Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
File:                     3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer (raw, json)
Hash identifier:          uHTo1Jy/p0PIKY8grKo27JPEH6RLr5c5kedw70qfkj4=
Subject key identifier:   3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       171A6664BE6167D53BB497EDD5A14E42331A1F8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Feb 2026 19:37:54 +0000
Certificate not after:    Mon 08 Feb 2027 19:42:54 +0000
Subordinate resources:    AS: 265062
                          IP: 170.231.156.0/22
                          IP: 2804:3234::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1a:66:64:be:61:67:d5:3b:b4:97:ed:d5:a1:4e:42:33:1a:1f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  9 19:37:54 2026 GMT
            Not After : Feb  8 19:42:54 2027 GMT
        Subject: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:fd:81:5d:81:aa:5c:12:0e:4d:81:30:aa:
                    1d:03:2d:0c:44:31:5e:09:16:3b:12:d4:76:74:da:
                    b4:b0:b7:74:de:3b:9c:24:41:0b:a0:f6:6e:23:ff:
                    39:42:ae:8c:3b:ac:0c:b4:9e:ff:82:bf:5f:87:01:
                    a6:eb:6d:db:6a:b8:54:fb:d4:ab:73:a3:b0:8e:8c:
                    47:73:d5:4c:7d:78:18:ef:53:21:06:60:71:e9:ab:
                    90:fa:07:e9:43:63:ec:63:19:32:1a:b7:bc:4f:de:
                    50:14:fe:b6:0c:ca:f6:01:e0:d6:a9:90:14:79:7f:
                    fa:14:01:9a:b2:f9:24:dd:f1:0a:5d:8b:02:00:6e:
                    f9:c0:e1:e5:23:fb:d6:b0:ee:89:ef:95:3a:5a:45:
                    04:b8:ac:d3:a6:18:19:34:e8:4f:11:77:5d:11:10:
                    1b:b8:f0:06:45:f4:63:3e:e5:fa:3d:b3:92:10:fc:
                    89:c1:89:29:35:39:d8:58:54:80:bf:8a:c1:47:c5:
                    c8:f7:80:e7:49:e1:3c:a8:ad:a5:4e:d7:4d:dd:0f:
                    a7:34:da:0d:d4:77:fa:c7:40:ad:32:89:30:92:69:
                    84:76:26:6c:60:c6:d4:68:82:06:f4:7a:03:59:39:
                    51:79:a4:9e:f0:f1:36:ff:86:a2:67:4b:20:f2:cd:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.156.0/22
                IPv6:
                  2804:3234::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265062

    Signature Algorithm: sha256WithRSAEncryption
         94:06:b8:24:ab:bb:30:7d:a2:bc:a4:ed:08:b0:37:93:11:df:
         3c:33:7b:90:68:1c:24:39:22:8d:17:18:e4:e2:40:dc:67:0d:
         dd:e7:a4:a1:01:52:a3:4b:7c:48:50:c4:f3:77:c9:51:3b:73:
         fe:ff:a7:90:21:66:82:ea:37:98:ef:d9:67:63:5c:a1:83:d9:
         93:8d:8c:36:9c:2f:24:59:48:04:67:3b:a5:32:0b:f9:30:4a:
         eb:f8:8d:6d:11:01:5a:72:fb:b8:38:e2:8e:01:31:65:3d:21:
         7a:92:19:3e:37:3c:cc:63:c9:93:54:c1:85:29:e1:6c:34:c8:
         85:aa:5c:0f:6b:a7:1f:53:fa:54:6a:5c:87:60:ae:2a:db:a4:
         1c:88:f5:6e:fb:9b:83:31:b7:ba:2c:ce:54:04:91:f9:ba:18:
         ae:ae:99:47:50:78:44:da:33:ee:31:3d:7a:69:09:68:1c:41:
         2e:88:d4:c8:81:7c:fd:62:78:7b:c7:ef:07:c3:24:42:e9:68:
         b0:55:15:70:61:17:27:0f:cb:fc:f1:67:71:87:13:d2:19:2a:
         04:db:16:91:a6:1e:c7:9c:9b:13:0a:d0:81:5c:6f:f2:22:6a:
         3c:84:db:04:b9:6c:fa:c0:8b:6b:5e:65:03:86:19:c0:25:6b:
         d2:58:f4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:25:20 2026 by rpki-client