Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.cer
File:                     9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.cer (raw, json)
Hash identifier:          0hXN6WbAR8tElEMdMbb9hJhh1KjN6bAkl+mSVV3A+Y4=
Subject key identifier:   9A:D0:28:E1:D1:72:F6:58:9C:BC:F8:6A:98:E5:4C:C4:C6:BF:4C:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3984D956BE60FCDE574C023388D901E925F82BE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Feb 2026 20:03:55 +0000
Certificate not after:    Wed 10 Feb 2027 20:08:55 +0000
Subordinate resources:    AS: 52872
                          IP: 168.0.236.0/22
                          IP: 168.197.136.0/22
                          IP: 177.128.192.0/21
                          IP: 2804:88c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:84:d9:56:be:60:fc:de:57:4c:02:33:88:d9:01:e9:25:f8:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 11 20:03:55 2026 GMT
            Not After : Feb 10 20:08:55 2027 GMT
        Subject: CN=9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:f7:07:e4:81:0b:33:0a:ce:4e:26:16:c1:
                    41:7b:2b:ec:cf:86:33:6e:68:2c:61:89:5c:36:4b:
                    59:fd:09:d0:d6:68:37:ff:ca:e4:17:8a:67:ec:55:
                    a3:48:3a:4b:2b:b8:4d:f9:72:54:00:b1:67:7b:63:
                    52:9f:2d:ac:00:59:f0:ca:49:c7:0b:7d:16:24:39:
                    95:2f:1d:f2:d5:4e:d3:fd:b3:eb:9f:67:dc:ce:31:
                    5c:d3:f2:52:9c:1b:ae:9e:84:19:dd:b0:68:ea:ca:
                    84:99:fb:ac:9b:16:4d:02:af:12:53:1c:bb:01:d3:
                    e6:b5:67:f6:de:b0:36:19:c2:2d:6b:7f:6b:ad:5b:
                    41:bf:a8:f0:12:7d:51:d1:69:6b:69:10:42:80:2e:
                    b2:2b:71:8b:a8:e3:47:79:bc:a3:49:1e:de:e0:fa:
                    01:ee:16:d7:32:46:af:1e:3e:83:97:01:47:1f:47:
                    d8:fd:62:8e:f1:a5:24:aa:10:55:67:4e:b6:43:f7:
                    b1:8a:f7:36:bb:3a:44:d1:db:03:40:06:3e:24:f2:
                    3b:dd:3d:4c:83:54:8e:7b:4f:58:8c:4a:04:c5:a3:
                    9d:66:b1:4f:75:b6:02:e4:1a:cc:79:e3:4f:2c:08:
                    80:33:19:1c:24:10:01:8c:2e:a6:1e:2a:df:5c:ae:
                    12:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:D0:28:E1:D1:72:F6:58:9C:BC:F8:6A:98:E5:4C:C4:C6:BF:4C:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.236.0/22
                  168.197.136.0/22
                  177.128.192.0/21
                IPv6:
                  2804:88c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52872

    Signature Algorithm: sha256WithRSAEncryption
         81:ce:40:a2:1f:01:a0:b4:0a:a0:66:d0:12:5f:f4:77:c6:75:
         32:b2:2d:e0:bf:96:96:1b:fb:3f:34:49:f1:c4:77:69:c1:3c:
         51:5d:31:da:05:e8:36:1b:d0:95:9a:93:1a:29:40:62:50:79:
         a2:63:63:1e:6c:03:c0:b4:93:97:ad:35:85:bc:dd:61:cf:23:
         74:51:51:90:7d:4b:ca:d8:10:35:cb:72:4b:d1:93:55:67:e5:
         74:79:94:b6:f5:c8:ae:c2:01:7e:65:29:ed:aa:d3:cc:45:72:
         81:36:8f:93:f9:27:9c:62:fb:9d:41:8e:4a:e7:9d:82:15:1a:
         f9:e1:d2:51:3a:c4:a6:bb:76:72:61:df:ce:60:7b:df:09:2e:
         a7:74:7f:69:6d:9d:17:bc:28:2e:4c:1f:57:24:15:34:59:ac:
         18:a2:78:78:39:09:f5:04:0a:49:e7:16:92:14:81:90:d1:21:
         98:4a:b6:b6:3d:dd:91:e7:b6:6c:dc:fd:0f:c2:bf:af:a3:40:
         99:9f:62:16:4b:c8:05:0a:54:54:27:b5:23:f4:bb:85:01:d6:
         93:40:60:a3:11:4e:82:0f:d8:e4:5e:83:77:4c:13:c3:3c:f8:
         82:84:e7:b2:09:cd:25:16:cf:78:84:45:0d:8b:c7:4d:0f:62:
         51:94:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:10:24 2026 by rpki-client