Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
File:                     2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer (raw, json)
Hash identifier:          g1b0ciBpoGXV6iZ7hdmTW3wBiDctX6OaycdSbnuPwPg=
Subject key identifier:   21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35E5FC77B7159DCF38DFA6CFAF89331820170344
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Feb 2026 14:34:47 +0000
Certificate not after:    Fri 05 Feb 2027 14:39:47 +0000
Subordinate resources:    AS: 268068
                          IP: 45.168.180.0/22
                          IP: 2804:577c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 21:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e5:fc:77:b7:15:9d:cf:38:df:a6:cf:af:89:33:18:20:17:03:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 14:34:47 2026 GMT
            Not After : Feb  5 14:39:47 2027 GMT
        Subject: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:47:09:f4:fa:cf:49:a4:32:65:f5:ab:64:
                    bf:42:7e:01:e2:49:0d:0c:20:54:97:be:00:1d:34:
                    15:c9:11:14:90:b7:f1:0c:c6:74:45:e0:4d:dc:93:
                    83:a9:b0:a9:7e:d5:0f:2b:5f:ae:f4:11:e3:ec:95:
                    2c:38:52:79:08:4f:aa:ab:7c:b8:6d:b2:63:f5:5d:
                    67:aa:e0:e8:17:65:55:b5:d2:5d:a0:73:4a:c5:3a:
                    b0:4e:a0:fb:f4:78:c4:18:37:82:2c:f8:da:72:30:
                    58:4c:61:97:13:ea:ec:82:ae:c0:45:d4:48:14:d3:
                    32:17:1d:f9:b2:b4:a8:43:2b:9d:ec:c7:c5:fa:18:
                    b6:f0:60:6a:c7:40:39:58:ba:f2:95:c1:39:6a:a0:
                    f7:0c:94:ed:dc:82:a2:ea:5e:87:10:cf:6c:70:9b:
                    7c:23:6a:d9:57:5b:3b:87:f3:f3:a2:94:9a:4a:c2:
                    6f:75:94:78:a7:75:11:f1:95:87:9f:8d:2a:73:aa:
                    4a:4f:7e:d4:16:73:a4:35:64:3f:b0:b7:c1:5e:6d:
                    c0:0e:94:b6:30:e1:97:4f:db:9f:36:1e:46:c6:42:
                    86:e3:0f:f1:fd:38:d2:04:89:3f:96:64:c4:c3:c5:
                    e6:4e:ee:54:7c:88:fb:63:bb:b5:b1:61:69:56:5b:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.180.0/22
                IPv6:
                  2804:577c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268068

    Signature Algorithm: sha256WithRSAEncryption
         b2:ce:63:c2:30:1f:72:72:2a:fb:f8:4e:cf:43:cc:37:3e:ec:
         12:4a:e2:1f:96:92:51:8b:ff:fe:16:f7:9f:f8:05:c6:5d:50:
         5a:88:36:0f:44:58:fb:8e:1b:5f:9e:0f:7c:27:3e:2c:e8:42:
         72:b8:b0:6d:a0:2d:b0:ea:f7:43:a0:04:55:3b:d9:df:57:a7:
         25:87:0b:92:ca:c8:1c:2f:36:9e:c3:a5:66:06:59:60:67:8c:
         39:a5:2c:3d:e9:86:7f:bf:93:e8:6d:57:53:53:85:64:91:81:
         7b:eb:d4:ef:24:50:12:5d:41:64:1a:8b:a4:09:3b:d1:b4:d3:
         5e:a2:7d:b6:35:65:2f:48:46:e6:95:ca:0c:32:1c:88:4e:62:
         1e:09:11:b9:b9:23:a1:24:08:f3:51:67:8b:9b:2e:50:bc:b7:
         33:e4:c3:3c:6a:df:28:41:5b:32:c8:25:7c:d9:55:4a:dd:da:
         47:d9:c3:ec:92:e1:05:1c:23:75:d9:99:7c:5b:32:4b:84:b2:
         0f:3c:31:5e:26:c7:c3:03:ec:da:ba:a9:42:81:93:9b:90:92:
         e9:89:ea:11:4a:f0:72:69:a0:f5:eb:38:d8:80:4c:a8:66:dd:
         8c:26:17:9f:22:fb:4a:e2:a9:04:f9:f4:0e:09:68:9a:cc:15:
         0a:00:a3:63
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUNeX8d7cVnc8436bPr4kzGCAXA0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAyMDYxNDM0NDdaFw0yNzAyMDUxNDM5NDdaMDMxMTAvBgNV
BAMTKDIxMDlCRTMyMUJBQTQ4OTg1M0I5NUREOUVCMjg4MkQ0RjgyNEYwRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFEcJ9PrPSaQyZfWrZL9CfgHi
SQ0MIFSXvgAdNBXJERSQt/EMxnRF4E3ck4OpsKl+1Q8rX670EePslSw4UnkIT6qr
fLhtsmP1XWeq4OgXZVW10l2gc0rFOrBOoPv0eMQYN4Is+NpyMFhMYZcT6uyCrsBF
1EgU0zIXHfmytKhDK53sx8X6GLbwYGrHQDlYuvKVwTlqoPcMlO3cgqLqXocQz2xw
m3wjatlXWzuH8/OilJpKwm91lHindRHxlYefjSpzqkpPftQWc6Q1ZD+wt8FebcAO
lLYw4ZdP2582HkbGQobjD/H9ONIEiT+WZMTDxeZO7lR8iPtju7WxYWlWW7aXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhCb4yG6pImFO5
XdnrKILU+CTw8jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUVR
UHJCbUtIVzJGZURHNkFiYlRRN1FYeFB6eXFpZXlrSjhlZXN1ZlZwMTEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FF
UVByQm1LSFcyRmVERzZBYmJUUTdRWHhQenlxaWV5a0o4ZWVzdWZWcDExLzEvMjEw
OUJFMzIxQkFBNDg5ODUzQjk1REQ5RUIyODgyRDRGODI0RjBGMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLai0MA0EAgACMAcDBQAoBFd8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQXJDANBgkqhkiG9w0BAQsFAAOCAQEAss5jwjAfcnIq+/hO
z0PMNz7sEkriH5aSUYv//hb3n/gFxl1QWog2D0RY+44bX54PfCc+LOhCcriwbaAt
sOr3Q6AEVTvZ31enJYcLksrIHC82nsOlZgZZYGeMOaUsPemGf7+T6G1XU1OFZJGB
e+vU7yRQEl1BZBqLpAk70bTTXqJ9tjVlL0hG5pXKDDIciE5iHgkRubkjoSQI81Fn
i5suULy3M+TDPGrfKEFbMsglfNlVSt3aR9nD7JLhBRwjddmZfFsyS4SyDzwxXibH
wwPs2rqpQoGTm5CS6YnqEUrwcmmg9es42IBMqGbdjCYXnyL7SuKpBPn0DglomswV
CgCjYw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:39 2026 by rpki-client