Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/424C5A8D6BB2C966347D9D6030EE2504C1547766.cer
File:                     424C5A8D6BB2C966347D9D6030EE2504C1547766.cer (raw, json)
Hash identifier:          4QuAleGjq1saROBX1vZ+ABvljufb6I03Ip1iESMLBrA=
Subject key identifier:   42:4C:5A:8D:6B:B2:C9:66:34:7D:9D:60:30:EE:25:04:C1:54:77:66
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       51930E39EA3CDE544DFCAC1F2AD777FA2A9A00DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/424C5A8D6BB2C966347D9D6030EE2504C1547766.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Mar 2026 13:42:09 +0000
Certificate not after:    Thu 25 Mar 2027 13:47:09 +0000
Subordinate resources:    AS: 269056
                          IP: 45.178.204.0/22
                          IP: 2804:5ec8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:93:0e:39:ea:3c:de:54:4d:fc:ac:1f:2a:d7:77:fa:2a:9a:00:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 13:42:09 2026 GMT
            Not After : Mar 25 13:47:09 2027 GMT
        Subject: CN=424C5A8D6BB2C966347D9D6030EE2504C1547766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:5c:d2:16:55:3c:cb:1f:3d:1a:a3:f2:9f:
                    87:ea:49:8c:8e:6f:b4:db:e7:18:89:6d:99:bc:49:
                    eb:f2:46:4a:98:b4:ea:a9:0e:95:81:15:fe:ce:c1:
                    92:30:3d:8a:d8:f1:4c:ed:5e:ea:3a:73:f0:7d:89:
                    c9:53:c2:2a:d5:87:38:97:35:ba:ac:05:07:ad:c1:
                    6d:1d:72:83:a9:c8:7a:28:4f:b5:6d:43:d4:d7:69:
                    35:44:35:21:44:2b:87:f7:4e:5d:31:a9:7a:b4:c2:
                    98:d3:72:eb:e1:ff:95:0a:9c:f6:0a:15:ce:da:a1:
                    68:4e:37:6d:64:ef:fd:42:4e:aa:f6:85:00:a9:b2:
                    81:45:64:11:94:3d:15:53:3e:d3:2c:b4:cd:15:41:
                    5d:1d:e3:69:f2:8e:78:6c:fd:e0:19:10:a1:b2:9a:
                    dd:ad:8d:0b:de:21:64:84:93:17:39:ba:21:c2:31:
                    f9:2e:2f:3c:9e:6c:19:4e:15:2f:c1:74:d8:75:88:
                    a7:09:c0:d5:28:35:b6:e4:aa:63:e3:62:69:a7:61:
                    74:b1:ad:3c:19:61:8b:c4:af:e4:ff:8c:c4:6e:dc:
                    e9:8c:ac:24:e9:2e:47:5b:33:09:9a:a8:c3:ec:5f:
                    8f:b1:87:ea:83:76:8b:2d:fe:05:b2:f2:c7:32:af:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:4C:5A:8D:6B:B2:C9:66:34:7D:9D:60:30:EE:25:04:C1:54:77:66
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/424C5A8D6BB2C966347D9D6030EE2504C1547766.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/22
                IPv6:
                  2804:5ec8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269056

