Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D4BE536B074ADDF3F51DDD99490A8C019A915A48.cer
File:                     D4BE536B074ADDF3F51DDD99490A8C019A915A48.cer (raw, json)
Hash identifier:          OcXb8DIuk45dMAUMxaR+Jh3tiwChtm8NCNk7w7JDlL4=
Subject key identifier:   D4:BE:53:6B:07:4A:DD:F3:F5:1D:DD:99:49:0A:8C:01:9A:91:5A:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3DF9798C2CA06D87C86B708382AC364039257A4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/D4BE536B074ADDF3F51DDD99490A8C019A915A48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Mar 2026 13:30:44 +0000
Certificate not after:    Mon 22 Mar 2027 13:35:44 +0000
Subordinate resources:    AS: 263129
                          IP: 177.155.84.0/22
                          IP: 2804:172c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f9:79:8c:2c:a0:6d:87:c8:6b:70:83:82:ac:36:40:39:25:7a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 23 13:30:44 2026 GMT
            Not After : Mar 22 13:35:44 2027 GMT
        Subject: CN=D4BE536B074ADDF3F51DDD99490A8C019A915A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:1a:d8:f1:5a:97:5f:76:23:a2:3c:97:ef:
                    8f:1d:b8:e2:69:8e:d9:e0:22:95:d7:36:9d:2d:84:
                    68:22:9a:d9:7d:07:9b:03:5f:52:a8:36:19:32:fc:
                    0d:74:31:40:c9:20:c4:63:94:63:62:cc:74:54:94:
                    cc:86:16:fc:05:75:02:55:a2:84:de:a3:f7:6d:56:
                    a4:07:3e:7d:55:3c:0a:9e:22:a5:72:d6:cf:fb:2a:
                    37:e3:9c:dc:20:b9:1c:ab:c8:c3:5f:cd:e0:d0:5c:
                    91:c3:04:e5:41:5e:2f:f3:ea:ef:43:29:4b:ea:cc:
                    06:e6:e0:44:f6:51:53:e8:1f:0e:ff:f3:bf:25:dc:
                    a1:b6:bf:36:2f:dd:92:40:08:62:86:82:1a:6a:9d:
                    f8:dd:00:4e:29:55:3f:d8:18:7d:e5:73:d4:dc:64:
                    7b:27:21:c3:bf:2e:08:92:c3:22:5b:78:39:a0:aa:
                    2e:d8:9a:8a:fc:fe:72:f2:ab:5d:20:3b:e7:c2:50:
                    d9:5b:41:78:e3:c3:59:fe:3c:ae:04:95:21:e8:eb:
                    ca:67:59:68:72:76:c9:fa:66:50:7c:07:46:a1:eb:
                    68:9c:02:ab:35:95:7c:90:c6:8f:84:9c:75:bc:48:
                    dd:00:c3:c5:a1:a3:1f:89:e0:7b:5f:70:53:23:35:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:BE:53:6B:07:4A:DD:F3:F5:1D:DD:99:49:0A:8C:01:9A:91:5A:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/D4BE536B074ADDF3F51DDD99490A8C019A915A48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.84.0/22
                IPv6:
                  2804:172c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263129

    Signature Algorithm: sha256WithRSAEncryption
         d3:eb:a3:8e:94:10:ad:4b:97:f3:cb:0d:29:66:2f:43:22:7f:
         96:6c:ca:ad:95:98:17:45:dd:80:0d:0c:85:38:ac:40:14:eb:
         61:80:75:1e:a1:98:56:f0:e3:3b:48:38:99:13:bb:67:89:87:
         60:a9:ab:fb:03:7a:55:8f:ca:4e:e7:df:7e:76:ee:8a:95:95:
         31:3d:01:8f:61:45:e4:e2:79:1c:e2:c6:d5:57:55:2d:b8:13:
         a4:14:c6:25:88:86:8e:ce:d6:b1:0c:4c:8f:3c:e9:5b:a9:02:
         cb:bd:3a:e8:d6:d8:1f:d7:2e:83:03:93:f1:ab:f4:c2:1c:ba:
         5a:93:b5:bf:da:23:a6:07:46:0b:0f:3a:50:aa:82:62:5f:a0:
         74:fd:59:e9:fe:73:62:9e:cf:3b:e8:1c:05:34:3f:b5:ba:dc:
         d5:ea:62:27:99:8b:ad:73:0c:11:09:10:97:39:67:1c:19:7b:
         0d:f4:62:d2:b7:8b:6a:1b:7b:40:da:c0:2c:05:5a:55:4f:2a:
         de:07:0a:5c:e0:db:78:95:67:83:2f:34:a5:d6:2a:9b:9f:45:
         6e:8b:86:fe:bc:01:d6:bd:8e:0e:87:3f:55:ea:4d:56:0a:1f:
         31:46:dc:0f:06:08:1e:0c:07:b2:9c:44:fe:3e:ce:f4:62:5f:
         42:79:30:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:59:18 2026 by rpki-client