                    49:e6:69:6d:ff:f9:bc:b8:8c:fa:35:31:b7:d5:ce:
                    79:a2:87:bd:13:99:66:4c:02:54:7f:93:d0:09:81:
                    08:f8:65:94:1b:d0:0c:9d:57:9f:89:fb:0c:82:d1:
                    4c:b3:52:ea:0e:3e:73:b1:16:91:7d:13:c7:4b:a5:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:98:1F:30:F6:E2:7E:B7:EA:02:16:8C:27:E4:49:64:5D:5F:72:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/89981F30F6E27EB7EA02168C27E449645D5F7290.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.148.0/22
                IPv6:
                  2804:47d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267078

    Signature Algorithm: sha256WithRSAEncryption
         cd:46:95:8c:e2:0b:aa:ce:7e:29:cb:ed:89:d4:51:50:50:02:
         da:da:81:0b:dd:9e:9e:95:91:dd:44:e1:20:a0:b5:27:23:6f:
         37:09:51:08:27:9a:b8:7f:65:43:95:53:0d:e9:ef:55:df:b7:
         82:82:ce:c3:68:cb:c1:e9:12:20:69:e8:6d:b0:4c:a3:46:0c:
         69:54:22:15:70:ad:70:7a:af:2d:85:36:02:93:b1:fa:2a:26:
         99:ab:86:13:a4:25:5b:1d:23:3a:63:95:95:9c:ca:1b:35:ba:
         18:97:53:d5:b6:a4:ac:2a:f4:fa:ad:2a:c2:fc:e1:32:7b:84:
         c5:a6:e4:89:09:36:30:75:1e:f5:48:06:b3:91:a3:7f:35:cf:
         94:49:c7:47:c8:5e:31:23:52:34:8c:59:bc:7c:01:f1:ed:f9:
         6a:8f:07:59:f7:f5:8a:98:88:47:d9:30:31:21:82:3b:31:38:
         8b:c3:2c:93:20:ca:37:bc:f8:f4:d4:f8:30:e8:8e:cc:a8:73:
         fe:cd:63:39:09:3b:f6:b8:4f:9c:c4:5e:80:58:ea:32:9f:23:
         c7:b0:2f:b6:a1:08:a5:d6:db:68:ae:4f:b4:ec:74:42:9f:c2:
         2e:4e:51:af:35:6a:9a:4b:75:6a:6d:cc:58:c4:51:4f:53:1e:
         31:2f:cb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:48 2026 by rpki-client