Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
File:                     D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer (raw, json)
Hash identifier:          eKD9VLP/Ol14cd4fg5dVDH1rvcYLQCd9t8jnymA94lA=
Subject key identifier:   D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2C60EA531990E41E5B35AF6384A4210C8336B92B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Feb 2026 13:33:30 +0000
Certificate not after:    Tue 09 Feb 2027 13:38:30 +0000
Subordinate resources:    AS: 266109
                          IP: 45.5.236.0/22
                          IP: 2804:3ac8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:60:ea:53:19:90:e4:1e:5b:35:af:63:84:a4:21:0c:83:36:b9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 10 13:33:30 2026 GMT
            Not After : Feb  9 13:38:30 2027 GMT
        Subject: CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:60:bf:68:d8:17:b2:92:de:83:76:d0:a5:74:
                    14:aa:6c:13:e4:5d:52:04:8f:b9:e8:ee:a0:fd:58:
                    1e:70:7f:8b:9a:b9:f6:bd:fb:08:c2:6e:2e:ad:e8:
                    66:0f:99:0f:26:a8:84:ea:9b:85:9b:93:a4:59:dc:
                    96:d3:58:97:7f:3b:3a:73:d2:b2:ce:88:d6:26:c1:
                    b6:05:2f:26:eb:e0:dc:2d:c4:12:41:00:e8:35:2d:
                    00:be:8b:f8:7c:1e:3e:c8:9e:b0:04:13:d7:64:fc:
                    b4:e4:7d:6c:2b:60:38:78:37:b0:50:3e:dd:da:48:
                    f0:18:bd:73:bb:74:85:a3:46:29:5e:d3:9a:95:e5:
                    53:49:85:0b:b6:65:9e:33:bf:39:f8:52:c9:59:28:
                    c8:c7:6c:f8:a9:03:84:17:5e:09:a1:a7:95:80:2f:
                    64:e5:76:9c:65:78:a6:6f:71:cc:c1:56:b2:f9:e3:
                    20:42:b9:1f:e4:d5:35:ac:a8:44:aa:14:de:2a:40:
                    15:1a:0b:37:0a:2d:2f:b6:7f:b4:0c:02:42:54:b3:
                    ce:69:a7:cb:d9:3c:01:8d:b5:b8:b4:43:42:56:1f:
                    99:46:70:ba:b8:8b:e3:f6:15:11:bd:66:d1:14:c9:
                    5d:3a:3c:f8:a5:65:96:44:b9:5e:52:ac:db:1a:5c:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.236.0/22
                IPv6:
                  2804:3ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266109

    Signature Algorithm: sha256WithRSAEncryption
         53:cb:7d:27:0d:e8:b4:8b:f0:03:42:a5:1c:55:71:61:5c:8e:
         31:4c:35:9f:f4:4c:0b:d9:70:5c:d1:8e:a0:71:85:ae:52:d4:
         23:80:27:68:36:4f:0d:ec:ca:9e:c3:1d:20:aa:7a:f3:30:e1:
         5d:e3:a0:24:6b:19:98:8e:44:b2:f1:c2:07:af:22:e2:f4:a1:
         ed:58:72:68:00:5b:33:0f:1e:76:9c:22:3e:12:a2:a8:84:d4:
         e9:0c:83:01:20:34:9e:10:30:2f:ce:47:36:cc:45:9b:75:ac:
         fd:a0:d4:ae:b4:3f:7d:30:cb:c7:eb:26:b9:0c:df:9b:90:aa:
         17:a4:bd:4a:54:43:84:4b:35:51:76:cd:d0:93:47:2e:9f:2c:
         21:c4:8e:cc:ed:fc:ce:fc:ad:c3:46:e5:d5:af:0b:3c:35:25:
         91:0d:59:e7:a3:31:34:d6:2a:e6:53:2f:da:e0:32:36:f0:9f:
         1e:33:7d:77:c0:45:82:24:10:24:cc:5d:5e:07:c5:47:9d:e8:
         5a:a9:0a:b7:29:f0:99:43:4e:5c:6e:ad:fe:03:ae:df:f5:72:
         6a:41:8d:80:59:5a:d8:d5:67:4b:b8:f7:d1:8f:2a:30:b0:a7:
         78:1d:12:88:92:ef:5b:9d:9d:b4:53:21:2e:a5:9f:bc:88:78:
         47:a4:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:21:19 2026 by rpki-client