Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
File:                     CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer (raw, json)
Hash identifier:          swR02vO1FLw+BC+JEwu2UJB/x9Q7KXnw6sOMrkvExsw=
Subject key identifier:   CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B6B2440E8F6F8BB1F6DCD05D280FFE25CCCB833
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 07 Feb 2026 13:19:54 +0000
Certificate not after:    Sat 06 Feb 2027 13:24:54 +0000
Subordinate resources:    AS: 265078
                          IP: 170.233.112.0/22
                          IP: 2804:3270::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 20:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6b:24:40:e8:f6:f8:bb:1f:6d:cd:05:d2:80:ff:e2:5c:cc:b8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  7 13:19:54 2026 GMT
            Not After : Feb  6 13:24:54 2027 GMT
        Subject: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9a:6d:6b:7b:e6:01:0a:58:3b:1b:b6:07:e6:
                    3a:67:4a:41:5a:f5:80:9d:5d:63:23:e8:2f:4b:43:
                    4e:41:77:cc:8e:a8:31:8a:01:2d:e8:13:d7:4b:dd:
                    e1:f0:5a:e9:96:0f:ec:3a:5e:28:9b:81:d3:ae:75:
                    a4:ef:8f:92:78:2c:0e:01:b2:22:8b:c5:6e:da:3a:
                    e4:11:d4:2b:92:22:88:da:eb:4e:68:2b:f9:14:e5:
                    18:64:ad:3b:b7:fb:72:18:72:77:b8:22:8a:b9:1b:
                    c7:8b:61:e4:06:0c:cb:02:09:7a:6b:10:d2:dc:79:
                    7c:73:c5:de:31:a5:11:be:27:63:73:28:70:1c:29:
                    c9:e6:48:68:0e:e3:52:e6:71:f3:8b:04:71:bc:9a:
                    d2:74:e9:f0:9b:ec:4a:b4:22:fe:a2:4b:ee:0c:20:
                    e2:06:0c:eb:a7:9c:6e:da:f9:26:37:01:14:70:d0:
                    79:b4:aa:ee:d7:10:80:e8:0c:27:d2:3d:06:18:fe:
                    0a:56:8a:30:fc:03:a4:96:c1:e1:34:be:dd:25:47:
                    31:f0:3d:a5:a4:c4:09:b1:ec:86:f0:4e:4f:51:fd:
                    bb:12:ae:a0:ba:35:48:f2:0d:7e:0e:51:85:e7:be:
                    7a:bf:52:6a:31:00:24:09:0b:31:9b:fc:71:75:79:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.112.0/22
                IPv6:
                  2804:3270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265078

    Signature Algorithm: sha256WithRSAEncryption
         b8:d3:42:ad:1d:88:e0:69:11:95:1a:5a:e6:f8:73:a2:b0:fa:
         fa:f2:60:9e:0e:3b:c3:ed:3c:9e:51:2e:43:b2:5e:0b:e4:b0:
         96:90:0a:ec:ea:6c:9e:23:a6:81:53:1b:d3:6d:d1:b3:0d:5e:
         f1:8e:a6:03:d5:86:ba:13:e8:df:d7:eb:64:38:cf:49:46:c9:
         80:55:bd:9b:a6:fc:ff:ae:b1:b0:48:2e:37:55:90:b9:46:89:
         ae:30:62:72:e3:b2:a2:ac:80:56:b4:f2:70:bd:40:05:97:d2:
         35:bf:84:24:5f:b5:1e:ca:2b:a6:ed:e1:a9:2e:61:28:cd:63:
         a2:a2:ed:ba:02:47:23:1d:0e:62:4a:a4:c6:07:f7:87:67:46:
         68:5e:f7:8d:29:5b:61:f1:b6:44:aa:62:e1:72:e5:f6:68:13:
         13:a6:74:7b:22:5e:07:60:46:00:fd:e0:7c:e9:4f:eb:9a:12:
         9b:2c:20:2f:ed:59:b6:b2:10:13:4d:7b:98:d0:a6:31:1d:cc:
         b0:f4:c7:69:be:34:d8:29:c7:d7:e3:20:ab:35:fe:b8:b6:3f:
         88:f6:4c:b2:ab:2f:15:65:2a:44:aa:76:da:ea:03:4b:bd:61:
         08:ce:d3:30:55:bc:c3:ad:0c:11:e6:59:68:4b:ee:d3:9c:be:
         28:80:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:49:56 2026 by rpki-client