Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
File:                     81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer (raw, json)
Hash identifier:          8QksDRqVTcaJSn66GjmAbim5fW9BoWm1wHQ02BoRgwg=
Subject key identifier:   81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49D48D9B40A1CD64A54DFFB52CD8C0E556FD067D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Apr 2026 14:27:28 +0000
Certificate not after:    Wed 28 Apr 2027 14:32:28 +0000
Subordinate resources:    AS: 53153
                          IP: 138.204.220.0/22
                          IP: 186.209.96.0/20
                          IP: 187.61.96.0/20
                          IP: 2804:738::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 May 2026 01:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d4:8d:9b:40:a1:cd:64:a5:4d:ff:b5:2c:d8:c0:e5:56:fd:06:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 29 14:27:28 2026 GMT
            Not After : Apr 28 14:32:28 2027 GMT
        Subject: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:75:97:0d:d9:ae:b7:db:87:f8:65:c8:53:
                    db:97:44:fe:71:4a:76:11:da:b7:76:50:c2:6a:5a:
                    b4:39:1d:a3:e5:84:9b:09:cf:fe:0e:1e:fd:d6:e4:
                    37:d3:ad:68:77:5e:a2:fb:81:c4:a1:63:25:21:85:
                    7c:d1:45:57:aa:29:96:ae:d3:12:2e:48:9e:94:60:
                    f6:57:3a:68:0d:84:7a:41:6b:80:1e:a8:fd:45:c4:
                    8c:b4:f0:2b:06:6a:be:49:ac:c0:c3:e0:ac:2e:ad:
                    97:9f:f6:68:f2:12:09:16:23:17:8f:59:11:1a:c2:
                    fa:14:b6:bc:ca:59:6d:ef:c9:3d:5f:ff:17:05:63:
                    2a:48:69:27:9d:30:15:1f:1d:4b:7e:26:cb:7e:8e:
                    4b:fa:f0:14:85:15:ac:e8:ab:23:ce:17:d4:7a:54:
                    7b:0c:f2:25:c2:c1:d5:69:72:9f:3e:55:32:97:ff:
                    31:93:e5:fa:b0:74:b7:a1:9b:ab:6f:48:46:00:ec:
                    bd:2a:1e:1a:b7:b4:27:4d:9b:d3:e1:64:96:33:59:
                    6e:c2:ea:db:6b:c1:68:1f:cc:30:da:10:f8:29:58:
                    9d:ae:31:6f:44:21:7f:23:ee:db:c1:cf:27:f4:35:
                    cd:cd:02:d4:ce:65:70:af:d0:ca:92:7e:d1:d8:25:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.220.0/22
                  186.209.96.0/20
                  187.61.96.0/20
                IPv6:
                  2804:738::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53153

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:a9:ea:aa:34:2d:33:42:22:0e:27:27:c1:e2:cf:e3:6c:
         25:06:00:3c:9e:40:c0:91:af:76:f5:99:f6:b9:cf:07:76:23:
         09:ba:c5:97:ea:c7:3d:c9:dd:de:c0:a5:f1:27:b2:70:c0:eb:
         02:fb:5e:92:e6:89:b6:b5:e9:c5:22:82:25:ea:03:00:8c:a3:
         57:45:10:aa:01:cb:06:d0:84:fc:56:d5:ed:0c:cd:c6:8b:1e:
         19:93:f5:7c:e2:26:dd:6f:89:b9:db:ef:58:0e:38:7a:04:17:
         87:4b:43:e7:d4:d8:21:54:97:e4:70:58:e3:c9:f1:77:29:1c:
         0a:6e:c6:75:09:9a:37:a6:31:8d:aa:d2:61:e3:3e:f6:14:10:
         53:14:1c:88:16:80:9f:b4:51:34:2a:20:d4:d7:dd:12:e3:96:
         5a:0f:f0:66:a3:9d:e7:ac:01:ad:e5:fe:cf:15:f3:b1:d8:b9:
         bd:a4:e5:03:8d:a3:48:00:dd:4e:40:ff:35:85:91:1d:01:35:
         d3:e9:b4:a5:bc:b7:34:ae:69:8e:99:93:86:8d:36:31:f0:99:
         79:e7:47:58:a6:a6:86:e4:6f:45:ff:2a:b0:7f:94:e2:bc:d7:
         19:4d:81:3e:a0:4b:2a:a9:e2:ab:8c:30:0d:28:65:b1:b8:8c:
         26:ef:fc:98
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUSdSNm0ChzWSlTf+1LNjA5Vb9Bn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA0MjkxNDI3MjhaFw0yNzA0MjgxNDMyMjhaMDMxMTAvBgNV
BAMTKDgxRjk2OTk4OTIyRUEyMUZBMTAxMzM3MEVBQjg0ODBFNUVEQjlGNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPnWXDdmut9uH+GXIU9uXRP5x
SnYR2rd2UMJqWrQ5HaPlhJsJz/4OHv3W5DfTrWh3XqL7gcShYyUhhXzRRVeqKZau
0xIuSJ6UYPZXOmgNhHpBa4AeqP1FxIy08CsGar5JrMDD4KwurZef9mjyEgkWIxeP
WREawvoUtrzKWW3vyT1f/xcFYypIaSedMBUfHUt+Jst+jkv68BSFFazoqyPOF9R6
VHsM8iXCwdVpcp8+VTKX/zGT5fqwdLehm6tvSEYA7L0qHhq3tCdNm9PhZJYzWW7C
6ttrwWgfzDDaEPgpWJ2uMW9EIX8j7tvBzyf0Nc3NAtTOZXCv0MqSftHYJWSzAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSB+WmYki6iH6EB
M3DquEgOXtufXDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm5z
ZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJCSmgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJu
c2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAvODFG
OTY5OTg5MjJFQTIxRkExMDEzMzcwRUFCODQ4MEU1RURCOUY1Qy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCiszcAwQEutFgAwQEuz1gMA0EAgACMAcDBQAoBAc4
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDPoTANBgkqhkiG9w0BAQsFAAOCAQEA
Fe2p6qo0LTNCIg4nJ8Hiz+NsJQYAPJ5AwJGvdvWZ9rnPB3YjCbrFl+rHPcnd3sCl
8SeycMDrAvtekuaJtrXpxSKCJeoDAIyjV0UQqgHLBtCE/FbV7QzNxoseGZP1fOIm
3W+JudvvWA44egQXh0tD59TYIVSX5HBY48nxdykcCm7GdQmaN6YxjarSYeM+9hQQ
UxQciBaAn7RRNCog1NfdEuOWWg/wZqOd56wBreX+zxXzsdi5vaTlA42jSADdTkD/
NYWRHQE10+m0pby3NK5pjpmTho02MfCZeedHWKamhuRvRf8qsH+U4rzXGU2BPqBL
Kqniq4wwDShlsbiMJu/8mA==
-----END CERTIFICATE-----
Generated at Thu May 7 00:04:52 2026 by rpki-client