Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.cer
File:                     CD5F7E7DD50663318415A698EE3C1D9FA70014AA.cer (raw, json)
Hash identifier:          AFhCwEFbd9lCQNvCFxmRRHv7ovRsXFH8ixmf/tH5nTo=
Subject key identifier:   CD:5F:7E:7D:D5:06:63:31:84:15:A6:98:EE:3C:1D:9F:A7:00:14:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71C055FC1167CEBF641FE2042A31586AA5D7AEA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Mar 2026 20:05:33 +0000
Certificate not after:    Mon 15 Mar 2027 20:10:33 +0000
Subordinate resources:    AS: 271691
                          IP: 190.185.98.0/23
                          IP: 2804:7f7c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c0:55:fc:11:67:ce:bf:64:1f:e2:04:2a:31:58:6a:a5:d7:ae:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 16 20:05:33 2026 GMT
            Not After : Mar 15 20:10:33 2027 GMT
        Subject: CN=CD5F7E7DD50663318415A698EE3C1D9FA70014AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2b:ff:ba:82:10:ea:0e:af:5a:69:7f:af:d2:
                    50:1c:de:3d:19:ee:da:5b:6b:aa:ae:d0:97:7d:ef:
                    a3:c3:01:72:bf:3b:b6:d8:05:46:35:bb:65:8d:8f:
                    d5:d2:fd:cd:8e:fd:ea:3a:89:68:d7:0a:cc:a4:e8:
                    94:54:8a:bd:ad:0e:39:7c:3e:e4:d9:b3:be:53:41:
                    da:29:b3:fd:26:13:9c:90:62:b4:e8:54:9b:60:8b:
                    51:54:c4:5c:f3:5b:f2:59:05:cb:19:5c:c3:37:a2:
                    3e:0c:76:95:75:f3:b8:7e:65:1a:92:ea:a9:74:2a:
                    43:e2:b6:db:21:1b:d4:bb:69:78:87:0e:00:0c:8d:
                    17:e6:1d:71:d5:11:1d:00:cd:40:07:bb:d6:63:ab:
                    08:01:67:72:f6:06:ab:1e:39:fe:bf:c5:e2:e5:68:
                    da:80:b2:81:f0:80:f3:fb:69:8d:0e:23:39:b6:3d:
                    4d:79:3c:99:92:6d:39:c7:0a:be:3d:e4:13:c9:6a:
                    52:4a:52:3d:ff:32:00:c1:2d:8c:5b:e9:4a:e1:a9:
                    a9:77:14:ab:fd:35:c6:71:1e:b9:c1:8c:12:0b:46:
                    2c:05:e1:e7:d8:d5:b8:74:8e:16:93:87:c6:b1:b7:
                    ee:c2:45:b6:58:bd:6d:c6:c6:93:a0:0b:42:78:0e:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:5F:7E:7D:D5:06:63:31:84:15:A6:98:EE:3C:1D:9F:A7:00:14:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.98.0/23
                IPv6:
                  2804:7f7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271691

    Signature Algorithm: sha256WithRSAEncryption
         2a:5f:53:b6:6d:19:40:d5:c3:09:4b:05:b9:0a:3c:ce:0d:62:
         88:6a:64:05:3d:27:db:c9:95:23:e7:25:64:3c:94:69:db:bc:
         52:69:af:de:2c:05:72:58:1f:de:a6:65:24:69:b0:e0:30:e3:
         47:0a:43:08:b6:7e:c1:d1:02:f3:b8:a4:84:74:42:1c:3c:64:
         a0:e5:7b:6a:71:75:77:0f:20:e5:72:cc:62:01:5c:57:72:1b:
         4f:58:b6:24:b1:1b:cd:dc:aa:30:3d:07:e9:45:04:32:75:21:
         48:96:3c:cc:63:f8:1d:b5:8e:39:8f:3d:0c:cd:da:bf:94:e2:
         67:8f:54:69:95:04:0e:f7:46:eb:81:1a:80:b3:37:05:1c:79:
         1d:d0:ca:c9:1e:dc:41:ae:59:1d:27:20:a1:df:1f:f5:03:82:
         10:d1:59:27:56:78:7a:7e:c2:16:9d:2c:c6:da:cc:49:41:b3:
         69:7e:87:28:03:99:f4:29:d5:2b:00:fa:0b:6c:6a:fd:d6:82:
         fb:9f:96:d8:81:8b:67:53:6f:71:98:7b:2e:c5:05:28:de:d3:
         b5:40:6e:ee:f3:8a:02:f2:eb:08:8c:fc:ee:c8:6f:c8:5f:d7:
         6d:84:35:18:a2:85:2a:73:36:58:7b:75:d6:17:3f:50:a1:ef:
         55:75:f1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:54:51 2026 by rpki-client