Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B2E457E7500CCBE093B56886E0919B4530713E84.cer
File:                     B2E457E7500CCBE093B56886E0919B4530713E84.cer (raw, json)
Hash identifier:          3JvC2ar5SrsLnTnsIygZzQu8+4YFDvuLSRbzMcLQmjQ=
Subject key identifier:   B2:E4:57:E7:50:0C:CB:E0:93:B5:68:86:E0:91:9B:45:30:71:3E:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       50B441ED862B235A75C755868ACCDB0CDE812AF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/B2E457E7500CCBE093B56886E0919B4530713E84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Mar 2026 14:28:48 +0000
Certificate not after:    Tue 09 Mar 2027 14:33:48 +0000
Subordinate resources:    AS: 28209
                          IP: 177.70.0.0/19
                          IP: 179.127.0.0/19
                          IP: 189.113.0.0/20
                          IP: 2804:1070::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b4:41:ed:86:2b:23:5a:75:c7:55:86:8a:cc:db:0c:de:81:2a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 10 14:28:48 2026 GMT
            Not After : Mar  9 14:33:48 2027 GMT
        Subject: CN=B2E457E7500CCBE093B56886E0919B4530713E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:62:97:d0:b5:a6:90:4a:cb:72:3b:8e:75:
                    b6:34:c5:01:ca:66:77:ea:5d:79:51:9f:4e:19:30:
                    d3:6f:56:17:00:00:f4:5a:31:99:70:04:1e:a6:f6:
                    d5:16:6d:7c:6a:7c:58:b4:a2:0b:b5:47:22:9b:c7:
                    d5:c4:ed:bf:da:e2:17:f7:18:e1:3d:91:84:4b:92:
                    2c:75:90:d3:87:07:6d:0a:7d:50:3a:e2:75:80:7b:
                    ec:32:99:24:65:06:54:87:ef:ea:69:71:66:ef:4c:
                    d8:b3:a2:89:96:f5:a4:cb:94:42:0b:1d:b9:dc:96:
                    ef:54:18:fa:8a:e6:b0:cf:ad:36:46:7e:62:fe:83:
                    77:e7:52:cf:6d:b2:81:80:1a:d8:9b:61:2e:b3:08:
                    62:c9:e3:f4:b5:66:11:c9:51:4d:5f:d7:3b:85:d3:
                    13:97:70:ba:1f:65:8a:85:b5:cc:90:f0:02:69:db:
                    49:eb:5a:0f:98:a5:e6:91:09:2d:26:65:ee:75:4e:
                    0d:4d:f8:77:85:8f:97:84:68:32:ef:c4:9a:43:61:
                    0f:d5:af:50:f6:dd:5c:e7:7a:7c:f6:e0:77:8d:35:
                    2c:42:a5:25:f9:c6:f5:d9:88:47:26:1b:b2:21:e5:
                    fd:74:49:fb:21:6e:62:16:af:d8:d8:f7:50:39:91:
                    4f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:E4:57:E7:50:0C:CB:E0:93:B5:68:86:E0:91:9B:45:30:71:3E:84
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/B2E457E7500CCBE093B56886E0919B4530713E84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.0.0/19
                  179.127.0.0/19
                  189.113.0.0/20
                IPv6:
                  2804:1070::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28209

    Signature Algorithm: sha256WithRSAEncryption
         5c:38:07:99:52:8c:74:9c:8d:23:21:29:64:d6:98:4a:0e:c5:
         9d:bc:f9:e1:6f:d9:0f:18:91:de:bf:86:15:ac:43:97:f6:75:
         07:a7:12:21:21:2e:dc:3e:b2:f2:8e:0c:a5:05:47:4c:73:4d:
         2a:5d:27:46:6b:22:68:4b:c6:fa:78:e6:2a:12:43:a9:2a:55:
         7b:06:62:ec:2e:b8:52:15:c9:02:20:ed:c7:27:b9:39:7c:72:
         52:f3:c3:01:35:1e:ac:9b:5c:c3:71:c7:78:18:21:df:0d:b3:
         e9:da:f6:09:26:8d:66:5e:7a:8d:81:49:00:f8:0f:24:00:27:
         d0:68:1f:e6:47:73:1a:c5:bd:25:c7:f6:b5:b1:ca:87:f1:1a:
         5d:f3:14:02:83:65:91:dd:12:31:1f:7e:83:a5:c6:68:c2:96:
         96:d0:e8:d7:57:01:83:55:9e:21:7e:3e:69:6f:a2:92:8f:12:
         a2:dd:3b:0f:09:f6:cf:34:58:93:4c:c2:b7:8f:5f:cd:e0:2a:
         b5:2c:6c:4e:01:ac:5f:e8:57:42:fb:d6:06:38:a3:98:7f:d7:
         f5:d5:8c:ea:60:01:da:32:85:10:e6:f4:df:27:a5:c0:b2:b4:
         4e:fe:db:02:69:0e:94:f6:aa:f1:33:8a:5b:73:67:5d:df:5f:
         99:1e:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:30:03 2026 by rpki-client