Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
File:                     81693D2B616AFC0CE814A28BA2622B591A667447.cer (raw, json)
Hash identifier:          3AAUP/aYlnCescUhrxqDwDhsIIqA0Nl/UsjIBoYOiIY=
Subject key identifier:   81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C7E91FB4848A06A3FB2A225D3D77782FF096C6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Apr 2026 17:48:39 +0000
Certificate not after:    Mon 05 Apr 2027 17:53:39 +0000
Subordinate resources:    AS: 268976
                          IP: 45.165.204.0/22
                          IP: 45.171.244.0/22
                          IP: 45.176.48.0/22
                          IP: 45.177.76.0/22
                          IP: 45.179.16.0/22
                          IP: 45.186.192.0/22
                          IP: 45.237.40.0/22
                          IP: 131.100.156.0/22
                          IP: 131.108.104.0/22
                          IP: 131.221.232.0/22
                          IP: 138.186.32.0/22
                          IP: 143.202.164.0/22
                          IP: 170.79.44.0/22
                          IP: 170.79.104.0/22
                          IP: 170.231.252.0/22
                          IP: 170.245.152.0/22
                          IP: 177.53.104.0/22
                          IP: 177.53.156.0/22
                          IP: 177.54.192.0/20
                          IP: 177.87.36.0/22
                          IP: 177.137.144.0/21
                          IP: 179.97.72.0/21
                          IP: 186.232.252.0/22
                          IP: 187.73.144.0/20
                          IP: 191.241.16.0/22
                          IP: 191.243.12.0/22
                          IP: 200.33.152.0/21
                          IP: 201.71.240.0/20
                          IP: 2804:5d80::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 13:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7e:91:fb:48:48:a0:6a:3f:b2:a2:25:d3:d7:77:82:ff:09:6c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  6 17:48:39 2026 GMT
            Not After : Apr  5 17:53:39 2027 GMT
        Subject: CN=81693D2B616AFC0CE814A28BA2622B591A667447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:b2:2e:ba:61:f6:a2:c0:0d:6c:5c:76:a9:
                    01:2e:eb:19:f8:e2:37:f2:28:10:ee:89:e2:ce:71:
                    d5:4c:8b:e8:d0:76:76:32:22:09:97:40:f9:eb:09:
                    c5:5a:dc:c9:40:04:eb:3f:1a:b6:73:aa:fb:67:8d:
                    be:0d:8a:ab:04:2e:4f:d5:dc:1d:94:26:d9:fb:1e:
                    51:91:96:c6:ad:ee:c3:20:7f:b8:a0:38:86:0c:af:
                    52:96:95:12:89:7d:c2:9b:8a:aa:31:dd:f6:54:d4:
                    27:4b:76:0d:02:02:4a:5c:d2:2f:a0:da:46:4d:e0:
                    65:5a:69:c2:8e:ed:33:7f:b7:c8:eb:ca:ca:af:6b:
                    20:f0:91:84:62:d1:3d:9b:46:e6:04:46:65:03:af:
                    fb:10:55:93:ff:b3:1f:7e:05:06:4f:cb:d1:be:81:
                    14:3b:fd:48:34:98:32:d2:d5:74:e5:4a:77:b9:89:
                    ef:c0:8f:2b:61:f4:0e:3b:00:2f:68:e5:8b:1c:66:
                    62:3e:9f:3d:14:d2:10:0b:d9:95:65:8f:89:43:84:
                    89:75:44:c0:37:54:8b:57:80:54:c3:0e:96:f9:7a:
                    93:ba:c2:31:f1:d3:6e:4b:da:a8:74:0f:b8:a8:13:
                    f5:e9:b3:4f:e5:d7:24:bd:ae:7f:9b:0f:71:ba:af:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.204.0/22
                  45.171.244.0/22
                  45.176.48.0/22
                  45.177.76.0/22
                  45.179.16.0/22
                  45.186.192.0/22
                  45.237.40.0/22
                  131.100.156.0/22
                  131.108.104.0/22
                  131.221.232.0/22
                  138.186.32.0/22
                  143.202.164.0/22
                  170.79.44.0/22
                  170.79.104.0/22
                  170.231.252.0/22
                  170.245.152.0/22
                  177.53.104.0/22
                  177.53.156.0/22
                  177.54.192.0/20
                  177.87.36.0/22
                  177.137.144.0/21
                  179.97.72.0/21
                  186.232.252.0/22
                  187.73.144.0/20
                  191.241.16.0/22
                  191.243.12.0/22
                  200.33.152.0/21
                  201.71.240.0/20
                IPv6:
                  2804:5d80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268976

    Signature Algorithm: sha256WithRSAEncryption
         04:93:ea:9f:71:4c:7c:d5:a5:67:eb:57:7a:55:0a:80:4d:f8:
         76:35:36:a8:9b:f4:13:9e:53:fc:dd:ae:51:a6:0a:d6:05:57:
         6d:40:aa:74:09:53:ca:3b:c2:98:8b:b4:fe:9f:f2:1a:b4:3c:
         f4:72:5e:dd:06:9d:4a:36:5b:9c:f8:dc:7e:f0:09:b5:66:76:
         6e:07:93:3b:7e:b3:7e:ee:47:ee:c4:cf:82:fe:ee:0e:32:94:
         4a:31:e1:81:66:df:a0:8d:6c:1f:25:61:2b:a9:3b:fb:3f:9d:
         8b:b2:17:78:bf:f9:09:6a:98:26:53:fe:24:af:aa:42:34:91:
         a1:cb:72:ba:f9:1b:81:b7:28:c3:d5:08:e4:75:5c:7e:29:ea:
         c1:2d:fd:98:87:8d:18:98:bc:54:17:ff:7c:ea:18:06:de:f7:
         e9:fd:a6:2d:b4:fe:b9:62:08:b6:6b:76:43:ed:08:32:e7:2d:
         0b:dc:d5:07:53:4d:c0:28:4c:bd:e0:77:b7:ae:1d:37:f8:6b:
         d6:de:b7:35:e6:68:2d:e2:9a:30:b6:64:6f:52:91:90:23:fc:
         f9:f3:46:c7:59:27:6d:8e:b7:c5:e9:03:48:92:c1:4c:53:14:
         d9:c6:2f:84:2b:f7:8c:a2:e0:e7:b9:1c:7a:9b:15:cd:56:b5:
         ba:02:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:34:53 2026 by rpki-client