Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DC6B8695D204FB9485C78C0BDA880D2CC5689BC7.cer
File:                     DC6B8695D204FB9485C78C0BDA880D2CC5689BC7.cer (raw, json)
Hash identifier:          2EjI1fwqN/X3qkaSDcWJ26SgCE0p30WC2Sv1af0D6m4=
Subject key identifier:   DC:6B:86:95:D2:04:FB:94:85:C7:8C:0B:DA:88:0D:2C:C5:68:9B:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57380BE0231CF7504E791C3FAB2955ABC7F5D5DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/MBgxeo9nhaNvCLNZJdDjkgQf6BWNXEALXKn3jRfZN5d/0/DC6B8695D204FB9485C78C0BDA880D2CC5689BC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/MBgxeo9nhaNvCLNZJdDjkgQf6BWNXEALXKn3jRfZN5d/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Apr 2026 19:56:42 +0000
Certificate not after:    Thu 29 Apr 2027 20:01:42 +0000
Subordinate resources:    AS: 274506
                          IP: 2804:9538::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:38:0b:e0:23:1c:f7:50:4e:79:1c:3f:ab:29:55:ab:c7:f5:d5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 19:56:42 2026 GMT
            Not After : Apr 29 20:01:42 2027 GMT
        Subject: CN=DC6B8695D204FB9485C78C0BDA880D2CC5689BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:2c:c4:d6:39:2f:c3:ac:26:4d:b4:33:f7:
                    50:aa:47:70:de:31:27:98:81:b3:65:7f:a8:21:ab:
                    96:b7:f7:da:83:85:1a:71:d2:0f:d6:7c:5a:5f:72:
                    d5:df:8d:42:ca:6a:b1:56:40:4f:0a:41:72:97:0a:
                    62:db:41:d6:d0:54:67:f3:23:85:85:1d:0d:5f:99:
                    fa:bf:56:6c:5e:7e:e4:be:b0:3d:26:7a:03:ec:ef:
                    8a:d0:62:5e:85:1d:62:4d:58:af:b8:f9:e8:72:6f:
                    e7:b9:13:fb:44:32:8a:04:07:7f:8d:cb:f5:c4:52:
                    de:3b:8f:14:f4:06:55:f3:cb:a6:20:20:68:b0:1c:
                    6e:43:b2:79:03:53:b8:69:c3:f9:f8:f1:49:de:fc:
                    f8:16:be:73:b6:e5:e2:5c:41:c6:8c:ff:e2:68:7a:
                    8b:d6:4a:36:af:d3:13:79:62:d9:5f:d8:f7:ce:e3:
                    43:ab:73:ec:d0:24:43:7a:06:76:f1:1b:b1:f7:4d:
                    e6:59:f6:4a:97:01:69:9d:bb:c4:75:ba:4a:82:76:
                    42:0b:49:5d:23:c3:ed:e7:d5:a7:c4:b2:cb:b3:90:
                    f5:8f:9f:27:92:57:e1:53:b1:ca:10:9e:80:db:09:
                    9e:bb:c1:b7:70:60:36:41:74:42:44:99:ec:48:9f:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:6B:86:95:D2:04:FB:94:85:C7:8C:0B:DA:88:0D:2C:C5:68:9B:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/MBgxeo9nhaNvCLNZJdDjkgQf6BWNXEALXKn3jRfZN5d/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/MBgxeo9nhaNvCLNZJdDjkgQf6BWNXEALXKn3jRfZN5d/0/DC6B8695D204FB9485C78C0BDA880D2CC5689BC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9538::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274506

    Signature Algorithm: sha256WithRSAEncryption
         31:ad:f6:17:41:5f:06:c5:d0:ef:c2:1c:5e:16:bd:ff:07:fa:
         94:12:ad:2e:97:de:2b:76:b8:22:a6:fc:e0:6e:1c:a7:01:68:
         9d:ea:cd:9f:30:f3:b1:ac:3c:d0:99:cf:1f:b1:95:3b:55:0f:
         51:4d:ec:38:09:e7:22:0d:c7:09:ed:99:4f:56:10:f6:db:6f:
         cb:d4:e8:61:81:22:c6:9c:a7:fc:b6:06:13:a6:e5:a1:22:ce:
         12:ce:2c:07:be:b0:92:41:b4:9f:b3:e5:85:29:02:69:82:38:
         2a:f8:c0:9d:e7:c8:03:e2:bd:79:fc:42:40:98:ce:ca:d4:00:
         97:96:19:d8:b1:e3:0f:5e:db:61:96:95:5d:ff:a2:83:d9:ad:
         eb:f0:61:4f:7a:6f:43:e7:02:a0:ba:62:55:7d:c8:91:3d:a6:
         e6:7e:dc:e8:c3:87:11:36:a2:c7:af:e4:9f:cb:16:16:d1:29:
         3a:58:1c:02:4f:8b:51:62:72:77:f1:3e:15:ef:2e:4c:90:a0:
         b6:ec:fa:66:d7:4a:8f:1e:38:a3:f1:80:4e:26:71:6d:68:20:
         36:95:4e:57:1b:4d:c3:fb:63:b2:ee:e5:c8:38:57:78:73:06:
         23:76:44:ba:7c:4a:cc:b4:28:56:b1:08:7d:21:1d:3b:63:05:
         e7:84:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:47:10 2026 by rpki-client