Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
File:                     96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer (raw, json)
Hash identifier:          YjKETyEaYPe5aNwpr1EV8Sh1N+qjTY9lLL3HXJwp8aA=
Subject key identifier:   96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       56434BB6EC077AED3186C5161C7D3E75CA2CFD14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Aug 2026 18:46:13 +0000
Certificate not after:    Fri 13 Aug 2027 18:51:13 +0000
Subordinate resources:    AS: 263478
                          IP: 45.226.232.0/22
                          IP: 138.99.82.0/23
                          IP: 138.204.80.0/22
                          IP: 170.83.180.0/22
                          IP: 191.242.192.0/22
                          IP: 200.5.32.0/22
                          IP: 2804:1278::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:43:4b:b6:ec:07:7a:ed:31:86:c5:16:1c:7d:3e:75:ca:2c:fd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 14 18:46:13 2026 GMT
            Not After : Aug 13 18:51:13 2027 GMT
        Subject: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:f8:ae:ee:3e:1d:52:12:ab:09:74:b1:61:
                    43:05:31:bf:51:1d:30:15:fb:15:34:68:6a:34:ab:
                    76:b5:71:e9:3b:bd:e3:08:9a:8f:43:82:a0:e9:f5:
                    2a:d5:ba:8b:ce:c9:0b:50:ea:25:e0:e9:4b:b6:cd:
                    21:0d:a2:5d:84:85:b6:56:e4:c7:73:d0:ba:94:d1:
                    49:51:54:00:22:86:79:14:b8:6d:de:0e:4d:aa:ea:
                    7a:97:f7:fa:a3:13:db:6a:c6:20:95:c2:6f:74:d5:
                    6b:6a:77:22:06:21:e7:a1:a0:f1:fc:49:49:36:89:
                    23:93:33:fc:98:b8:ec:ba:1e:17:4e:ae:7c:a7:91:
                    bf:c6:f2:ce:6a:27:8f:86:94:89:96:00:7c:45:bc:
                    fd:9e:92:1e:3b:e7:0c:2b:55:17:57:c7:41:c8:90:
                    41:12:51:29:0e:41:be:b8:1f:44:95:42:57:63:17:
                    00:cb:15:41:0a:cb:fe:b1:80:c6:fc:89:b2:f5:26:
                    0b:06:56:69:0f:97:66:5e:0c:e7:d0:c3:51:4a:60:
                    90:5d:d5:68:09:51:bc:31:32:f5:aa:3d:84:b8:0c:
                    25:62:e9:0e:b4:25:fb:83:fa:a2:37:73:52:eb:44:
                    b4:24:d1:f1:1b:41:a3:06:46:75:11:6f:44:c2:e1:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.232.0/22
                  138.99.82.0/23
                  138.204.80.0/22
                  170.83.180.0/22
                  191.242.192.0/22
                  200.5.32.0/22
                IPv6:
                  2804:1278::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263478

    Signature Algorithm: sha256WithRSAEncryption
         d8:0a:cc:5f:d0:b3:c3:21:5a:78:33:e5:6b:31:2d:8e:50:09:
         ca:96:e9:69:d0:e6:82:22:66:1e:b0:2f:0e:34:98:42:35:bd:
         e8:23:63:87:27:7d:8f:c7:9c:17:71:8f:4b:0c:73:ea:cb:26:
         0e:54:2f:51:20:fc:91:e5:ea:3f:c8:ff:4f:96:6d:e4:91:a4:
         80:c5:8b:89:5e:96:e6:63:1e:7e:8f:71:e5:2b:db:dc:24:23:
         2a:4d:23:e7:8d:56:b2:6c:01:b6:38:b1:ac:2d:66:37:ef:6c:
         46:27:37:bf:67:62:d0:c8:59:dd:b3:1f:c7:47:4f:14:06:e6:
         b7:e3:28:5a:c5:8e:5c:79:aa:2a:6e:1d:4c:1e:85:ca:c3:fc:
         e1:b2:35:61:8b:a3:bf:cc:e3:08:f0:76:8e:aa:b4:09:0b:b2:
         df:34:1e:88:d7:a2:48:fa:c7:35:52:dd:37:3a:c5:13:1c:0b:
         a0:52:e7:de:02:10:91:44:3c:12:23:e8:2e:b9:12:4c:5d:45:
         e8:d6:b3:98:75:aa:c8:dc:d5:e6:e7:fc:9c:ea:f5:7c:54:a7:
         24:d3:ed:62:5a:5b:43:8c:a5:05:46:1f:d2:5b:0f:e8:33:a0:
         24:35:90:39:25:ad:54:5b:13:fd:56:d8:17:5b:de:24:ef:39:
         54:f9:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 00:26:08 2026 by rpki-client