Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
File:                     C3976BFC098E04D93A5507BBB046C3608B889670.cer (raw, json)
Hash identifier:          cHPLGmUG9+W+i4KSBeOZdZsWYByJNcxDIN7SR9MHkc4=
Subject key identifier:   C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1AE191B9F1571EBBC40A8AED53D360C01DEE1124
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Feb 2026 18:45:21 +0000
Certificate not after:    Wed 03 Feb 2027 18:50:21 +0000
Subordinate resources:    AS: 269532
                          IP: 45.188.140.0/22
                          IP: 2804:6614::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 19:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e1:91:b9:f1:57:1e:bb:c4:0a:8a:ed:53:d3:60:c0:1d:ee:11:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  4 18:45:21 2026 GMT
            Not After : Feb  3 18:50:21 2027 GMT
        Subject: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:26:3d:f2:70:90:b9:df:e5:37:cf:99:9b:
                    6a:c3:35:2e:89:85:4a:72:f1:96:c4:4f:81:41:c6:
                    33:fc:ba:0f:d4:71:70:1f:85:69:5e:ac:69:54:cb:
                    5e:b1:bf:0e:2a:2a:8f:8a:64:97:0a:1c:7f:ea:d5:
                    ca:a9:5c:f1:27:5e:3f:bc:a5:9d:a1:d9:07:7f:c6:
                    33:8c:52:ab:0d:69:9d:a9:4c:b1:f3:75:32:ce:88:
                    a4:0e:5d:ca:d8:e3:b0:5b:79:26:5b:1b:f7:26:d7:
                    76:6a:aa:0c:d5:15:0c:85:2e:5b:8f:18:ac:05:62:
                    14:44:6a:56:48:3e:00:4a:34:20:08:7d:3f:a5:26:
                    f0:e5:57:02:3e:b9:83:d2:0b:d7:3f:97:7d:2c:3c:
                    e5:bb:b4:05:5e:f8:9b:be:60:3a:00:57:8d:df:5e:
                    d6:61:ef:fe:e9:47:0c:0c:24:48:fd:8b:bf:59:c9:
                    df:0a:bc:62:fa:07:24:2e:16:28:f3:b6:e8:8a:63:
                    bf:62:15:1b:3d:eb:77:c6:b1:83:e7:51:26:89:0a:
                    53:15:e7:15:7e:53:b4:67:f6:16:bb:28:a0:a5:03:
                    c5:c1:33:18:ff:8a:fa:c1:b1:5d:38:79:a8:3d:08:
                    8c:62:19:ac:34:7c:23:71:11:5e:08:1a:88:b8:a8:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.140.0/22
                IPv6:
                  2804:6614::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269532

    Signature Algorithm: sha256WithRSAEncryption
         68:64:78:27:db:66:55:24:66:f3:b6:fa:c3:22:09:2c:9b:33:
         11:fe:df:a5:f5:8f:e3:a5:52:98:da:d8:5b:ae:ba:0f:05:22:
         57:59:e5:c1:91:f1:fe:8a:2b:b7:da:6c:cf:02:75:cc:49:f8:
         97:ba:89:b6:e4:2b:4d:b4:c3:66:21:a2:18:07:47:f0:a3:10:
         d4:c2:f2:32:37:c9:35:b9:9b:7c:fa:d9:24:4a:b5:72:36:5d:
         f6:c0:02:32:26:6f:1c:52:2f:23:35:d5:0d:98:32:1a:a8:86:
         3b:57:6f:06:4c:07:78:15:fb:45:8a:85:64:05:58:25:f2:b0:
         38:eb:2b:f0:3b:b0:d6:b6:bc:4d:f9:33:83:ce:92:71:fe:17:
         7b:63:6f:a7:2f:63:f4:be:1d:46:41:db:4c:d2:ab:67:65:74:
         33:09:ec:09:fe:82:1d:27:e3:b3:df:39:13:16:54:86:d1:78:
         d3:c6:dd:61:51:08:53:c0:05:a7:e8:41:2b:61:a1:fc:94:d4:
         46:ce:92:9f:fa:59:2e:63:b0:7c:40:68:28:4a:e3:8b:bd:f3:
         af:db:e8:bd:2e:3a:cf:83:61:a2:57:6f:6b:75:37:bd:c6:92:
         4c:f5:e7:aa:b4:8f:32:77:c1:57:c3:7d:0c:c6:fb:4d:9b:b1:
         29:7e:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:50 2026 by rpki-client