Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
File:                     2D59905C3FCA5BDA34D7101B088D80451D026C47.cer (raw, json)
Hash identifier:          SDJTiuVSXODm4msJJkWU3LMIMOFk96TsaMS/U5osYk4=
Subject key identifier:   2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7657F406036CF268011886D02E1EA269D5578321
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Feb 2026 05:48:05 +0000
Certificate not after:    Fri 05 Feb 2027 05:53:05 +0000
Subordinate resources:    AS: 264233
                          IP: 138.117.116.0/22
                          IP: 170.80.100.0/22
                          IP: 2804:249c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:57:f4:06:03:6c:f2:68:01:18:86:d0:2e:1e:a2:69:d5:57:83:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 05:48:05 2026 GMT
            Not After : Feb  5 05:53:05 2027 GMT
        Subject: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:40:c3:47:98:f5:73:f7:a7:55:78:2f:4f:59:
                    ba:ba:f9:55:ac:e9:e0:11:9f:14:42:60:f6:bf:eb:
                    b8:ad:3e:f1:e1:44:0d:57:00:8d:2c:7c:c6:8a:ab:
                    76:fb:06:a2:b6:5c:b6:90:0e:71:bc:8b:a7:4a:dc:
                    05:b4:c0:48:c4:ad:20:44:45:89:1a:43:c4:64:ad:
                    8d:ed:0a:8e:15:4c:fe:18:37:52:dc:30:7f:53:34:
                    b9:35:a5:fb:76:c7:61:70:b0:89:8c:15:83:30:0c:
                    63:3c:4f:42:60:b2:5a:54:f3:1f:fe:69:19:bf:e1:
                    2c:f7:57:6b:2c:87:b1:09:ab:6d:1f:0d:56:ec:39:
                    86:1a:58:45:ac:b8:f5:e5:d7:69:05:ec:fd:ba:43:
                    ed:6b:16:89:b7:9a:02:73:85:80:5d:3c:1b:35:05:
                    9f:36:fd:44:16:a7:2c:8d:c8:cc:e1:ea:37:b1:24:
                    88:d0:e9:4e:f8:97:22:31:f4:36:31:5b:80:04:6d:
                    a9:db:cf:31:ae:22:5a:bf:6a:32:b8:6b:be:fc:cb:
                    be:51:16:ef:f6:2a:12:d6:0c:8b:4f:49:d3:dd:25:
                    46:57:de:27:99:c5:a4:42:8c:cc:86:c9:fa:12:e9:
                    6b:f1:18:e2:f1:03:e6:7a:1e:4e:6c:09:0c:29:cb:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.116.0/22
                  170.80.100.0/22
                IPv6:
                  2804:249c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264233

    Signature Algorithm: sha256WithRSAEncryption
         ab:54:e4:8f:04:e3:ba:29:15:54:49:2e:65:5c:45:77:fd:d1:
         68:4a:dd:52:94:c4:7b:e5:24:8f:13:5a:78:e1:31:bb:e4:c7:
         a0:9d:94:fc:d0:f6:96:6b:78:b3:98:e0:bc:10:02:d9:c9:51:
         fc:53:37:ce:ab:cf:ea:66:51:be:d9:ef:20:26:de:2a:4d:ae:
         51:67:5f:d0:38:e7:9d:ed:7f:d2:38:94:53:e7:7b:42:35:2b:
         90:10:bb:ea:c8:f2:0e:82:55:e1:f0:77:b0:23:88:59:b5:bc:
         90:09:b2:d9:36:c6:b2:02:24:8f:f7:c0:c9:4b:2c:88:b4:c5:
         fd:11:89:eb:cc:e4:fb:68:f3:74:40:d4:a8:bf:55:40:cb:e9:
         c4:c3:22:9d:a3:20:28:62:6a:c5:5e:62:2f:03:4e:32:e9:ab:
         37:09:c7:90:0a:66:e2:21:e2:87:82:88:77:e1:f8:10:1a:cf:
         7d:d4:8a:a2:6c:1c:4c:d9:55:67:a2:5c:9d:d1:26:af:8e:3e:
         28:dd:87:31:60:4a:8d:c6:f5:06:ed:da:88:25:12:24:9d:fa:
         e5:3b:eb:06:e6:0c:e7:a9:cf:55:f4:04:aa:32:e3:18:fc:d1:
         e0:2d:30:b4:ce:fc:ca:de:fa:a2:da:d1:56:f2:86:fe:4a:d9:
         df:53:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:23 2026 by rpki-client