Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer
File:                     DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer (raw, json)
Hash identifier:          bvFwOChX9gg7+Rv78WM85wzgn6zbHEzxEma2SdEdhB4=
Subject key identifier:   DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D814DADC5E787574286D3094E53FF29B7E0504E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Oct 2026 02:16:33 +0000
Certificate not after:    Sat 09 Oct 2027 02:21:33 +0000
Subordinate resources:    AS: 269372
                          IP: 45.185.96.0/22
                          IP: 2804:639c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 06:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:81:4d:ad:c5:e7:87:57:42:86:d3:09:4e:53:ff:29:b7:e0:50:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 10 02:16:33 2026 GMT
            Not After : Oct  9 02:21:33 2027 GMT
        Subject: CN=DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:c1:26:9a:e1:a5:34:45:3a:cb:9d:64:e1:
                    ad:fa:b5:cf:29:ee:c8:5b:ab:6b:cb:be:db:ae:66:
                    5f:d7:66:c8:a9:9b:f9:08:84:45:49:79:4d:aa:da:
                    f0:1f:c6:2b:b5:f5:0c:32:44:22:e3:e5:7d:9b:9c:
                    34:f4:52:93:55:49:dd:f1:8d:5e:4c:7d:52:22:db:
                    82:3b:a6:b2:be:10:1c:dd:24:b1:98:c3:11:2e:30:
                    1d:63:7a:0b:3d:81:55:bc:f4:20:ed:5e:56:62:e3:
                    65:77:86:b2:a0:aa:37:ca:ba:38:1f:d4:6d:d1:c9:
                    2b:60:80:33:f3:cc:d6:4c:5f:0a:19:38:ca:66:bb:
                    a1:dc:6b:b6:ce:d6:56:04:f7:cc:19:96:71:84:24:
                    eb:48:65:4c:19:6d:1d:31:82:94:cb:dd:bd:99:ab:
                    fa:3d:fb:5d:d8:28:db:f1:a9:bc:9a:eb:e1:1d:09:
                    40:e1:05:e7:98:8e:9a:06:ec:f5:10:d5:20:fc:46:
                    44:8f:b7:08:ae:0c:2f:4e:db:fd:ec:94:73:a4:76:
                    b0:da:af:ed:e9:91:da:9d:1f:68:8d:9e:78:f0:10:
                    a6:94:a5:2b:1d:0b:29:6d:ff:46:17:51:21:77:8f:
                    5f:62:1f:d9:99:2b:a1:45:c2:e5:57:6d:7b:92:a3:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.96.0/22
                IPv6:
                  2804:639c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269372

    Signature Algorithm: sha256WithRSAEncryption
         28:a6:40:be:82:d0:24:7c:4d:fa:87:94:42:fb:1c:1e:1c:16:
         66:cb:6d:e4:3c:27:60:ef:1b:db:77:0e:81:c5:c8:58:43:61:
         ce:e5:fd:f3:7b:0b:07:2d:48:ec:d7:b6:ea:65:71:47:90:3e:
         50:be:9c:b6:b2:30:f7:c8:9f:89:64:93:0f:be:56:4b:25:b9:
         a3:93:77:64:62:fa:dd:90:05:dd:cd:d5:f1:09:c1:90:84:9a:
         7b:c1:e5:8d:ba:e6:6f:fe:d1:31:1c:01:c9:87:dc:2a:e3:8c:
         77:88:dd:e3:83:c5:12:e1:91:52:69:b3:c5:e0:31:24:ba:c1:
         49:71:1d:a2:d1:8b:b8:73:30:9b:44:11:27:9b:64:2a:98:d1:
         56:0a:a9:97:df:46:3e:8e:1f:c5:64:a9:e7:67:8d:1f:f6:44:
         41:77:c5:ef:5d:c0:e8:d4:72:96:ac:04:c3:56:f9:02:e0:40:
         4a:fd:c6:ba:e8:2a:ae:b6:ef:0a:12:a9:f4:e2:c7:40:ff:b5:
         09:02:3c:32:0c:19:95:39:8a:87:7c:b7:07:36:70:a9:9d:06:
         f2:fd:ab:e6:24:cb:c2:33:ef:b1:e9:5d:f5:c3:6d:07:f5:5b:
         2f:2b:91:c3:d7:99:b9:7a:9b:44:56:75:a8:e1:52:71:69:6c:
         48:d4:3f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:37:52 2026 by rpki-client