Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
File:                     E1EF9203E12432F995B9B24544924C4BA28FEE51.cer (raw, json)
Hash identifier:          JxBUlPHGQgfxNfsu2gM6A0xid1MjxWZ1T1ViF9vmczs=
Subject key identifier:   E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       629AE838593CB9C748B6CE4267C01ED6D52A0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Apr 2026 17:48:16 +0000
Certificate not after:    Thu 29 Apr 2027 17:53:16 +0000
Subordinate resources:    AS: 263544
                          IP: 143.0.48.0/22
                          IP: 168.227.84.0/22
                          IP: 170.78.248.0/22
                          IP: 191.5.240.0/20
                          IP: 2804:13a8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9a:e8:38:59:3c:b9:c7:48:b6:ce:42:67:c0:1e:d6:d5:2a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 17:48:16 2026 GMT
            Not After : Apr 29 17:53:16 2027 GMT
        Subject: CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:4a:1d:ca:fe:7e:d7:aa:ad:16:3a:40:04:
                    d9:92:d2:82:46:ac:b7:f3:5b:4b:b4:13:7f:ec:d4:
                    cb:17:1a:bb:93:fa:3a:b7:67:35:3e:ce:70:7f:18:
                    9b:d3:87:b3:c5:66:de:d1:c2:f2:ed:a1:6d:d7:b0:
                    64:fd:c3:36:7f:22:8a:ce:f9:9f:7e:c9:9d:8b:2d:
                    2d:fd:50:a3:9a:2e:2a:67:f1:5e:5b:0d:a8:c9:ea:
                    e4:93:41:59:24:99:c9:a1:70:37:66:59:6b:17:a9:
                    b8:a1:55:20:06:7c:88:1a:ff:74:83:b8:fb:e1:d7:
                    04:80:65:a4:90:f7:b6:24:5c:8b:5b:b2:42:49:d0:
                    6d:b9:0e:be:5e:ff:52:63:04:9d:fd:c0:e8:e9:b2:
                    f7:48:1b:4f:a6:7f:06:59:55:30:d9:58:ea:c4:4d:
                    5d:7e:6c:51:16:43:50:1b:5b:3b:8e:cd:d4:0c:4b:
                    a0:d3:64:55:45:f3:0d:19:18:1d:c4:9e:48:81:cf:
                    51:bb:88:bf:cd:68:a3:06:b8:98:d4:8d:15:3b:f1:
                    c3:a5:7b:2f:b1:d5:df:2b:a6:68:1d:81:a2:43:14:
                    57:de:2a:da:d1:c5:fe:2b:db:6d:a8:9d:95:58:c1:
                    5c:31:bb:e8:21:2c:65:24:e5:48:49:72:0d:d6:eb:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.48.0/22
                  168.227.84.0/22
                  170.78.248.0/22
                  191.5.240.0/20
                IPv6:
                  2804:13a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263544

    Signature Algorithm: sha256WithRSAEncryption
         89:70:9c:48:9a:42:f5:69:65:43:30:46:db:70:6d:11:0a:bd:
         1a:39:5b:63:2f:75:67:e2:8a:77:59:c7:ba:5d:42:1d:a0:78:
         31:c5:4e:d8:f3:d1:ad:05:a5:73:d6:1c:cd:4d:4a:d5:35:9e:
         1c:82:bb:80:0b:ac:0f:81:9c:52:7f:7b:bd:63:fb:11:8f:58:
