Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer
File:                     8DCB7831617AC9209CC97DB36614C6B05759A03B.cer (raw, json)
Hash identifier:          4JfQ2DcU9JqRB2sTie/nh0GMIsMhqEJb7p1XL22ilnA=
Subject key identifier:   8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5E5B317760D30107DE3D46402C199B9893915E71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 May 2026 08:26:17 +0000
Certificate not after:    Tue 11 May 2027 08:31:17 +0000
Subordinate resources:    AS: 28139
                          IP: 186.235.176.0/21
                          IP: 187.49.16.0/20
                          IP: 2804:994::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5b:31:77:60:d3:01:07:de:3d:46:40:2c:19:9b:98:93:91:5e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 12 08:26:17 2026 GMT
            Not After : May 11 08:31:17 2027 GMT
        Subject: CN=8DCB7831617AC9209CC97DB36614C6B05759A03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:20:de:7c:4b:ea:42:57:cd:61:cd:f8:fd:
                    9c:d9:f1:37:66:29:64:fe:63:82:75:5f:13:e6:75:
                    5e:50:40:b3:d0:72:e7:bf:97:ff:50:9d:97:9d:b8:
                    2b:da:97:ea:f5:45:d5:fd:58:a9:34:74:18:14:7d:
                    95:c2:fb:ed:ef:4f:da:00:6a:1f:cd:ee:e2:e1:ba:
                    ed:80:b5:d1:3e:c9:47:7e:82:fd:95:e6:27:ec:54:
                    23:2b:ca:9b:47:fa:1f:f0:17:51:15:da:d7:75:7b:
                    92:cb:9b:52:74:d2:21:f8:22:44:ff:9c:75:60:0d:
                    68:11:d7:d4:39:0d:f8:5b:3e:18:d2:a4:30:25:09:
                    37:f7:e2:fd:3d:29:96:93:03:a0:e7:1f:b9:04:84:
                    3a:03:e7:93:1a:ee:ad:db:dd:87:e2:2d:3c:d0:b1:
                    22:9c:bc:b7:57:ae:d4:58:e4:ba:90:8e:74:f6:23:
                    d8:57:d0:1d:f4:65:1b:d0:45:61:71:d0:f4:51:06:
                    6c:db:e7:e7:b4:ee:5d:03:a3:58:27:df:2d:72:2c:
                    7b:42:50:0b:79:44:bf:07:61:b3:d2:d6:7f:99:57:
                    c8:8f:e5:9b:c0:3b:a1:d0:e3:f0:9c:1b:25:11:7f:
                    58:4d:5d:cd:01:b7:47:3b:9e:c7:c6:fc:b5:d6:a0:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.176.0/21
                  187.49.16.0/20
                IPv6:
                  2804:994::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28139

    Signature Algorithm: sha256WithRSAEncryption
         64:c4:a6:0b:1c:02:2d:58:1d:fe:e8:47:86:60:af:e7:49:bd:
         c7:20:1c:f2:b1:ea:8e:0a:c6:8b:59:04:f9:fc:a5:af:ca:ba:
         7a:ff:25:c0:ce:c2:46:90:99:b1:97:22:06:e1:31:fd:29:d2:
         db:a5:a5:9b:57:b0:15:bf:a1:b2:b9:0e:6b:dd:ac:3c:28:78:
         84:2f:22:01:37:f1:0e:7b:95:b9:bc:40:82:f3:85:ff:2b:19:
         e2:6b:10:fc:38:96:55:17:6c:0c:10:55:3a:e9:bf:c2:62:be:
         e7:bd:5f:b3:97:08:c4:8e:ec:51:cc:75:29:20:67:ec:3c:2f:
         8c:a5:a3:c6:77:c7:fc:33:75:a3:03:b7:df:0c:51:a8:b5:21:
         23:2f:1c:09:17:d3:90:4f:1e:ba:2d:c6:86:85:9d:09:16:b9:
         5f:5e:47:26:48:c9:da:39:6f:5c:78:ed:a4:64:78:66:6f:d0:
         01:3e:b1:64:37:9f:7f:7e:97:25:bd:cf:3d:e9:b0:5e:60:f3:
         c9:18:f0:2c:ce:e2:75:cc:42:60:c0:5e:3b:3e:ab:4d:8d:66:
         de:af:de:a1:7d:c4:67:1b:86:52:09:58:c2:8f:e2:fa:a2:9f:
         6f:50:a8:7a:74:3c:b6:a6:d7:43:86:c4:79:11:00:e2:c1:01:
         72:c4:6e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:55 2026 by rpki-client