Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
File:                     CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer (raw, json)
Hash identifier:          jdDort7l7uRTqIsB9nRykWWOQEt5iZ3feSXbsBfktAY=
Subject key identifier:   CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       637160F1BBE9CB58A150ECAD97F97CCE2D3D04B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Mar 2026 07:14:39 +0000
Certificate not after:    Thu 18 Mar 2027 07:19:39 +0000
Subordinate resources:    AS: 262316
                          IP: 131.221.200.0/22
                          IP: 138.117.192.0/22
                          IP: 167.250.152.0/22
                          IP: 177.74.64.0/20
                          IP: 177.124.48.0/22
                          IP: 2804:7c0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:71:60:f1:bb:e9:cb:58:a1:50:ec:ad:97:f9:7c:ce:2d:3d:04:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 19 07:14:39 2026 GMT
            Not After : Mar 18 07:19:39 2027 GMT
        Subject: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:20:fb:33:a0:39:72:9d:25:fc:65:f3:b5:
                    84:4a:d9:d6:3a:28:18:a3:f6:e2:e1:2b:d8:2e:f7:
                    c8:79:ac:21:93:46:78:d2:af:c7:31:73:bc:ea:5d:
                    6f:f3:e4:dc:8e:50:5a:4c:e9:1a:46:59:07:cf:24:
                    ea:86:24:52:8f:db:37:fa:bb:6c:34:71:0c:16:75:
                    9d:27:99:f0:c2:07:61:a7:92:9c:0e:60:5f:5e:d7:
                    71:a5:bf:ac:74:df:ca:48:d5:ae:f6:26:9a:73:62:
                    2b:b5:3c:e6:f2:de:ab:16:db:6d:d3:16:f1:5e:28:
                    5e:2a:76:70:ce:bc:9b:d8:86:5c:77:d9:00:da:7d:
                    4e:b2:7b:c2:60:bc:cb:a5:20:76:13:cc:2a:32:bd:
                    71:d5:ee:22:cc:f8:05:2b:23:e4:23:5c:0e:7b:0e:
                    ed:37:4e:e8:d7:37:fb:89:bc:29:7a:37:7b:b5:8a:
                    5b:57:65:49:23:c9:4a:61:9b:92:b5:7a:90:47:ed:
                    f5:c6:8d:64:cf:d6:f1:7d:4e:a0:44:19:d6:5e:42:
                    51:ca:a8:b6:4f:f1:94:d0:7b:f4:d4:d5:3a:47:55:
                    35:4d:08:60:f4:76:bf:ee:e1:38:e6:c4:f1:e4:61:
                    8a:ef:cf:e5:ad:42:2f:cb:73:63:50:6b:a1:49:4a:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.200.0/22
                  138.117.192.0/22
                  167.250.152.0/22
                  177.74.64.0/20
                  177.124.48.0/22
                IPv6:
                  2804:7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262316

    Signature Algorithm: sha256WithRSAEncryption
         72:54:65:05:6d:15:d7:7e:76:d5:c7:14:2c:b9:3e:71:a1:dc:
         45:ff:72:61:5e:46:21:5d:9c:60:41:a9:92:e9:a0:b9:98:ad:
         12:78:f3:63:52:95:67:15:94:ab:5e:24:19:84:49:03:b9:a7:
         84:b8:49:5d:a2:7e:4a:62:ff:14:af:3d:4e:18:d7:d9:68:e4:
         7c:a6:9d:c3:5e:5a:cd:c4:4b:a5:33:67:dd:bf:85:69:04:8c:
         d9:0a:21:8a:3a:4c:a1:77:1b:29:50:94:93:a4:ae:c6:5c:a4:
         95:1b:0b:46:ec:18:ff:9c:9d:81:e0:5f:68:41:56:89:e3:e1:
         00:37:b5:93:6b:63:72:fe:cd:11:87:c0:5d:51:3f:4f:6c:0a:
         00:cb:56:c4:7c:2f:f1:09:c5:95:3d:74:f7:0d:62:88:af:e0:
         9f:c7:b8:9f:b8:16:45:ae:48:ef:eb:3d:6d:df:c6:9f:d2:e5:
         34:9e:a9:12:14:67:44:11:06:a1:87:37:cc:5a:d0:ea:2f:03:
         c6:15:7a:81:f0:4b:ab:5d:d2:50:2f:a0:cd:62:8c:f9:be:40:
         00:5f:a9:86:65:83:4e:ee:93:af:3a:c7:63:06:35:5f:b6:1f:
         e5:4e:d9:13:77:0d:98:4f:b6:84:aa:bf:8f:53:ef:f5:a8:e2:
         b5:ff:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:55:03 2026 by rpki-client