Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B721195F0B8AC6BF27AB5D8CC141E9315D5225C6.cer
File:                     B721195F0B8AC6BF27AB5D8CC141E9315D5225C6.cer (raw, json)
Hash identifier:          hEJze7G7EhMGasrqpB5ZwXejuiGutlux9RBRDYOcCgk=
Subject key identifier:   B7:21:19:5F:0B:8A:C6:BF:27:AB:5D:8C:C1:41:E9:31:5D:52:25:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D5CE581565309813E0B877692E5767121E57A73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/3/B721195F0B8AC6BF27AB5D8CC141E9315D5225C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Mar 2026 14:17:02 +0000
Certificate not after:    Tue 09 Mar 2027 14:22:02 +0000
Subordinate resources:    AS: 268166
                          IP: 45.170.180.0/22
                          IP: 2804:590c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5c:e5:81:56:53:09:81:3e:0b:87:76:92:e5:76:71:21:e5:7a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 10 14:17:02 2026 GMT
            Not After : Mar  9 14:22:02 2027 GMT
        Subject: CN=B721195F0B8AC6BF27AB5D8CC141E9315D5225C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:20:5c:37:91:e4:97:41:33:df:09:65:14:
                    bc:8b:08:65:e2:a2:1e:d8:8a:03:fd:30:8c:43:ac:
                    f8:aa:09:6c:d4:8b:90:8f:dd:a8:dd:23:07:39:94:
                    19:35:05:ba:1f:a7:8e:07:2e:16:8f:bc:69:2b:74:
                    71:40:39:2e:cc:31:e1:e6:f5:a9:0a:8d:45:1c:5f:
                    9f:60:89:16:71:5a:a1:0a:b4:cd:70:18:f8:0b:ee:
                    f0:f3:fc:46:93:66:9c:88:72:20:45:54:53:01:04:
                    b6:ea:f7:ee:2c:b0:70:13:73:9e:45:41:21:99:55:
                    d4:f0:ce:f8:d9:16:7e:37:50:62:9e:c0:23:75:36:
                    31:20:ab:18:b0:58:87:bd:a9:38:f7:fe:6a:4d:b6:
                    44:3d:c6:30:0d:73:64:21:99:59:dc:40:44:46:50:
                    89:66:9a:3e:ec:0c:df:d6:ed:5b:28:55:53:20:fa:
                    39:94:20:8c:d6:67:de:4b:e0:08:03:06:94:78:de:
                    57:21:07:50:c0:f4:b0:78:37:57:52:80:d7:6d:0d:
                    76:62:9d:7f:9b:1b:e5:e1:f2:bd:df:35:6e:54:a9:
                    f8:ff:d7:50:a9:3d:ea:77:17:95:12:bf:67:03:65:
                    e2:4d:93:2f:0d:6c:85:14:9b:7d:4e:45:c9:c6:bd:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:21:19:5F:0B:8A:C6:BF:27:AB:5D:8C:C1:41:E9:31:5D:52:25:C6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/3/B721195F0B8AC6BF27AB5D8CC141E9315D5225C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.180.0/22
                IPv6:
                  2804:590c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268166

    Signature Algorithm: sha256WithRSAEncryption
         d8:9c:25:47:3e:dc:0f:48:89:93:f9:45:d9:26:bc:b0:26:f6:
         f8:f0:89:ab:dd:0f:1e:ce:3b:0f:55:4b:89:b4:1d:1d:cf:0f:
         b0:1a:20:88:67:8b:12:39:d8:f0:b1:e0:3b:75:f3:85:dc:84:
         a7:74:70:5d:e7:39:e7:0b:4d:2e:d5:3d:b1:14:dd:7b:12:03:
         cb:14:03:28:4f:ef:96:79:a3:20:56:e9:3d:72:d3:07:97:42:
         f1:8f:e7:fb:0d:bd:ff:1b:9f:6f:df:30:a6:4c:f6:7d:fa:4c:
         e8:3e:6e:09:2a:c3:4d:7a:d0:34:8c:9c:3b:65:fd:78:bb:37:
         e5:ce:fc:6d:f5:37:b5:37:ba:55:b9:eb:37:74:a4:11:3e:c4:
         c8:6e:d9:6f:2a:3f:13:64:f5:de:7b:d7:10:5e:58:b8:c6:ee:
         b5:39:e4:2d:4d:e9:d8:0f:69:7a:de:43:89:6f:76:a7:39:e1:
         8e:2e:80:fb:92:12:6f:52:04:22:c9:58:a4:96:f0:11:2b:fa:
         ca:aa:f9:c1:3d:3c:9b:0f:ce:d7:65:bc:97:4d:e9:76:32:6e:
         be:76:23:37:d3:a9:9a:96:b8:37:56:42:b7:20:51:49:b2:cf:
         c8:e5:69:0c:77:d3:aa:cc:64:fd:8f:d5:35:b9:15:71:89:97:
         26:af:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:50 2026 by rpki-client