    Signature Algorithm: sha256WithRSAEncryption
         7a:b9:c4:dd:4c:0a:5d:15:4d:3d:d6:83:0c:38:d4:f6:35:c7:
         6d:9e:9c:d3:a2:37:78:44:dc:35:a1:e8:3f:cc:c9:0f:32:13:
         8f:88:80:1c:76:6c:a8:60:89:dc:03:ce:73:d4:3a:1f:84:43:
         c9:5e:d5:18:6e:4d:82:76:bd:43:43:87:b3:55:54:cd:f8:3d:
         b4:9c:97:45:13:fb:6c:be:77:75:2a:0a:35:d6:e0:a1:83:ce:
         97:36:23:fa:3b:bf:9c:36:51:62:5c:45:01:51:7d:3a:ce:a8:
         0d:85:cc:90:6f:31:9a:6c:19:a5:d8:cd:23:45:04:c6:1e:08:
         f5:71:cc:7e:4a:17:60:44:28:96:dd:f7:04:c3:d9:a9:20:5b:
         e9:aa:63:97:11:e0:d7:7e:f3:0b:0f:75:31:07:1d:a6:bd:e0:
         b3:ff:c3:88:50:85:a0:80:93:e3:98:e2:e1:80:ed:16:25:05:
         f9:84:50:02:97:c0:2d:2b:82:6f:17:e4:2c:6c:9c:c6:73:2c:
         91:2c:50:8d:35:e4:67:f5:02:0b:d2:02:6f:e8:98:b7:61:be:
         27:90:f4:04:1d:d0:0e:1c:9e:2c:74:80:a9:b5:26:5c:92:e3:
         2e:4f:7d:60:32:78:97:7e:85:72:ff:bf:8c:22:4d:e2:a5:29:
         c7:0d:44:53
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUZMOOeo83lRN/KwfKtd3+iqaAN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAzMjYxMzQyMDlaFw0yNzAzMjUxMzQ3MDlaMDMxMTAvBgNV
BAMTKDQyNEM1QThENkJCMkM5NjYzNDdEOUQ2MDMwRUUyNTA0QzE1NDc3NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzL1zSFlU8yx89GqPyn4fqSYyO
b7Tb5xiJbZm8SevyRkqYtOqpDpWBFf7OwZIwPYrY8UztXuo6c/B9iclTwirVhziX
NbqsBQetwW0dcoOpyHooT7VtQ9TXaTVENSFEK4f3Tl0xqXq0wpjTcuvh/5UKnPYK
Fc7aoWhON21k7/1CTqr2hQCpsoFFZBGUPRVTPtMstM0VQV0d42nyjnhs/eAZEKGy
mt2tjQveIWSEkxc5uiHCMfkuLzyebBlOFS/BdNh1iKcJwNUoNbbkqmPjYmmnYXSx
rTwZYYvEr+T/jMRu3OmMrCTpLkdbMwmaqMPsX4+xh+qDdost/gWy8scyr5cdAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCTFqNa7LJZjR9
nWAw7iUEwVR3ZjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVZC
WjhZVnA1ZW1WWkIycUVoTXNWWkJKOGpqaGlTOE5CcUJ2dWtmZThMQ2EvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVW
Qlo4WVZwNWVtVlpCMnFFaE1zVlpCSjhqamhpUzhOQnFCdnVrZmU4TENhLzAvNDI0
QzVBOEQ2QkIyQzk2NjM0N0Q5RDYwMzBFRTI1MDRDMTU0Nzc2Ni5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbLMMA0EAgACMAcDBQAoBF7IMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbADANBgkqhkiG9w0BAQsFAAOCAQEAernE3UwKXRVNPdaD
DDjU9jXHbZ6c06I3eETcNaHoP8zJDzITj4iAHHZsqGCJ3APOc9Q6H4RDyV7VGG5N
gna9Q0OHs1VUzfg9tJyXRRP7bL53dSoKNdbgoYPOlzYj+ju/nDZRYlxFAVF9Os6o
DYXMkG8xmmwZpdjNI0UExh4I9XHMfkoXYEQolt33BMPZqSBb6apjlxHg137zCw91
MQcdpr3gs//DiFCFoICT45ji4YDtFiUF+YRQApfALSuCbxfkLGycxnMskSxQjTXk
Z/UCC9ICb+iYt2G+J5D0BB3QDhyeLHSAqbUmXJLjLk99YDJ4l36Fcv+/jCJN4qUp
xw1EUw==
-----END CERTIFICATE-----
Generated at Thu Apr 9 09:44:11 2026 by rpki-client