Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
File:                     DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer (raw, json)
Hash identifier:          YAqb/MV8eP5qzp8b8OgPt/mpKB6+tRKaWsGgrrwVjN0=
Subject key identifier:   DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2179721A7F041BBA4C07B4663B343A5BE9530AAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Feb 2026 13:58:14 +0000
Certificate not after:    Fri 05 Feb 2027 14:03:14 +0000
Subordinate resources:    AS: 273706
                          IP: 2804:8b00::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 23:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:79:72:1a:7f:04:1b:ba:4c:07:b4:66:3b:34:3a:5b:e9:53:0a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 13:58:14 2026 GMT
            Not After : Feb  5 14:03:14 2027 GMT
        Subject: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:21:f1:c6:b6:2f:85:32:07:e4:98:c9:d8:
                    2a:0c:6e:14:d2:2a:ca:dc:9d:2d:c2:04:e6:2c:f5:
                    51:76:dd:b0:ce:9f:d0:85:1c:ba:4b:82:a6:44:ef:
                    f2:98:e9:cd:7c:85:3f:24:0c:66:54:d9:50:c6:e6:
                    cc:2c:f2:b7:c8:82:7a:68:12:bd:08:71:9f:fb:88:
                    8c:73:f6:d3:24:34:e3:a4:2c:ea:94:d3:f9:71:bb:
                    d1:9e:e5:50:d7:14:6d:5b:c4:fa:33:01:95:4e:aa:
                    78:37:8d:8b:be:f3:50:46:d4:07:b3:1d:bb:e0:47:
                    fe:34:76:db:5e:d9:9b:24:89:e5:04:34:ab:da:f3:
                    63:ab:62:5a:9e:8f:2d:17:a9:f1:41:74:4f:47:3a:
                    eb:82:8e:49:00:d4:70:69:ca:3f:28:45:86:26:45:
                    f8:da:f8:e9:4a:ef:59:76:15:4b:dc:ad:ec:9d:2a:
                    de:42:e6:87:a3:9d:3a:1b:45:34:73:93:b6:5e:6a:
                    e4:69:6b:4d:24:22:35:68:e1:5d:a1:70:78:1b:36:
                    7f:05:db:cd:6f:f0:06:1f:46:e4:ee:63:2b:2c:3f:
                    4b:ec:51:a9:e5:8c:d8:fe:2c:04:02:1b:80:c0:20:
                    f6:18:78:34:1e:92:f0:54:b1:b6:ba:78:bf:4f:be:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273706

    Signature Algorithm: sha256WithRSAEncryption
         59:26:9b:cc:94:85:dd:91:d6:4e:bf:ad:74:36:3e:30:3b:7f:
         3d:9b:7c:90:2c:b7:6c:7d:78:89:e3:3c:7e:e5:06:ea:9f:e7:
         fc:0d:ab:9d:6b:14:29:1a:ed:01:1c:c3:4a:ee:03:0b:f7:05:
         37:8b:d8:8f:8c:46:a2:9a:c7:8e:08:47:56:97:cf:92:f7:d8:
         64:43:24:d5:45:aa:33:6d:23:c0:d2:dc:6f:87:93:a5:8a:0d:
         66:89:6f:5e:10:b5:b1:00:27:b4:5a:d4:ad:8f:ae:36:59:ef:
         17:d3:36:a3:f7:4c:09:37:eb:03:55:87:e5:69:d7:55:f0:6c:
         9a:21:91:53:a7:ae:4c:a2:75:0c:28:19:76:3d:ac:20:2c:c6:
         48:5e:16:ac:af:5b:66:e6:e8:15:38:c4:5a:ce:24:85:03:c5:
         7e:18:e4:d1:fb:02:3c:4f:7c:af:28:47:a3:4e:ea:bf:78:d9:
         99:b3:a1:6f:df:68:89:87:55:ba:da:83:47:91:cf:d9:69:5c:
         fa:4c:8a:dc:bd:7f:91:4d:7e:cb:d6:1f:89:cc:b9:e7:61:2b:
         03:c3:7d:6e:b9:37:5e:c5:99:e2:c9:cd:a5:b7:81:af:07:34:
         63:85:22:1d:a4:83:c5:37:67:99:b5:bf:45:1c:4c:a9:4c:fe:
         dc:d4:93:7e
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUIXlyGn8EG7pMB7RmOzQ6W+lTCqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAyMDYxMzU4MTRaFw0yNzAyMDUxNDAzMTRaMDMxMTAvBgNV
BAMTKERGRDQyMEJFRUU4NjY1OEM2OUJGN0JGMDI1QUJERUIzNUY3MjNCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALyHxxrYvhTIH5JjJ2CoMbhTS
KsrcnS3CBOYs9VF23bDOn9CFHLpLgqZE7/KY6c18hT8kDGZU2VDG5sws8rfIgnpo
Er0IcZ/7iIxz9tMkNOOkLOqU0/lxu9Ge5VDXFG1bxPozAZVOqng3jYu+81BG1Aez
HbvgR/40dtte2ZskieUENKva82OrYlqejy0XqfFBdE9HOuuCjkkA1HBpyj8oRYYm
Rfja+OlK71l2FUvcreydKt5C5oejnTobRTRzk7ZeauRpa00kIjVo4V2hcHgbNn8F
281v8AYfRuTuYyssP0vsUanljNj+LAQCG4DAIPYYeDQekvBUsba6eL9PvkTrAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTf1CC+7oZljGm/
e/Alq96zX3I7PTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTR1
SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0V3YvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk0
dUp2cEIyS0FyQnlmU1JjcktUNEpEV0gxZEpDTnpjbW1MdXBkdlNzdFd2LzEvREZE
NDIwQkVFRTg2NjU4QzY5QkY3QkYwMjVBQkRFQjM1RjcyM0IzRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASLADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LSowDQYJKoZIhvcNAQELBQADggEBAFkmm8yUhd2R1k6/rXQ2PjA7fz2bfJAst2x9
eInjPH7lBuqf5/wNq51rFCka7QEcw0ruAwv3BTeL2I+MRqKax44IR1aXz5L32GRD
JNVFqjNtI8DS3G+Hk6WKDWaJb14QtbEAJ7Ra1K2PrjZZ7xfTNqP3TAk36wNVh+Vp
11XwbJohkVOnrkyidQwoGXY9rCAsxkheFqyvW2bm6BU4xFrOJIUDxX4Y5NH7AjxP
fK8oR6NO6r942ZmzoW/faImHVbrag0eRz9lpXPpMity9f5FNfsvWH4nMuedhKwPD
fW65N17FmeLJzaW3ga8HNGOFIh2kg8U3Z5m1v0UcTKlM/tzUk34=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:47:54 2026 by rpki-client