Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
File:                     89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer (raw, json)
Hash identifier:          /G7zdeYfXqXUG6WuthORMyxt5chsjVkmPSHyj5X48nA=
Subject key identifier:   89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       040C756048C830358887CBE7CA076285DC227B84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Apr 2026 13:33:44 +0000
Certificate not after:    Mon 05 Apr 2027 13:38:44 +0000
Subordinate resources:    AS: 269002
                          IP: 45.176.160.0/22
                          IP: 2804:5df0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0c:75:60:48:c8:30:35:88:87:cb:e7:ca:07:62:85:dc:22:7b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  6 13:33:44 2026 GMT
            Not After : Apr  5 13:38:44 2027 GMT
        Subject: CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:52:2d:0d:2c:58:c7:f3:70:4b:0c:f7:c6:
                    87:99:1d:bf:b6:3d:ea:fd:5a:72:9f:e2:84:8e:4a:
                    90:30:d9:ef:99:c2:34:f3:cd:78:e9:da:41:e4:08:
                    2c:04:f8:a8:e8:81:0b:72:86:12:d9:eb:fb:b3:c9:
                    f6:e0:3a:a8:bd:f4:13:0e:cc:80:e7:c0:0e:d1:30:
                    a8:55:e8:2b:53:19:70:be:d6:0e:09:1e:ef:9a:72:
                    09:9f:c9:94:81:66:62:5e:f7:a9:7e:d2:ed:73:6b:
                    b4:26:e2:9d:e0:3b:7e:93:a3:8d:27:7e:12:08:11:
                    e2:01:12:69:9c:a1:99:1a:55:f8:e4:06:f6:f4:dd:
                    67:e2:90:1d:23:87:e7:0b:ce:b4:6d:04:f7:47:57:
                    c8:33:78:e8:ca:ab:a4:97:21:38:f7:88:50:a7:98:
                    bf:56:8e:b1:a1:06:c4:d7:7a:9d:74:e9:d8:34:06:
                    56:78:7b:7d:5e:b7:16:94:96:48:e1:25:5a:bb:12:
                    1d:55:6e:f3:87:3f:88:95:dd:e5:44:06:e3:5d:20:
                    a5:24:25:f1:f8:4a:a2:74:3c:71:36:fa:23:9b:1f:
                    ae:11:59:c6:01:15:3e:dc:85:2d:95:19:12:19:3d:
                    5e:79:a1:90:f0:ed:3f:39:a9:43:e8:f1:f5:44:f9:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.160.0/22
                IPv6:
                  2804:5df0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269002

    Signature Algorithm: sha256WithRSAEncryption
         d0:c8:3b:19:45:86:37:2b:4c:a7:b4:9e:a1:0d:c0:af:74:e6:
         5c:23:a5:ba:89:85:3f:69:d2:d9:4b:2a:49:4b:e4:42:89:0a:
         95:e3:d2:66:89:40:f5:cc:7d:9a:d7:94:6d:7f:85:81:a5:9f:
         35:62:6f:11:56:8a:d8:64:68:79:60:30:5f:61:65:f4:15:44:
         78:96:f4:09:a7:38:9b:01:92:1a:75:69:cf:7f:1b:41:21:67:
         63:46:3b:bc:5b:aa:da:7f:88:ed:b1:33:ad:19:bd:8c:a4:a1:
         89:20:a0:f3:21:c1:f7:08:cf:1f:47:7e:f8:62:7a:09:84:6b:
         73:be:54:bd:0e:66:bd:63:24:75:a3:5a:87:7c:fb:ea:ce:e2:
         52:3a:fc:21:4a:76:fe:10:4c:c6:db:21:18:72:d6:b8:f9:15:
         60:72:8a:e4:7c:7b:02:31:1c:a3:cb:70:f8:b7:77:e1:14:42:
         52:b4:9f:b6:e9:5d:b8:24:58:6a:3e:fa:b3:41:0a:3c:95:16:
         07:8c:be:23:6a:e8:1d:25:32:a1:37:4e:b0:57:02:23:e0:bb:
         fd:5e:29:7d:27:bc:dc:6b:37:4f:8f:2e:3b:96:77:c0:e2:d7:
         94:81:db:ab:28:cf:f2:65:91:f7:4f:b2:ac:89:ef:8e:34:a3:
         36:c3:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 09:15:39 2026 by rpki-client