Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/90E00F2DE1A5C8C9E13E2B3B392635423D1F68FC.cer
File:                     90E00F2DE1A5C8C9E13E2B3B392635423D1F68FC.cer (raw, json)
Hash identifier:          UMQ/+84/uwdEdWxzIEvYXieXNbIr6rwUZbICuCEuUGE=
Subject key identifier:   90:E0:0F:2D:E1:A5:C8:C9:E1:3E:2B:3B:39:26:35:42:3D:1F:68:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       359C73DB9FDF049F3B905F70C4389A22CA6AEE3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/90E00F2DE1A5C8C9E13E2B3B392635423D1F68FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Mar 2026 10:16:40 +0000
Certificate not after:    Mon 22 Mar 2027 10:21:40 +0000
Subordinate resources:    AS: 263567
                          IP: 179.109.32.0/20
                          IP: 2804:f24::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9c:73:db:9f:df:04:9f:3b:90:5f:70:c4:38:9a:22:ca:6a:ee:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 23 10:16:40 2026 GMT
            Not After : Mar 22 10:21:40 2027 GMT
        Subject: CN=90E00F2DE1A5C8C9E13E2B3B392635423D1F68FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:b6:7b:40:50:8a:bf:63:a6:57:ab:b9:4b:
                    17:c7:50:27:3a:32:de:55:87:fe:48:14:f4:a1:38:
                    80:13:ef:0f:82:d6:91:7b:26:6a:82:a6:b4:53:92:
                    d6:97:19:55:03:e9:84:72:81:4d:87:68:29:7b:9c:
                    fc:1c:9b:11:df:d5:37:2a:fd:e8:7f:56:41:7f:6d:
                    30:b0:ee:b1:c7:a0:7c:d3:c2:dc:aa:a4:b0:35:d3:
                    bf:dc:05:bd:c3:e8:9e:df:a7:3b:af:6a:09:b9:1f:
                    2e:ae:c6:fa:de:41:03:dc:ee:24:3a:b5:00:fd:ae:
                    ad:aa:03:92:79:26:ee:51:5d:37:91:d9:f0:fd:f4:
                    8d:05:c1:01:a1:ce:45:35:66:4d:05:70:ce:49:83:
                    f7:7c:10:9d:ff:48:54:5e:d0:02:14:7a:1a:2c:08:
                    11:65:17:27:68:93:99:0c:14:91:33:91:ae:c3:bb:
                    61:45:ac:81:01:75:64:8e:9e:27:a9:88:3c:da:ec:
                    c6:5b:bc:d4:38:38:b1:63:ef:0d:ce:ea:42:80:02:
                    0a:f4:3e:f0:61:f2:98:20:d1:bd:75:20:3d:d1:46:
                    99:fa:b9:32:08:ba:85:62:1d:65:04:c9:49:e0:c2:
                    69:94:2b:e1:85:cf:d7:04:21:35:3b:f1:38:7c:04:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:E0:0F:2D:E1:A5:C8:C9:E1:3E:2B:3B:39:26:35:42:3D:1F:68:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/90E00F2DE1A5C8C9E13E2B3B392635423D1F68FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.32.0/20
                IPv6:
                  2804:f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263567

    Signature Algorithm: sha256WithRSAEncryption
         3a:f4:16:41:40:06:a1:a0:b3:c9:04:b3:06:77:3a:90:bc:76:
         01:12:ff:d0:9c:9e:12:7c:81:8b:18:7b:47:c3:42:5d:c4:32:
         ac:aa:5c:5a:91:4c:9f:f5:53:c5:bf:d5:5e:32:50:ee:2c:2b:
         64:d0:2d:8c:80:0c:8b:30:79:df:ce:97:97:fd:74:39:93:9f:
         c5:fe:94:f9:56:bf:76:7f:ff:cd:9a:8d:d0:b2:f5:0b:29:a2:
         bd:c9:71:e8:86:3e:65:52:12:28:39:5f:4a:1c:5f:4f:f7:63:
         1f:c9:93:73:d8:87:9b:9f:ff:65:a7:74:5c:53:31:30:52:4a:
         dd:a6:fc:d7:8a:53:69:9e:6f:61:1e:ef:33:d9:45:f7:5e:71:
         30:b0:f4:ac:d5:04:46:f5:f1:57:0d:2b:0b:30:ce:9b:f3:8f:
         eb:22:37:fe:2d:89:02:55:d4:d9:35:17:f7:29:23:72:41:a7:
         af:df:e6:cc:28:17:b8:47:57:bc:14:ce:b8:d7:3f:f0:1d:b0:
         f0:d1:49:b5:82:c5:df:a2:43:6e:3d:98:90:eb:97:5d:21:0c:
         f8:d2:3c:db:3d:0f:43:99:71:e2:56:6d:7e:31:cf:dd:3d:24:
         c6:03:28:bd:66:72:dd:5d:b4:f8:fd:22:38:d3:c7:9c:8e:32:
         78:3b:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:45 2026 by rpki-client