Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/35248DE460997A8581D1487D69B81A4E42C335CA.cer
File:                     35248DE460997A8581D1487D69B81A4E42C335CA.cer (raw, json)
Hash identifier:          HxAYB9mLNhrWklHZLHSy7jfrF+w6l+wOhVINyNO14UA=
Subject key identifier:   35:24:8D:E4:60:99:7A:85:81:D1:48:7D:69:B8:1A:4E:42:C3:35:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       34A136508DC5E74F04984FB0CEEF80EEE0FFE903
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Feb 2026 19:08:55 +0000
Certificate not after:    Thu 11 Feb 2027 19:13:55 +0000
Subordinate resources:    AS: 28614
                          IP: 187.85.112.0/20
                          IP: 201.54.192.0/20
                          IP: 2801:80:3560::/44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a1:36:50:8d:c5:e7:4f:04:98:4f:b0:ce:ef:80:ee:e0:ff:e9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 12 19:08:55 2026 GMT
            Not After : Feb 11 19:13:55 2027 GMT
        Subject: CN=35248DE460997A8581D1487D69B81A4E42C335CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:fa:6d:94:e4:6c:3e:e1:44:d7:41:74:00:
                    5d:7c:e7:00:ff:42:9f:6c:af:bd:60:a0:9d:15:62:
                    c2:b9:1d:7c:d0:29:3c:2b:6f:49:85:9d:bf:a5:d0:
                    31:88:62:8e:54:2f:0b:98:9d:f9:c8:a6:41:a9:c9:
                    2b:98:db:de:fc:a2:d2:50:4f:73:6c:95:03:ea:38:
                    1e:e0:cb:11:f2:c1:4c:1e:82:4d:71:37:d1:1d:65:
                    0c:bf:46:49:2e:2d:01:b7:6b:c3:a6:59:c0:63:94:
                    f8:38:fc:5f:e8:55:5e:20:c9:19:73:12:b2:8b:f5:
                    dd:0e:df:8f:83:b4:cf:85:33:9c:1d:7f:63:b1:17:
                    c7:8c:e1:a6:9f:31:35:f3:f1:f7:3e:32:71:c0:6e:
                    2a:01:7b:cf:78:66:e5:5c:34:85:b6:d1:cd:64:6d:
                    a7:9b:ec:c4:98:c3:e7:b9:ef:8b:92:58:0a:1a:9b:
                    b9:61:1e:e8:48:59:64:c9:0b:a1:52:7e:5b:26:83:
                    f0:e3:57:71:b9:e4:b0:7a:93:33:c9:4c:7e:84:7b:
                    e7:9a:bd:87:d0:59:2d:a2:ca:75:33:a6:e7:c7:55:
                    a8:ce:a4:f3:11:7e:cf:65:59:c7:aa:fb:92:fc:8e:
                    ce:ef:a4:c8:8a:fb:e7:25:b1:8d:c6:b1:69:25:58:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:24:8D:E4:60:99:7A:85:81:D1:48:7D:69:B8:1A:4E:42:C3:35:CA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.112.0/20
                  201.54.192.0/20
                IPv6:
                  2801:80:3560::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28614

    Signature Algorithm: sha256WithRSAEncryption
         06:ef:58:1e:af:98:99:bb:54:e4:b0:81:79:31:c2:7e:23:8d:
         e3:31:bd:ff:5b:6f:f1:15:07:d3:33:b7:a7:8c:62:2f:19:16:
         f4:99:b4:58:a1:0a:c6:59:c2:9f:a5:62:3d:d2:f5:81:b9:0f:
         ee:49:2a:b3:c9:fc:61:db:e2:a9:1e:fa:4f:07:a5:c8:ff:1e:
         24:f5:1a:1c:0d:69:0e:06:67:d0:00:9a:9b:ad:9a:63:8f:82:
         b9:07:e9:9a:51:4c:a4:cd:58:0d:a4:4f:a7:91:3d:2e:f4:b5:
         ba:a1:bc:55:2b:02:e5:b7:24:1b:fc:7b:48:e0:a0:14:45:9e:
         35:f7:82:9d:df:eb:47:81:d7:8d:4b:b6:90:df:65:93:3d:05:
         1a:3c:26:eb:c8:a9:f6:cd:be:f6:e0:80:b8:0f:a4:ea:a0:64:
         11:11:88:e2:4b:cd:75:53:13:42:ec:c8:6d:6f:3c:07:2c:8e:
         d4:f1:6c:38:57:07:70:2e:d8:9b:c8:c5:ae:dc:3d:10:bb:88:
         aa:3a:24:d4:7d:c5:70:c2:2d:dd:7e:76:e9:70:1b:87:c4:96:
         ff:f7:9a:93:e6:8e:9d:f4:7d:a8:a4:5f:5a:b9:c9:65:dd:f0:
         10:df:e0:8f:50:bb:c0:d6:7d:12:ce:e8:71:ba:ad:df:ab:70:
         fb:06:f7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:21:47 2026 by rpki-client