Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
File:                     2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer (raw, json)
Hash identifier:          zIJ4cgsB9ezxcBVNfB4UG5YXFzP2bvuSKy11KzpQmPQ=
Subject key identifier:   2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D974E779E9AEF6BBA363C1C517E6B8EDDEA4C05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Aug 2026 16:17:47 +0000
Certificate not after:    Fri 20 Aug 2027 16:22:47 +0000
Subordinate resources:    AS: 264948
                          IP: 168.232.196.0/22
                          IP: 2804:3064::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:97:4e:77:9e:9a:ef:6b:ba:36:3c:1c:51:7e:6b:8e:dd:ea:4c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 21 16:17:47 2026 GMT
            Not After : Aug 20 16:22:47 2027 GMT
        Subject: CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:77:d0:1a:99:8d:48:81:8b:5b:82:01:23:
                    0f:2a:de:d8:25:80:18:d6:e3:a1:ce:50:c4:f5:9d:
                    43:21:0d:ed:4d:7c:42:30:2c:94:bd:1d:fc:4e:d4:
                    5c:87:93:92:67:92:05:cc:e9:79:72:dd:f0:2e:80:
                    c5:86:54:23:f3:06:14:f7:2b:89:58:78:21:c3:1c:
                    c5:41:e7:e0:54:57:4b:6f:a6:eb:23:51:3c:fd:6f:
                    89:01:74:37:82:24:ca:29:f1:cd:5f:93:49:93:7e:
                    96:3f:d5:49:ee:68:5c:34:9b:a0:72:d2:39:c7:a7:
                    03:ec:0b:ec:c6:61:bf:65:b7:5d:53:37:86:82:2e:
                    c5:f6:71:20:69:b4:84:2f:3c:97:60:1a:40:90:d4:
                    35:ec:71:17:dd:bc:2f:ff:1e:26:09:ac:c8:35:23:
                    e9:41:a6:40:73:8e:14:55:f6:1d:68:e5:c4:75:4a:
                    0f:2e:ae:3f:a1:c8:19:9f:f0:68:a2:dd:05:df:9f:
                    2a:d4:c3:1f:1f:05:26:0f:3f:21:eb:de:a8:d5:53:
                    ec:6f:b2:dc:9f:75:72:e8:5c:ae:ef:06:79:62:c5:
                    1f:78:ce:01:ea:3c:68:ae:cc:cc:61:bd:59:cb:09:
                    1c:c2:a5:3a:eb:0f:43:09:c0:9e:05:df:c1:1b:15:
                    03:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/22
                IPv6:
                  2804:3064::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264948

    Signature Algorithm: sha256WithRSAEncryption
         24:bd:ad:30:b8:bd:4b:70:40:c3:93:37:fc:61:e7:13:f8:51:
         55:24:d7:46:d2:fb:12:f9:eb:57:1f:83:e9:d1:e9:c5:75:ce:
         24:d7:05:0c:6e:20:8f:f5:b1:44:72:3a:62:30:8d:36:83:43:
         77:a9:f9:94:13:a1:0a:81:b7:f1:c5:2f:1a:b9:09:4a:3d:16:
         9a:5b:f3:9f:ee:fe:f1:ae:d7:d0:68:39:58:14:9d:4b:ef:ea:
         37:00:c7:0d:95:94:d9:15:61:ae:3f:ac:d5:f1:d9:c2:c7:f8:
         b6:7b:a5:00:18:5c:64:a4:90:07:c6:97:31:61:fe:85:2a:f7:
         b2:40:40:c5:92:00:6d:39:ac:a4:b8:be:0e:c9:54:d0:41:c4:
         37:c5:a3:f6:7f:26:22:73:b2:3a:b7:6d:ea:8b:b4:fb:b0:bc:
         3c:23:85:1d:51:6f:91:92:74:23:71:93:92:d3:3d:c5:7a:12:
         15:da:80:ac:87:66:ca:d6:86:44:17:93:71:ed:68:f4:3d:7b:
         13:ed:b9:fd:8f:df:3f:3a:56:b1:5f:a3:4a:38:66:b7:6b:eb:
         01:59:7d:73:95:fd:70:e6:ad:bb:d5:54:4c:0a:44:ab:b4:26:
         aa:17:9a:db:ba:f3:ff:29:07:90:86:eb:11:39:14:e5:04:de:
         ac:76:f6:bd
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDZdOd56a72u6NjwcUX5rjt3qTAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA4MjExNjE3NDdaFw0yNzA4MjAxNjIyNDdaMDMxMTAvBgNV
BAMTKDJGOUY4NDI3QkIyMjEyQzI4RTAzN0Y1RjM4Njk4QTM5MTJEQjdEMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdXfQGpmNSIGLW4IBIw8q3tgl
gBjW46HOUMT1nUMhDe1NfEIwLJS9HfxO1FyHk5JnkgXM6Xly3fAugMWGVCPzBhT3
K4lYeCHDHMVB5+BUV0tvpusjUTz9b4kBdDeCJMop8c1fk0mTfpY/1UnuaFw0m6By
0jnHpwPsC+zGYb9lt11TN4aCLsX2cSBptIQvPJdgGkCQ1DXscRfdvC//HiYJrMg1
I+lBpkBzjhRV9h1o5cR1Sg8urj+hyBmf8Gii3QXfnyrUwx8fBSYPPyHr3qjVU+xv
styfdXLoXK7vBnlixR94zgHqPGiuzMxhvVnLCRzCpTrrD0MJwJ4F38EbFQNvAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvn4QnuyISwo4D
f184aYo5Ett9IDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUJl
bk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRqY1gvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FC
ZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzAvMkY5
Rjg0MjdCQjIyMTJDMjhFMDM3RjVGMzg2OThBMzkxMkRCN0QyMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqOjEMA0EAgACMAcDBQAoBDBkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQK9DANBgkqhkiG9w0BAQsFAAOCAQEAJL2tMLi9S3BAw5M3
/GHnE/hRVSTXRtL7EvnrVx+D6dHpxXXOJNcFDG4gj/WxRHI6YjCNNoNDd6n5lBOh
CoG38cUvGrkJSj0Wmlvzn+7+8a7X0Gg5WBSdS+/qNwDHDZWU2RVhrj+s1fHZwsf4
tnulABhcZKSQB8aXMWH+hSr3skBAxZIAbTmspLi+DslU0EHEN8Wj9n8mInOyOrdt
6ou0+7C8PCOFHVFvkZJ0I3GTktM9xXoSFdqArIdmytaGRBeTce1o9D17E+25/Y/f
PzpWsV+jSjhmt2vrAVl9c5X9cOatu9VUTApEq7Qmqhea27rz/ykHkIbrETkU5QTe
rHb2vQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 15:18:58 2026 by rpki-client