Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.cer
File:                     D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.cer (raw, json)
Hash identifier:          OkDxs4xUt/T0GFJtZWiXL2SdurDk2GbzISZ6fAfAalM=
Subject key identifier:   D2:D1:DF:48:E0:3D:EC:67:7A:DB:C3:3C:8C:BE:F8:30:F6:3C:49:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D92DA5775EAF59D54C6DE98C8057449D2C125E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 02 Aug 2026 11:41:11 +0000
Certificate not after:    Sun 01 Aug 2027 11:46:11 +0000
Subordinate resources:    AS: 269091
                          IP: 45.178.188.0/22
                          IP: 2804:5f50::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:92:da:57:75:ea:f5:9d:54:c6:de:98:c8:05:74:49:d2:c1:25:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  2 11:41:11 2026 GMT
            Not After : Aug  1 11:46:11 2027 GMT
        Subject: CN=D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:19:d4:2d:2d:a7:1d:43:16:a2:df:68:13:
                    ab:df:d6:92:17:8d:10:f6:ef:5f:18:5e:e7:b5:67:
                    30:e8:5c:34:df:f8:14:bd:9b:38:0a:f5:b6:bc:cc:
                    7f:80:32:65:36:50:1b:5a:9a:1b:cc:09:7f:51:07:
                    3b:82:82:b2:02:95:03:68:32:2e:47:83:ae:b6:ff:
                    8d:de:de:29:24:1b:16:95:e9:cd:e4:2f:a0:7b:5d:
                    7c:3a:06:e3:fd:7c:08:f3:5a:f1:24:1c:04:cb:25:
                    e6:c1:b2:43:2c:bb:f8:23:2b:40:f7:21:74:3a:70:
                    bf:9f:73:b5:f6:13:d1:8a:98:a3:31:4e:fa:fa:90:
                    8f:55:be:7b:f4:51:d5:25:dd:d1:ce:b3:31:65:bd:
                    28:68:d5:01:f6:43:22:04:0b:76:37:0a:2e:8b:b2:
                    4d:a3:12:98:66:fc:b5:03:92:7a:6b:d3:a0:9f:39:
                    45:e4:a2:f2:b3:13:57:40:01:f9:e8:15:4d:0e:85:
                    3e:3b:03:ea:a8:a6:10:1f:03:e2:e1:ab:92:d4:a6:
                    c1:ef:d2:b4:28:a3:7e:0a:22:de:10:43:dd:4f:be:
                    e5:cf:38:3f:92:68:e6:d7:4e:01:88:38:84:ad:dc:
                    64:be:bc:40:c1:fb:48:b7:a9:17:34:6b:63:a3:25:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:D1:DF:48:E0:3D:EC:67:7A:DB:C3:3C:8C:BE:F8:30:F6:3C:49:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.188.0/22
                IPv6:
                  2804:5f50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269091

    Signature Algorithm: sha256WithRSAEncryption
         00:26:e9:56:8c:38:da:08:f8:df:86:b8:19:72:c5:2f:3a:67:
         5e:e8:16:5f:10:19:fe:4f:d7:68:38:1a:c5:4a:5e:c5:f0:68:
         8d:8b:ef:8c:8a:76:57:93:51:89:48:a3:87:65:65:1c:69:77:
         96:3c:24:7c:01:63:6b:17:20:9c:f5:47:83:8a:16:c4:05:a2:
         02:69:61:67:15:f1:73:b4:eb:c5:06:db:2e:7b:3e:1a:60:ee:
         9d:cb:62:0a:d4:90:cf:82:f0:83:0b:4a:3f:d5:d3:b8:c2:62:
         9f:07:e4:25:bb:fd:e9:b9:4e:61:2e:c8:79:41:21:c4:16:4b:
         e2:a9:cd:38:1d:d6:05:54:23:25:cc:af:dd:e1:dc:23:4d:09:
         36:46:3e:59:27:c8:49:7b:d4:b7:44:a0:f5:ea:00:7f:bc:54:
         48:1c:4f:d7:11:c2:a6:66:1c:3c:30:32:99:bc:c4:69:f1:61:
         d0:58:3f:26:19:b5:dd:a7:a5:48:d0:c6:1b:06:68:26:90:a1:
         ab:c4:07:9f:ec:c4:c1:95:b4:4c:06:93:67:f6:7e:cd:fd:53:
         fa:54:c1:ea:0a:d7:56:46:5e:1b:90:a1:7c:ea:67:db:55:bf:
         b0:df:7b:64:71:00:2b:b5:f4:55:3a:74:af:c3:2b:06:b9:73:
         91:f9:d6:ea
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUXZLaV3Xq9Z1Uxt6YyAV0SdLBJekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA4MDIxMTQxMTFaFw0yNzA4MDExMTQ2MTFaMDMxMTAvBgNV
BAMTKEQyRDFERjQ4RTAzREVDNjc3QURCQzMzQzhDQkVGODMwRjYzQzQ5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELxnULS2nHUMWot9oE6vf1pIX
jRD2718YXue1ZzDoXDTf+BS9mzgK9ba8zH+AMmU2UBtamhvMCX9RBzuCgrIClQNo
Mi5Hg662/43e3ikkGxaV6c3kL6B7XXw6BuP9fAjzWvEkHATLJebBskMsu/gjK0D3
IXQ6cL+fc7X2E9GKmKMxTvr6kI9Vvnv0UdUl3dHOszFlvSho1QH2QyIEC3Y3Ci6L
sk2jEphm/LUDknpr06CfOUXkovKzE1dAAfnoFU0OhT47A+qophAfA+Lhq5LUpsHv
0rQoo34KIt4QQ91PvuXPOD+SaObXTgGIOISt3GS+vEDB+0i3qRc0a2OjJUqJAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTS0d9I4D3sZ3rb
wzyMvvgw9jxJJzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTlH
Slhqa1FiSzhickxjWEdYeGZBb2NRQWV5ZnpzWVlBRlNONGJZb2hOVUIvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E5
R0pYamtRYks4YnJMY1hHWHhmQW9jUUFleWZ6c1lZQUZTTjRiWW9oTlVCLzEvRDJE
MURGNDhFMDNERUM2NzdBREJDMzNDOENCRUY4MzBGNjNDNDkyNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbK8MA0EAgACMAcDBQAoBF9QMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbIzANBgkqhkiG9w0BAQsFAAOCAQEAACbpVow42gj434a4
GXLFLzpnXugWXxAZ/k/XaDgaxUpexfBojYvvjIp2V5NRiUijh2VlHGl3ljwkfAFj
axcgnPVHg4oWxAWiAmlhZxXxc7TrxQbbLns+GmDunctiCtSQz4LwgwtKP9XTuMJi
nwfkJbv96blOYS7IeUEhxBZL4qnNOB3WBVQjJcyv3eHcI00JNkY+WSfISXvUt0Sg
9eoAf7xUSBxP1xHCpmYcPDAymbzEafFh0Fg/Jhm13aelSNDGGwZoJpChq8QHn+zE
wZW0TAaTZ/Z+zf1T+lTB6grXVkZeG5ChfOpn21W/sN97ZHEAK7X0VTp0r8MrBrlz
kfnW6g==
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:11:26 2026 by rpki-client