Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
File:                     870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer (raw, json)
Hash identifier:          Y2HNpSWgH2gXh/i4XvprCXN+RExz28PoUSPpKP5l8i0=
Subject key identifier:   87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C2B2BE4DE515B9FA01003F0367A8BE2C9762E4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Aug 2026 18:59:37 +0000
Certificate not after:    Fri 27 Aug 2027 19:04:37 +0000
Subordinate resources:    AS: 262369
                          IP: 138.0.44.0/22
                          IP: 143.137.68.0/22
                          IP: 170.247.244.0/22
                          IP: 170.254.184.0/22
                          IP: 177.130.80.0/20
                          IP: 2804:86c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 06:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2b:2b:e4:de:51:5b:9f:a0:10:03:f0:36:7a:8b:e2:c9:76:2e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 28 18:59:37 2026 GMT
            Not After : Aug 27 19:04:37 2027 GMT
        Subject: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:60:7f:60:ad:c5:93:62:2e:16:2e:87:e5:
                    93:19:68:f4:38:af:68:c6:d2:51:91:de:99:d5:ef:
                    6c:91:15:91:f9:5b:77:e6:6a:08:9d:9e:f4:87:f7:
                    e2:a1:24:bf:85:35:92:c9:41:60:c9:30:72:da:0b:
                    97:a2:e7:0b:1d:b1:92:9a:aa:34:b2:18:15:f7:7c:
                    b6:64:29:c0:0f:f2:8c:d5:86:71:f8:74:d0:c1:0a:
                    62:0a:ec:a1:4d:62:ea:98:2d:a7:43:a1:e4:e6:3d:
                    6c:c8:7b:67:d2:be:f0:47:8a:7b:ec:4a:9a:72:46:
                    9d:5a:cc:80:5d:ec:11:7f:ad:28:9d:f8:a9:4e:19:
                    75:6e:16:4b:47:27:f7:89:02:d1:78:49:68:e0:22:
                    6f:a7:5d:a0:e6:ad:ac:ce:3e:7a:82:44:ea:11:d3:
                    c7:0b:7d:bb:2a:bb:a0:ed:67:60:82:80:84:92:31:
                    98:68:8c:02:0b:e2:87:5c:1c:14:85:1d:c3:63:1a:
                    82:19:91:63:60:f9:95:e5:2d:a1:56:c5:d2:19:2e:
                    a2:b7:8d:92:c6:c0:97:88:af:82:0c:97:3a:b9:b6:
                    a1:95:0c:81:9e:d2:85:cb:fe:82:70:be:73:50:2b:
                    d1:9b:0d:0b:74:fb:c2:d0:0c:1f:ca:89:9b:6d:f3:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.44.0/22
                  143.137.68.0/22
                  170.247.244.0/22
                  170.254.184.0/22
                  177.130.80.0/20
                IPv6:
                  2804:86c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262369

    Signature Algorithm: sha256WithRSAEncryption
         ac:31:1d:52:ba:cd:1d:88:43:04:c0:43:ae:69:5a:77:aa:8a:
         f5:5d:77:ee:77:dc:1e:fb:e7:41:00:85:d9:94:24:5f:46:1c:
         e2:d7:60:6d:de:bd:ba:f1:6c:28:25:c1:54:87:01:e0:e1:3c:
         54:d3:ae:17:e7:0c:dd:0b:08:00:d2:a0:d8:c7:46:e5:38:ca:
         0b:8e:f6:68:4f:f8:a5:39:c5:98:60:e4:87:72:f5:4d:1b:31:
         25:c8:46:34:ea:af:bb:2e:8e:9d:08:8b:29:d8:99:ea:0b:e4:
         66:da:77:fb:d7:86:54:1a:4c:d5:d5:ac:2f:17:23:ca:e9:8b:
         d6:ac:1d:60:3a:05:cb:a2:42:10:e8:20:4c:ef:d2:35:2c:44:
         c9:04:7e:21:2f:9b:f7:b7:5e:ac:52:ec:c8:fc:e2:65:cd:62:
         44:32:b5:15:06:b1:7f:3a:a6:3a:2c:af:0a:b1:67:66:9c:3c:
         13:e9:73:c1:c5:d8:f2:d2:e1:79:13:43:31:24:cb:c2:af:e1:
         e0:fe:36:9a:ec:b6:0d:d3:83:a6:39:37:61:08:de:60:15:a7:
         92:f4:0d:33:36:b9:24:ce:7c:de:ce:fa:c9:d2:ff:fc:9b:1c:
         36:b5:50:e5:8a:c6:64:7d:a8:8a:c3:30:03:53:47:50:bf:97:
         6c:48:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:03:56 2026 by rpki-client