Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
File:                     38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer (raw, json)
Hash identifier:          M1nLe9zmhZY9w6gsc4SVrXDRL9uVoXEO6G9ce4UtauI=
Subject key identifier:   38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       06F4CC79A14EDD4F946FD41962CBAA20193D64D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Dec 2025 01:33:36 +0000
Certificate not after:    Thu 24 Dec 2026 01:38:36 +0000
Subordinate resources:    AS: 262808
                          IP: 177.37.112.0/20
                          IP: 177.75.32.0/21
                          IP: 189.90.112.0/20
                          IP: 191.253.208.0/20
                          IP: 2804:1368::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f4:cc:79:a1:4e:dd:4f:94:6f:d4:19:62:cb:aa:20:19:3d:64:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 25 01:33:36 2025 GMT
            Not After : Dec 24 01:38:36 2026 GMT
        Subject: CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:78:ff:a5:04:eb:54:32:92:70:9d:40:3b:
                    dc:35:6e:da:cf:1a:94:52:9f:ba:2b:df:37:eb:ff:
                    cc:01:64:05:98:7c:33:dd:e3:93:b7:c5:56:94:95:
                    1c:32:9c:8a:f6:1e:47:b1:6a:18:b2:d1:61:8e:71:
                    a7:91:dc:fd:7b:d5:90:a4:97:7c:70:fe:8c:cd:8c:
                    23:1e:90:41:ad:1a:21:90:b3:52:dd:e6:be:b3:61:
                    e1:c3:0f:6c:b6:cd:d0:e2:58:42:0d:ae:f2:56:11:
                    63:c3:7d:00:ac:2f:7d:77:09:6b:e8:6c:1e:b8:2e:
                    e2:d4:39:3b:5b:09:02:a9:d6:28:9d:d5:a6:9e:78:
                    03:72:01:cc:9d:a6:1d:96:6c:69:f4:59:cd:7c:c8:
                    a4:21:b4:f0:6b:62:21:cf:3a:26:5d:70:24:74:8a:
                    98:d6:b1:ed:33:24:52:af:57:0d:4e:f3:3a:60:3b:
                    4e:b4:c4:65:9e:e7:01:69:bd:6f:78:d0:84:21:65:
                    51:7d:96:6e:0f:d2:58:b0:db:d5:a3:fb:5a:b8:cf:
                    1b:0a:71:e7:e2:86:00:73:8a:1a:5a:4b:3e:68:1e:
                    0e:a3:88:fe:9c:48:fd:9b:22:b2:f4:8b:a0:b0:e4:
                    16:a6:09:4c:79:02:b1:01:3a:ac:c4:f3:90:53:7b:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.112.0/20
                  177.75.32.0/21
                  189.90.112.0/20
                  191.253.208.0/20
                IPv6:
                  2804:1368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262808

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:6c:12:d9:71:98:2c:e1:52:f0:fc:e6:9f:bc:4b:f7:9f:
         ab:05:bf:e8:85:c7:c0:8d:c5:e3:a5:e4:7e:ff:59:65:b3:15:
         d1:eb:71:aa:43:da:dc:14:7c:69:b7:f8:69:19:e2:ae:6c:04:
         ed:a2:06:98:c4:de:28:3b:45:79:ba:8a:be:95:87:75:0a:e0:
         e5:71:91:4e:f6:3a:99:15:e4:c3:c6:6a:9f:b1:e6:37:35:12:
         ed:05:78:33:ad:01:4a:43:23:14:e5:4b:9a:91:91:67:88:32:
         e6:15:e9:80:a3:cc:3b:c5:51:f9:b8:52:54:d2:f1:89:f4:8a:
         98:9a:93:34:7a:1c:ce:06:7a:46:42:28:37:22:e1:b4:38:11:
         2f:78:5d:4b:e9:25:13:1b:b3:74:25:3e:db:3a:3c:ab:26:b2:
         19:35:05:6b:43:cf:61:b6:ee:3b:68:f6:20:ff:97:77:eb:c2:
         de:2b:11:9f:1f:b0:1d:3a:ca:a1:df:f5:5a:c4:8d:33:32:42:
         c3:ee:e6:3d:f2:58:14:c5:3d:55:ad:06:ae:4e:0c:ad:5b:5d:
         70:ce:06:af:65:c7:a3:c9:d7:a2:d6:6e:40:1d:b7:73:76:08:
         b7:03:75:59:79:8e:5f:9d:55:7a:d5:fe:c4:e8:68:7e:c9:24:
         8a:93:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:24:18 2026 by rpki-client