Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
File:                     AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer (raw, json)
Hash identifier:          CpFyTxM7gifyKqAji58igcZCbmlWkRa645O6SlRblrk=
Subject key identifier:   AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05A5AFCA0653E7E963520831CFF02732F7F322A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Feb 2026 18:23:48 +0000
Certificate not after:    Fri 05 Feb 2027 18:28:48 +0000
Subordinate resources:    AS: 268281
                          IP: 45.237.140.0/22
                          IP: 2804:4ec4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 23:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a5:af:ca:06:53:e7:e9:63:52:08:31:cf:f0:27:32:f7:f3:22:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 18:23:48 2026 GMT
            Not After : Feb  5 18:28:48 2027 GMT
        Subject: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:75:8f:e0:62:97:e4:f1:e3:0b:90:eb:97:
                    dd:77:a8:41:12:dc:58:ff:98:81:07:ad:b1:58:58:
                    5f:2c:aa:91:e5:fb:e1:5b:a8:f5:18:97:31:46:20:
                    27:ca:dd:a9:f4:96:ac:1c:7f:20:6e:27:e7:21:7d:
                    d1:48:9e:5a:1a:c4:d7:ca:ac:3d:95:eb:16:58:bd:
                    08:84:ce:3b:f2:70:1b:7b:fc:6d:ef:cc:b1:9c:bb:
                    11:4c:d1:26:2d:1c:c6:38:71:b1:fb:0a:0d:33:7c:
                    cf:00:8e:36:b3:ac:77:78:cb:74:e1:31:d8:f6:b0:
                    55:c9:cf:a5:f5:c7:64:eb:0a:e1:10:71:1f:9b:bf:
                    05:8b:ac:a2:73:80:8b:24:a7:04:a4:eb:cb:dc:e1:
                    46:db:82:4e:b0:6c:0e:81:eb:d8:80:93:0e:03:99:
                    5b:75:c8:34:ac:48:db:ac:ea:c7:84:5e:0e:5f:b1:
                    05:7c:c5:06:6a:67:f3:83:b6:af:7b:90:76:f9:ce:
                    86:73:8c:1e:64:be:b4:36:4a:c0:88:a3:69:61:db:
                    a2:c2:e1:b5:27:fc:37:51:79:37:66:04:97:d5:ae:
                    3c:df:21:1c:89:80:b3:dc:4e:e6:8d:12:6f:e0:e0:
                    a0:72:c1:f6:26:8e:70:18:59:bf:b8:80:55:07:b2:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.140.0/22
                IPv6:
                  2804:4ec4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268281

    Signature Algorithm: sha256WithRSAEncryption
         5c:9f:08:ab:a6:6b:44:c2:3e:87:52:00:fd:cc:67:49:74:6f:
         8e:c3:b8:b6:ba:16:da:36:a9:43:eb:4e:33:30:f8:18:57:37:
         47:a8:07:3d:ea:37:79:b4:47:b8:22:84:d0:55:51:e0:e0:ec:
         45:ad:64:e5:ed:ef:83:bb:99:5f:e3:9c:9c:98:0d:24:03:3a:
         8c:8a:a1:e7:d5:fd:7f:1a:3c:2b:88:41:56:ac:26:24:a2:85:
         20:81:cc:72:a3:c4:79:d4:43:43:32:2c:19:0e:cd:71:81:a4:
         0b:cb:75:61:3b:c2:14:e0:ab:e4:af:5d:22:fd:42:6a:49:cb:
         48:16:e2:bb:a5:af:ce:ef:74:72:a1:f3:0b:4c:a9:a3:05:c0:
         aa:dd:a3:a0:20:16:e1:5f:53:c2:a2:f1:10:f0:23:01:0a:b0:
         f3:f0:24:c9:fe:83:fc:8e:d6:78:8c:08:db:42:d3:7d:f7:e0:
         39:74:cc:66:d1:09:2d:b0:b2:c2:32:54:17:68:b6:a6:52:e3:
         01:bf:eb:60:17:b7:a7:68:ba:f1:59:09:b6:1f:c6:89:c3:f0:
         c3:e7:02:6b:7e:be:cf:46:76:1a:0d:bd:36:11:ea:6b:0e:86:
         dd:b1:7b:14:75:27:d5:b2:ab:71:38:51:2c:39:56:fe:a8:09:
         9d:05:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:28:56 2026 by rpki-client