Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CFFB2194CC22D7296C482FE78638B1A81D147FD6.cer
File:                     CFFB2194CC22D7296C482FE78638B1A81D147FD6.cer (raw, json)
Hash identifier:          OxdahbEWoHQZ7na6rZow+sj3Rf4NDvd+HdRchlUO79o=
Subject key identifier:   CF:FB:21:94:CC:22:D7:29:6C:48:2F:E7:86:38:B1:A8:1D:14:7F:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62399C5EFF71E6637493E1EA5B80EEFCCBAF79E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/CFFB2194CC22D7296C482FE78638B1A81D147FD6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 May 2026 01:26:42 +0000
Certificate not after:    Tue 18 May 2027 01:31:42 +0000
Subordinate resources:    AS: 268056
                          IP: 45.168.88.0/22
                          IP: 2804:5748::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:39:9c:5e:ff:71:e6:63:74:93:e1:ea:5b:80:ee:fc:cb:af:79:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 19 01:26:42 2026 GMT
            Not After : May 18 01:31:42 2027 GMT
        Subject: CN=CFFB2194CC22D7296C482FE78638B1A81D147FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6b:37:a4:19:df:3e:a4:35:52:34:99:d1:c1:
                    f4:b5:9c:df:21:81:11:80:81:69:fd:2e:cf:42:d6:
                    26:ef:10:bd:9f:ea:7a:c7:c7:35:81:60:f1:8f:ba:
                    8c:bd:a7:24:e9:91:3d:2e:0e:93:ec:f9:99:e1:b4:
                    9a:17:f6:0f:27:9b:79:3b:7d:b4:87:f1:90:4c:41:
                    e0:b7:02:e9:17:7a:0d:1c:d2:8c:64:e7:43:d5:d3:
                    e2:02:ce:44:65:f7:71:f9:b2:da:b9:a9:ad:64:15:
                    d0:5b:c3:be:ca:8a:b4:16:22:82:be:86:d2:43:a8:
                    a7:87:ae:9f:29:df:23:23:57:4f:f3:7c:b2:ae:d5:
                    6a:33:b1:3f:bf:f0:9d:de:48:52:26:cd:f8:21:a0:
                    4b:d1:4d:9c:03:93:8e:a9:4c:94:ac:7c:be:85:81:
                    d6:6f:16:27:08:f5:5d:7b:e2:3e:ac:2b:80:57:66:
                    e4:3e:28:9e:90:e7:c1:25:af:d3:54:d1:88:9d:5a:
                    be:7c:d7:06:b1:41:c5:fe:35:a1:3a:4a:f8:7d:5e:
                    61:c9:0a:04:51:19:1a:4e:e7:ad:50:0d:d8:33:e2:
                    68:fb:37:d8:ec:58:38:bc:1a:24:1d:d7:71:ba:73:
                    af:9a:63:e6:2b:c4:1b:c5:61:10:eb:08:5b:e8:69:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:FB:21:94:CC:22:D7:29:6C:48:2F:E7:86:38:B1:A8:1D:14:7F:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/CFFB2194CC22D7296C482FE78638B1A81D147FD6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.88.0/22
                IPv6:
                  2804:5748::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268056

    Signature Algorithm: sha256WithRSAEncryption
         10:d3:f6:13:10:cc:38:e1:f3:c9:59:81:72:7b:95:50:70:14:
         51:d2:ec:06:9e:86:81:72:09:b5:ce:66:18:7f:59:fb:fd:1d:
         df:8d:ee:37:f4:b9:6c:13:57:4e:a4:6c:89:1f:26:58:91:d1:
         c6:0b:82:89:29:48:1b:fa:a0:b4:3a:55:77:6b:0a:ee:50:cd:
         1c:58:7a:c6:83:43:02:e9:4b:a9:e3:b7:b0:be:18:11:8c:8d:
         cd:b0:70:96:e1:38:b6:92:cb:97:71:e5:3c:52:cf:c3:07:04:
         56:db:2b:b0:7d:2d:0b:46:bc:ff:a3:19:39:db:f5:06:a9:e5:
         e5:6c:a5:a2:00:82:d5:f2:d6:df:22:7a:2a:6d:ae:fe:24:10:
         82:8a:14:d5:0f:98:db:63:36:2a:5d:2f:70:47:c3:73:da:4d:
         ac:47:2b:71:20:de:91:f9:92:15:ee:81:74:61:30:92:cc:4b:
         b6:61:23:bd:dc:a8:fa:df:71:5d:da:45:40:37:28:4e:25:c3:
         fa:d7:10:a5:30:f7:17:d4:16:0a:10:26:ca:35:d1:f3:f0:66:
         fc:bd:99:53:bb:16:01:81:84:04:03:3b:35:9d:4b:ef:73:5f:
         ee:e7:73:b8:6d:55:db:01:4e:5a:64:a8:ed:a1:4f:4a:a3:cc:
         ab:94:28:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 12:48:31 2026 by rpki-client