         8b:6e:a9:51:f9:2c:76:44:5c:8c:4e:3f:78:e6:6c:a2:4c:59:
         a6:fd:02:24:41:e3:d1:b4:eb:ea:c8:35:b3:ca:b9:10:91:03:
         12:c8:8c:b1:ab:68:be:af:f4:4b:28:3e:b0:9b:09:1e:f9:54:
         bb:0d:a8:f7:58:87:3f:5b:9e:4f:cf:60:bf:a0:1b:fe:21:49:
         30:7d:f0:e9:a0:29:fa:06:32:88:0e:9b:71:22:79:e8:da:97:
         07:41:ab:37:34:41:3e:c1:38:a2:3f:6a:2a:86:c7:a3:bf:f2:
         7f:eb:38:ef:10:f4:7c:67:e4:f6:45:fd:70:e7:fb:e2:7c:08:
         60:5c:be:14:74:1c:c4:af:7d:21:3f:20:fc:54:96:2d:7f:4d:
         12:84:f4:1b:35:82:dd:7c:62:48:7e:b6:c1:55:b8:1e:52:32:
         80:df:ad:77:3b:3a:38:cc:42:e3:bc:46:5f:21:53:ea:ed:37:
         6c:65:b0:8a
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgITYproOFk8ucdIts5CZ8Ae1tUqDzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3
Q0E4QTRCMB4XDTI2MDQzMDE3NDgxNloXDTI3MDQyOTE3NTMxNlowMzExMC8GA1UE
AxMoRTFFRjkyMDNFMTI0MzJGOTk1QjlCMjQ1NDQ5MjRDNEJBMjhGRUU1MTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKGDSh3K/n7Xqq0WOkAE2ZLSgkas
t/NbS7QTf+zUyxcau5P6OrdnNT7OcH8Ym9OHs8Vm3tHC8u2hbdewZP3DNn8iis75
n37JnYstLf1Qo5ouKmfxXlsNqMnq5JNBWSSZyaFwN2ZZaxepuKFVIAZ8iBr/dIO4
++HXBIBlpJD3tiRci1uyQknQbbkOvl7/UmMEnf3A6Omy90gbT6Z/BllVMNlY6sRN
XX5sURZDUBtbO47N1AxLoNNkVUXzDRkYHcSeSIHPUbuIv81oowa4mNSNFTvxw6V7
L7HV3yumaB2BokMUV94q2tHF/ivbbaidlVjBXDG76CEsZSTlSElyDdbrRbkCAwEA
AaOCA0wwggNIMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFOHvkgPhJDL5lbmy
RUSSTEuij+5RMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud
DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy
MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG
CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB
MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy
OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBQAYIKwYBBQUHAQsEggEyMIIBLjBeBggr
BgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84QUZx
aFAzelJ6MnhSNjlZSG9NcnRZbldzMTV2czZlWDNMRmtEeTI1UkdXeC8wLzCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEFG
cWhQM3pSejJ4UjY5WUhvTXJ0WW5XczE1dnM2ZVgzTEZrRHkyNVJHV3gvMC9FMUVG
OTIwM0UxMjQzMkY5OTVCOUIyNDU0NDkyNEM0QkEyOEZFRTUxLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcB
Af8EMTAvMB4EAgABMBgDBAKPADADBAKo41QDBAKqTvgDBAS/BfAwDQQCAAIwBwMF
ACgEE6gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAV4MA0GCSqGSIb3DQEBCwUA
A4IBAQCJcJxImkL1aWVDMEbbcG0RCr0aOVtjL3Vn4op3Wce6XUIdoHgxxU7Y89Gt
BaVz1hzNTUrVNZ4cgruAC6wPgZxSf3u9Y/sRj1iLbqlR+Sx2RFyMTj945myiTFmm
/QIkQePRtOvqyDWzyrkQkQMSyIyxq2i+r/RLKD6wmwke+VS7Daj3WIc/W55Pz2C/
oBv+IUkwffDpoCn6BjKIDptxInno2pcHQas3NEE+wTiiP2oqhsejv/J/6zjvEPR8
Z+T2Rf1w5/vifAhgXL4UdBzEr30hPyD8VJYtf00ShPQbNYLdfGJIfrbBVbgeUjKA
3613Ozo4zELjvEZfIVPq7TdsZbCK
-----END CERTIFICATE-----
Generated at Wed May 13 16:01:09 2026 by rpki-client