Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
File:                     CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer (raw, json)
Hash identifier:          8odFIHhaMsOWyZ0MShzVd+V9KnTAKQRYzcfozG3GA0w=
Subject key identifier:   CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       06AEAF1094FE109E5BFBD39F2B3569A5BE719561
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Feb 2026 19:38:51 +0000
Certificate not after:    Thu 04 Feb 2027 19:43:51 +0000
Subordinate resources:    AS: 263400
                          IP: 177.222.232.0/21
                          IP: 2804:15a4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 20:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ae:af:10:94:fe:10:9e:5b:fb:d3:9f:2b:35:69:a5:be:71:95:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  5 19:38:51 2026 GMT
            Not After : Feb  4 19:43:51 2027 GMT
        Subject: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:f6:94:86:f8:d6:26:4e:fe:7d:00:19:06:
                    b1:c9:e7:22:f7:c4:70:ad:f5:5d:d7:99:cb:e5:37:
                    09:cb:c5:a7:b2:cd:ff:c8:ab:bc:c0:35:79:75:c9:
                    2f:3a:3f:a7:32:d9:33:bd:28:6d:f9:9e:34:c8:2f:
                    b1:b4:31:ee:fb:3e:00:7e:f3:d3:ea:75:13:46:90:
                    8a:3f:70:64:96:4d:88:f3:d7:fb:24:e7:5e:97:9e:
                    a9:e8:60:7a:1e:67:15:e5:91:22:a2:d3:2f:1b:da:
                    33:ad:64:80:f5:b9:67:a1:df:50:45:2f:26:1e:57:
                    2f:f1:a5:dc:51:1f:26:2f:0c:80:2b:2e:bd:5c:45:
                    0e:b9:fe:9c:80:6e:b5:0b:12:62:5f:d0:2d:42:21:
                    74:13:bd:e6:f3:74:72:2c:0a:58:c0:50:ed:fc:31:
                    2f:a0:87:1e:63:65:ea:c4:d1:75:84:a2:a6:94:fa:
                    c0:74:dd:4e:75:4f:69:71:3c:14:63:c9:a4:6a:56:
                    76:03:55:f4:f9:6e:5b:84:08:ae:98:f6:c8:6b:f3:
                    7a:97:be:bc:ff:8b:f6:6e:67:46:09:8e:df:b7:a3:
                    d6:b9:e2:ce:0b:15:4d:59:b7:2a:fb:1b:8f:70:79:
                    51:3e:f2:d5:b9:44:24:e1:33:f4:3d:12:23:45:3f:
                    68:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.232.0/21
                IPv6:
                  2804:15a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263400

    Signature Algorithm: sha256WithRSAEncryption
         06:fd:d8:89:cd:43:79:53:1a:a1:6d:1d:95:fd:8a:cf:71:36:
         13:6d:ad:c6:f7:14:27:ad:5a:27:05:11:71:5c:9e:0e:34:3b:
         11:9e:64:ff:e1:8c:82:ab:e7:3a:53:ab:f2:98:8e:b3:eb:0f:
         f3:1b:30:f1:1c:3e:bd:4a:81:7c:2a:36:d9:e1:52:a0:b1:c5:
         2e:ef:b5:71:49:b9:60:a2:c4:c6:0a:96:7b:93:32:cc:07:3b:
         cc:6c:c6:87:53:0d:79:3a:79:e0:a3:8c:8b:a0:67:c5:e8:e7:
         9a:53:eb:6f:7d:83:6e:b9:1a:b4:8a:04:82:d2:b2:31:11:47:
         e0:b9:92:c9:53:5c:e1:7c:fe:a4:1e:02:4a:09:a1:7d:4d:cd:
         c3:73:8e:34:41:08:6e:2b:53:ba:5d:1d:5a:58:26:53:c5:f0:
         35:fb:27:19:4c:5d:a0:e3:f1:b5:4c:d2:74:9f:cd:31:72:e0:
         06:ee:f0:8b:69:5c:6d:b8:de:c9:d5:d9:c4:fb:08:da:63:45:
         88:cc:44:2b:d9:05:19:ac:7a:87:e1:05:62:e8:d5:41:93:25:
         11:c4:e0:b1:cc:bd:38:e7:82:91:ba:62:0a:ce:c6:2d:2d:51:
         db:42:43:d3:8f:ce:12:90:86:72:43:0f:7a:1d:bc:62:4d:ec:
         82:b3:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:04:15 2026 by rpki-client