Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.cer
File:                     AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.cer (raw, json)
Hash identifier:          w5NLn6xf4c51GT8DmGog4CoZo9xNp5cqID91BllLSXk=
Subject key identifier:   AC:1B:27:13:D2:95:4E:D5:AC:23:E7:DE:CD:46:C0:42:57:4F:9A:1E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3EC757104F89CB8A5FFF3F8A52D7F04157741094
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Mar 2026 19:13:02 +0000
Certificate not after:    Fri 26 Mar 2027 19:18:02 +0000
Subordinate resources:    AS: 268925
                          IP: 45.176.4.0/22
                          IP: 2804:5cb4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 18:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c7:57:10:4f:89:cb:8a:5f:ff:3f:8a:52:d7:f0:41:57:74:10:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 27 19:13:02 2026 GMT
            Not After : Mar 26 19:18:02 2027 GMT
        Subject: CN=AC1B2713D2954ED5AC23E7DECD46C042574F9A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:89:e7:e3:b3:b1:8d:f6:5d:18:e5:cf:e2:1a:
                    5c:72:f5:12:2a:15:e6:63:da:85:b2:2a:78:91:68:
                    66:f9:49:d1:19:8b:1a:d0:85:10:b6:5c:2a:52:da:
                    eb:8b:54:31:3b:d6:ab:cb:6b:59:2f:82:da:86:0a:
                    90:11:17:6e:19:01:1e:be:21:cd:fc:e0:ce:b8:6b:
                    d6:3b:28:52:54:c0:67:a1:65:d3:e8:0b:f7:b4:ca:
                    0f:7a:60:1d:80:24:f1:33:33:1e:3c:79:a6:85:d0:
                    8d:2c:b8:ab:74:1e:7a:d8:43:e0:ae:38:2c:59:80:
                    db:22:90:e6:cc:c1:a0:0d:fc:05:fc:f8:fb:af:f9:
                    6c:a8:37:60:ff:98:30:ce:18:23:89:54:92:4b:35:
                    bc:26:1a:f9:ed:e9:17:8c:4d:66:4f:ff:fa:9e:d1:
                    88:59:39:1a:da:bc:35:95:f4:84:41:dc:e8:cd:d0:
                    09:ce:71:7b:ee:25:3d:13:46:4d:67:fd:c9:7b:ad:
                    04:09:52:9c:b4:0e:e9:4b:5a:61:5c:26:c0:14:55:
                    e3:1b:60:f0:90:4e:4c:aa:74:9e:97:f5:01:20:6c:
                    c2:89:3b:3b:d4:1c:9a:83:a5:e5:cb:07:82:d0:eb:
                    7a:52:ec:e4:38:62:18:10:c2:89:c9:fd:d5:b4:db:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:1B:27:13:D2:95:4E:D5:AC:23:E7:DE:CD:46:C0:42:57:4F:9A:1E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/22
                IPv6:
                  2804:5cb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268925

    Signature Algorithm: sha256WithRSAEncryption
         34:fd:4b:e2:ff:f1:59:fa:6b:33:51:de:00:29:74:f1:60:ee:
         30:26:fa:7e:6c:16:67:52:f2:e6:b1:9d:0c:6f:09:4f:76:de:
         ed:be:ac:ee:e1:40:d1:95:e3:ae:23:24:57:17:2b:c1:58:ea:
         cd:ca:ee:fe:1b:bf:5f:e8:4a:75:f3:f3:01:bb:b2:95:f1:96:
         70:90:f1:62:6e:e5:7a:50:d9:2b:bb:fe:45:ac:ac:b6:e4:8a:
         31:a8:7f:26:a8:04:e3:aa:c0:29:6b:9e:00:23:79:22:d5:91:
         4d:6a:af:52:3e:08:28:f1:c4:45:36:19:13:d8:a2:b8:b9:5e:
         e0:e8:2f:7d:1c:aa:8c:49:d6:4a:c0:4b:d6:74:b1:67:75:d4:
         65:35:96:d2:25:9c:c1:a5:17:f6:fe:d5:90:ef:ce:a4:cc:4d:
         d3:94:61:88:42:66:5a:47:5c:9c:09:93:02:b4:5d:21:3b:9a:
         74:40:30:90:d8:29:d8:c4:ef:46:8a:8b:48:11:5f:3c:d8:4a:
         a4:d1:45:81:f6:59:84:91:c1:2e:93:1e:f1:7e:eb:6b:05:d3:
         05:bf:fe:95:39:c9:a8:1a:0a:07:2b:ba:10:ee:14:c0:c8:f7:
         a4:3b:76:4d:f3:8e:18:d8:31:d8:be:39:97:ab:1d:00:02:4b:
         8a:6c:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:53:45 2026 by rpki-client