Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer
File:                     96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer (raw, json)
Hash identifier:          T6J6ZBu7oyJeqnuhUs3JmOvIELfGoJRlO0wqy5d+kZg=
Subject key identifier:   96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1AA306390CAE63B6911CC7CC2AC07923E533C006
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Jul 2026 07:05:37 +0000
Certificate not after:    Thu 22 Jul 2027 07:10:37 +0000
Subordinate resources:    AS: 267535
                          IP: 192.141.104.0/22
                          IP: 2804:42e4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a3:06:39:0c:ae:63:b6:91:1c:c7:cc:2a:c0:79:23:e5:33:c0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 07:05:37 2026 GMT
            Not After : Jul 22 07:10:37 2027 GMT
        Subject: CN=96BD1D118248F01A383BC9530F7DDC4CBBB94C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:73:b8:5c:50:05:f4:76:90:3c:9d:fd:02:
                    57:7b:06:f4:84:11:5e:fa:62:22:6c:fc:cd:00:67:
                    66:b7:a4:cb:af:c5:52:d5:db:68:5b:09:4c:2b:ca:
                    3c:08:f0:f9:88:eb:2c:53:4d:60:df:71:c9:a0:8b:
                    b5:2a:5f:7c:38:08:39:54:31:92:ca:a7:8c:fb:8b:
                    7b:7f:a4:cf:2e:c2:e9:3d:b7:78:50:e1:fa:2b:3c:
                    8d:df:47:7f:7f:27:61:a8:1d:ea:c9:4b:a5:4f:85:
                    8c:20:5f:1a:08:7d:63:1a:9d:72:93:d9:b0:16:b0:
                    71:99:66:dd:d8:2b:4c:03:b6:56:5a:0d:aa:76:b3:
                    1d:98:3b:8d:2d:cc:5e:03:3f:7c:87:02:ce:ea:92:
                    8c:a8:3a:d1:0d:57:36:bc:ae:02:6e:ef:31:69:5b:
                    46:34:02:ab:7d:22:9f:94:79:d7:f0:89:6b:41:a6:
                    c3:ff:bd:9e:30:8c:f6:8b:73:55:15:66:fa:d0:72:
                    01:d5:8b:88:0b:c4:11:21:ef:a6:13:5f:92:95:0c:
                    59:c5:9b:83:d7:c2:53:18:72:6b:4f:14:a0:18:a7:
                    02:f0:25:da:bb:ca:76:0e:72:90:b3:6c:e0:da:19:
                    cc:7a:f6:46:d8:36:cf:9f:02:76:4a:a2:89:e1:f8:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.104.0/22
                IPv6:
                  2804:42e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267535

    Signature Algorithm: sha256WithRSAEncryption
         9f:3f:b1:89:65:35:19:27:b1:94:85:51:8b:e1:7a:86:bb:61:
         75:66:1e:14:7d:d7:7a:d2:2e:00:09:80:8d:10:48:83:b8:be:
         2d:43:16:55:73:7f:4f:e1:28:50:dd:a2:c4:3d:68:b1:44:15:
         7b:3f:60:e4:9e:c4:56:c2:63:d9:c5:2d:ab:71:bc:08:e9:22:
         94:13:77:d3:24:da:c6:db:47:75:3e:33:89:64:13:74:41:00:
         a5:b1:de:8f:4f:71:6c:d0:86:34:15:c7:2f:cf:3e:fb:2a:f4:
         ca:a2:91:c0:a2:f3:59:63:86:a5:a4:e6:4f:a1:f3:fe:86:ac:
         d9:48:75:80:91:f4:82:fb:fe:0a:4e:35:bf:d8:c8:47:cb:9e:
         ce:d5:28:96:84:17:78:e2:52:30:77:6c:46:b7:0c:12:8e:b2:
         79:9c:d9:ac:59:6a:cd:95:4d:e5:37:83:0c:33:25:67:a2:fa:
         9a:18:c3:a7:b6:00:53:f9:a7:42:12:b6:9f:43:2f:1f:8f:a0:
         cc:3c:a9:a3:0c:4b:59:be:28:0e:bc:cb:d8:62:e3:69:00:0b:
         3e:88:2d:aa:96:10:0f:45:25:9a:7d:18:06:6d:98:9c:90:72:
         ca:a5:80:21:59:e1:29:f3:03:06:ab:85:c3:f2:4c:50:ec:83:
         92:b4:d5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:09:26 2026 by rpki-client