Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer
File:                     BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer (raw, json)
Hash identifier:          VrDIlwfw0rtVbMu0Z5fR/hiIjnl58NwY5dbKIUDZvws=
Subject key identifier:   BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F5DE38D97B88A6C2CF92610A0B66D6632A32DB2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Feb 2026 16:18:07 +0000
Certificate not after:    Thu 04 Feb 2027 16:23:07 +0000
Subordinate resources:    AS: 268819
                          IP: 45.173.88.0/22
                          IP: 2804:5b1c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 19:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5d:e3:8d:97:b8:8a:6c:2c:f9:26:10:a0:b6:6d:66:32:a3:2d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  5 16:18:07 2026 GMT
            Not After : Feb  4 16:23:07 2027 GMT
        Subject: CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:f5:64:f4:e3:cb:5c:78:05:77:be:a6:b1:
                    9a:0d:38:4b:1c:ec:56:9d:db:b3:ce:1f:6f:d7:71:
                    75:42:f7:83:4c:4a:ae:5f:9c:bf:11:75:e4:ea:b8:
                    a2:10:1d:3c:b7:e9:f5:1a:3a:40:fc:a0:00:17:9f:
                    74:74:1b:bc:0a:74:2d:04:bc:cd:51:a6:17:81:e8:
                    6d:f4:b2:af:2d:e9:3d:51:e0:d7:f2:eb:6b:02:95:
                    87:c1:6b:2d:6c:a1:41:a6:ca:a0:70:8d:b2:f0:54:
                    00:32:04:61:a0:da:56:8e:63:69:ee:72:82:63:8a:
                    9a:29:90:4a:5d:a4:4d:c1:b0:da:9f:07:ec:0d:ec:
                    01:85:07:62:4d:0b:bc:01:7c:d7:1e:80:07:9e:36:
                    b8:4c:dc:fd:9c:28:c9:f1:75:9f:71:93:bb:c2:ad:
                    49:de:0c:70:48:6f:d2:22:d3:a9:d2:12:2d:49:cb:
                    ca:38:75:9a:00:80:70:74:11:cd:2d:fa:3a:a8:41:
                    6e:fa:b2:68:af:c5:b3:67:06:be:f0:aa:5e:60:52:
                    49:cd:5e:a3:32:b3:b5:96:67:df:be:f6:f3:3c:94:
                    8c:8e:86:46:19:d0:af:33:7f:b5:0c:1f:ed:35:a9:
                    78:b2:97:f3:50:a3:a5:8d:4e:67:fe:b4:88:30:5e:
                    5b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.88.0/22
                IPv6:
                  2804:5b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268819

    Signature Algorithm: sha256WithRSAEncryption
         33:c7:1c:ee:39:99:7b:bf:26:20:3a:f0:de:b1:90:e8:49:48:
         09:0d:76:42:6d:68:0c:35:94:23:d7:d8:8d:44:69:e4:91:6b:
         fb:f5:cf:9a:47:25:18:62:84:b3:17:a7:7a:97:32:fc:52:5c:
         de:7a:0b:79:68:9f:ab:7b:b9:33:19:e5:b0:42:ed:f3:9c:2a:
         5a:4e:b2:e8:a6:d6:6f:e5:e9:d6:59:25:70:65:ca:f6:1a:8f:
         b3:2d:6d:2a:8e:33:18:28:5d:c5:61:2d:f7:06:42:f7:99:a5:
         f2:df:4b:c3:ea:40:2c:a5:d0:2f:10:27:b0:54:e0:9e:99:8f:
         28:c4:24:b0:a6:b4:71:87:1a:4a:e4:2a:a8:41:0e:16:c1:32:
         ec:86:41:f8:81:d6:22:e4:8c:74:e9:7d:7f:d8:f0:e4:4d:86:
         d1:39:73:b0:d2:bb:0b:f8:c4:ea:61:3a:51:d8:db:00:8c:65:
         a9:03:46:bd:8a:47:9c:40:57:3f:48:51:d7:dc:d4:2c:e3:a8:
         86:fa:83:d2:29:29:f6:f6:d9:2f:12:fc:9e:af:5c:e4:df:e1:
         45:ed:2a:1d:74:51:a5:de:06:4d:1c:c5:61:d9:ac:14:5a:47:
         b4:1d:0e:cd:43:28:d2:e7:c1:ae:42:5a:da:0e:f5:26:c8:3f:
         27:f5:04:2a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUH13jjZe4imws+SYQoLZtZjKjLbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAyMDUxNjE4MDdaFw0yNzAyMDQxNjIzMDdaMDMxMTAvBgNV
BAMTKEJFQTU5NTk4M0ZDNjhDOEVGOUE1NDZEN0U5QTRBNDhERkUyQTg4RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChC/Vk9OPLXHgFd76msZoNOEsc
7Fad27POH2/XcXVC94NMSq5fnL8RdeTquKIQHTy36fUaOkD8oAAXn3R0G7wKdC0E
vM1RpheB6G30sq8t6T1R4Nfy62sClYfBay1soUGmyqBwjbLwVAAyBGGg2laOY2nu
coJjipopkEpdpE3BsNqfB+wN7AGFB2JNC7wBfNcegAeeNrhM3P2cKMnxdZ9xk7vC
rUneDHBIb9Ii06nSEi1Jy8o4dZoAgHB0Ec0t+jqoQW76smivxbNnBr7wql5gUknN
XqMys7WWZ9++9vM8lIyOhkYZ0K8zf7UMH+01qXiyl/NQo6WNTmf+tIgwXlvFAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+pZWYP8aMjvml
RtfppKSN/iqI0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTNi
ZWNFUFBnOGcyVUdaTEZLZG1MblhtZ0EzbTh0NXY5cVRoY1k5VFAzMXkvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUz
YmVjRVBQZzhnMlVHWkxGS2RtTG5YbWdBM204dDV2OXFUaGNZOVRQMzF5LzEvQkVB
NTk1OTgzRkM2OEM4RUY5QTU0NkQ3RTlBNEE0OERGRTJBODhEMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLa1YMA0EAgACMAcDBQAoBFscMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQaEzANBgkqhkiG9w0BAQsFAAOCAQEAM8cc7jmZe78mIDrw
3rGQ6ElICQ12Qm1oDDWUI9fYjURp5JFr+/XPmkclGGKEsxenepcy/FJc3noLeWif
q3u5MxnlsELt85wqWk6y6KbWb+Xp1lklcGXK9hqPsy1tKo4zGChdxWEt9wZC95ml
8t9Lw+pALKXQLxAnsFTgnpmPKMQksKa0cYcaSuQqqEEOFsEy7IZB+IHWIuSMdOl9
f9jw5E2G0TlzsNK7C/jE6mE6UdjbAIxlqQNGvYpHnEBXP0hR19zULOOohvqD0ikp
9vbZLxL8nq9c5N/hRe0qHXRRpd4GTRzFYdmsFFpHtB0OzUMo0ufBrkJa2g71Jsg/
J/UEKg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:35 2026 by rpki-client