Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.cer
File:                     FD9B1F96040398EB4A95F392D33F09CA8B1135A8.cer (raw, json)
Hash identifier:          fXWFyc2M0cio0ykXMK4yFMSwNuJKMKwlDyslG+lnBFw=
Subject key identifier:   FD:9B:1F:96:04:03:98:EB:4A:95:F3:92:D3:3F:09:CA:8B:11:35:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D5E80CA229D254A46F949E051D929A508DE285D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 03 Oct 2026 09:21:44 +0000
Certificate not after:    Sat 02 Oct 2027 09:26:44 +0000
Subordinate resources:    IP: 45.177.100.0/22
                          IP: 2804:5d90::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Oct 2026 08:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5e:80:ca:22:9d:25:4a:46:f9:49:e0:51:d9:29:a5:08:de:28:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  3 09:21:44 2026 GMT
            Not After : Oct  2 09:26:44 2027 GMT
        Subject: CN=FD9B1F96040398EB4A95F392D33F09CA8B1135A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:7f:c6:e3:14:3b:b5:c2:b4:2d:25:cc:13:
                    e8:90:50:dc:a2:6e:69:e4:53:be:32:22:91:ef:32:
                    6d:5a:31:bb:e0:f6:8c:e6:93:bd:4e:e0:6e:13:99:
                    61:6e:ff:56:c1:46:82:26:ce:39:0c:7d:74:12:02:
                    81:9c:5b:38:99:39:b3:65:b9:71:58:2a:d4:ef:bb:
                    7c:a0:84:e7:29:9b:89:d4:5c:32:48:dd:d4:39:7a:
                    3d:93:36:b6:db:5c:84:eb:e0:bf:47:a1:f6:c5:74:
                    67:5f:6c:37:3e:e2:09:85:0a:90:39:c9:d7:e2:86:
                    04:89:aa:fb:c0:09:55:94:05:f1:8d:21:97:7d:93:
                    83:04:82:c1:eb:e1:98:3c:3e:68:ec:2e:c7:1e:4d:
                    70:95:ce:85:04:e8:42:3b:77:b4:aa:d4:bd:ee:06:
                    20:4e:fe:f0:cc:45:7a:4f:7b:2e:91:26:25:80:5b:
                    c8:fb:ba:20:69:b5:e6:01:6c:18:34:28:30:7d:0b:
                    c1:2d:04:ea:88:eb:28:90:e7:13:27:dd:b5:99:b1:
                    04:dc:27:44:67:de:c7:ac:b6:3e:1e:f5:17:28:35:
                    e2:f7:9c:11:78:e8:ad:02:62:2a:23:3c:72:82:87:
                    a3:6e:45:9e:39:60:67:93:b7:3c:36:00:69:e9:51:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:9B:1F:96:04:03:98:EB:4A:95:F3:92:D3:3F:09:CA:8B:11:35:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.100.0/22
                IPv6:
                  2804:5d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:5c:93:1d:0e:30:78:83:20:4e:70:a9:47:65:90:96:c4:7b:
         56:27:a2:80:dd:fb:ba:a8:16:5d:a4:d0:ec:c4:c1:5e:98:64:
         fc:a5:0f:73:44:4a:c2:35:f2:0d:fe:c6:af:72:ed:e9:a7:74:
         bf:1d:3d:b6:59:64:6c:0e:58:db:02:27:18:e8:2e:b4:df:ee:
         5d:87:6e:38:c2:f1:16:dc:67:12:9b:08:42:42:02:e2:5b:f9:
         b7:41:42:26:b8:2d:de:02:73:94:ce:23:80:60:a8:4d:1a:64:
         68:53:38:1a:47:09:71:e4:75:0d:6c:8b:38:14:62:01:dd:34:
         74:54:e2:03:54:06:7b:cb:39:d7:ef:48:6d:86:e8:91:a5:fe:
         fc:7f:f4:85:92:fb:e9:17:21:65:bd:23:68:f6:84:bc:49:53:
         00:23:65:bb:a4:80:c6:9a:29:d9:bd:6e:90:cf:22:40:c2:0e:
         5a:bc:dd:96:a6:9c:d6:82:97:03:34:5d:c5:c1:ac:02:a0:5a:
         a9:ec:ab:b2:55:bd:82:e9:ba:2b:08:20:07:01:9b:df:65:c9:
         69:f3:d0:f6:5e:98:c4:e3:18:d9:6f:df:04:e8:00:06:f9:73:
         b5:6b:ec:90:e9:4c:f9:3f:90:56:a4:f2:bc:ef:34:70:fd:5b:
         9c:0d:e7:60
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIUHV6AyiKdJUpG+UngUdkppQjeKF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjEwMDMwOTIxNDRaFw0yNzEwMDIwOTI2NDRaMDMxMTAvBgNV
BAMTKEZEOUIxRjk2MDQwMzk4RUI0QTk1RjM5MkQzM0YwOUNBOEIxMTM1QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSH3/G4xQ7tcK0LSXME+iQUNyi
bmnkU74yIpHvMm1aMbvg9ozmk71O4G4TmWFu/1bBRoImzjkMfXQSAoGcWziZObNl
uXFYKtTvu3yghOcpm4nUXDJI3dQ5ej2TNrbbXITr4L9HofbFdGdfbDc+4gmFCpA5
ydfihgSJqvvACVWUBfGNIZd9k4MEgsHr4Zg8PmjsLsceTXCVzoUE6EI7d7Sq1L3u
BiBO/vDMRXpPey6RJiWAW8j7uiBpteYBbBg0KDB9C8EtBOqI6yiQ5xMn3bWZsQTc
J0Rn3sestj4e9RcoNeL3nBF46K0CYiojPHKCh6NuRZ45YGeTtzw2AGnpURtFAgMB
AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9mx+WBAOY60qV
85LTPwnKixE1qDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHF2
QlVMSGtQTGJqMTVGa3VrQW9BeFFuRWprWVNqOVhUb3BxZmQ1R0pqcmcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hx
dkJVTEhrUExiajE1Rmt1a0FvQXhRbkVqa1lTajlYVG9wcWZkNUdKanJnLzAvRkQ5
QjFGOTYwNDAzOThFQjRBOTVGMzkyRDMzRjA5Q0E4QjExMzVBOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbFkMA0EAgACMAcDBQAoBF2QMA0GCSqGSIb3DQEB
CwUAA4IBAQCQXJMdDjB4gyBOcKlHZZCWxHtWJ6KA3fu6qBZdpNDsxMFemGT8pQ9z
RErCNfIN/savcu3pp3S/HT22WWRsDljbAicY6C603+5dh244wvEW3GcSmwhCQgLi
W/m3QUImuC3eAnOUziOAYKhNGmRoUzgaRwlx5HUNbIs4FGIB3TR0VOIDVAZ7yznX
70hthuiRpf78f/SFkvvpFyFlvSNo9oS8SVMAI2W7pIDGminZvW6QzyJAwg5avN2W
ppzWgpcDNF3FwawCoFqp7KuyVb2C6borCCAHAZvfZclp89D2XpjE4xjZb98E6AAG
+XO1a+yQ6Uz5P5BWpPK87zRw/VucDedg
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:49:31 2026 by rpki-client