Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D3A9E88344B3F84CB891F5AE97177DA6E42B63C.cer
File:                     1D3A9E88344B3F84CB891F5AE97177DA6E42B63C.cer (raw, json)
Hash identifier:          R2uV0ea6LB5l6hjFEFObdRJmkjRsTo1cD7fnwDb9scM=
Subject key identifier:   1D:3A:9E:88:34:4B:3F:84:CB:89:1F:5A:E9:71:77:DA:6E:42:B6:3C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       13A54BF784624957A4CBA4BD97D1014A755E0222
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G2w6jWMNqRy5531kmHdbbjtXb34AdTS5RBu1G34MFbPM/0/1D3A9E88344B3F84CB891F5AE97177DA6E42B63C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G2w6jWMNqRy5531kmHdbbjtXb34AdTS5RBu1G34MFbPM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Feb 2026 12:10:05 +0000
Certificate not after:    Thu 25 Feb 2027 12:15:05 +0000
Subordinate resources:    AS: 266179
                          IP: 45.5.168.0/22
                          IP: 2804:3be8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 20:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a5:4b:f7:84:62:49:57:a4:cb:a4:bd:97:d1:01:4a:75:5e:02:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 26 12:10:05 2026 GMT
            Not After : Feb 25 12:15:05 2027 GMT
        Subject: CN=1D3A9E88344B3F84CB891F5AE97177DA6E42B63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:6e:16:93:10:55:88:e6:d6:b7:08:4b:3a:
                    41:ef:77:e1:c3:e7:a8:a1:fd:49:bd:e1:27:a1:52:
                    e7:e2:70:9e:40:67:2c:51:b4:18:88:8a:97:74:9e:
                    ca:c6:f0:03:06:63:be:9a:9c:de:be:3c:fd:0b:39:
                    1a:d7:90:27:d1:9a:cf:1d:bf:db:09:42:d0:ce:ec:
                    51:0a:58:37:32:43:59:03:f8:b5:4c:d0:f1:8a:3d:
                    57:dd:a8:32:90:57:01:27:47:57:db:3d:6a:aa:47:
                    ab:cb:bf:1d:3f:8c:0d:da:38:4b:3e:59:ce:5f:f8:
                    8d:ff:c6:57:9f:2d:02:82:32:e7:45:c5:d5:87:db:
                    e3:5e:08:76:85:2e:bc:e2:bf:e0:37:bc:b9:f5:8a:
                    ca:26:36:a9:a6:65:48:36:c3:8a:26:be:8f:37:c9:
                    8f:73:e1:11:ef:d9:ec:4d:ff:30:6a:c2:40:de:c6:
                    e5:90:fb:f1:a5:ff:6e:8c:df:58:ab:70:24:6c:3f:
                    20:0b:10:dc:0b:a8:d4:41:77:3a:92:68:34:73:c6:
                    f6:80:5f:9d:50:5b:18:c5:74:1a:16:5c:b9:f7:ec:
                    aa:4a:ba:e6:ab:2e:99:e0:16:7d:d1:de:13:fc:77:
                    32:59:84:48:49:8a:25:55:30:9e:18:94:d6:dc:a3:
                    8f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:3A:9E:88:34:4B:3F:84:CB:89:1F:5A:E9:71:77:DA:6E:42:B6:3C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G2w6jWMNqRy5531kmHdbbjtXb34AdTS5RBu1G34MFbPM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G2w6jWMNqRy5531kmHdbbjtXb34AdTS5RBu1G34MFbPM/0/1D3A9E88344B3F84CB891F5AE97177DA6E42B63C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.168.0/22
                IPv6:
                  2804:3be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266179

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:cf:d9:79:96:b1:74:1c:eb:46:b9:05:0e:1c:5f:79:49:
         48:79:15:a8:c6:2e:53:fc:6b:d0:20:a1:ed:c3:a3:e6:35:f6:
         eb:55:17:f8:96:cd:03:cb:24:d9:61:ef:3c:52:f7:00:2e:bb:
         be:dd:0c:c5:a5:cf:be:34:8e:2e:e0:4e:05:bf:06:c7:a7:e0:
         eb:0a:98:b9:b7:83:e0:f2:3a:f6:c7:4d:d8:f0:ec:e3:e0:8d:
         3b:86:8f:d5:a9:21:9e:b4:5f:0c:1f:34:7b:5d:81:66:0e:03:
         4e:2b:d9:af:63:ad:50:b2:4a:8b:ac:c1:98:33:0e:22:5a:0b:
         87:a2:6c:40:44:f4:8d:40:12:39:a5:8b:38:f0:73:3a:8e:f2:
         c2:ca:16:48:df:45:66:0c:5b:2d:4d:a0:80:6e:f5:45:c4:ed:
         f8:6c:54:c1:29:87:6d:c3:d6:e0:2f:cf:51:35:68:58:35:1d:
         18:6b:c6:69:db:6f:d2:e5:c4:b1:47:81:2a:f7:54:ce:f8:13:
         76:40:55:5f:51:64:f4:55:0b:65:fc:21:02:a5:d8:a0:74:db:
         3e:8f:72:35:89:d0:38:1d:6f:48:5e:0c:83:c4:e2:f3:b1:6a:
         18:08:60:ca:a4:ad:80:c1:87:50:7d:47:5f:36:f1:b6:da:07:
         98:19:0e:14
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUE6VL94RiSVeky6S9l9EBSnVeAiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAyMjYxMjEwMDVaFw0yNzAyMjUxMjE1MDVaMDMxMTAvBgNV
BAMTKDFEM0E5RTg4MzQ0QjNGODRDQjg5MUY1QUU5NzE3N0RBNkU0MkI2M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31W4WkxBViObWtwhLOkHvd+HD
56ih/Um94SehUuficJ5AZyxRtBiIipd0nsrG8AMGY76anN6+PP0LORrXkCfRms8d
v9sJQtDO7FEKWDcyQ1kD+LVM0PGKPVfdqDKQVwEnR1fbPWqqR6vLvx0/jA3aOEs+
Wc5f+I3/xlefLQKCMudFxdWH2+NeCHaFLrziv+A3vLn1isomNqmmZUg2w4omvo83
yY9z4RHv2exN/zBqwkDexuWQ+/Gl/26M31ircCRsPyALENwLqNRBdzqSaDRzxvaA
X51QWxjFdBoWXLn37KpKuuarLpngFn3R3hP8dzJZhEhJiiVVMJ4YlNbco4/XAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdOp6INEs/hMuJ
H1rpcXfabkK2PDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzJ3
NmpXTU5xUnk1NTMxa21IZGJianRYYjM0QWRUUzVSQnUxRzM0TUZiUE0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0cy
dzZqV01OcVJ5NTUzMWttSGRiYmp0WGIzNEFkVFM1UkJ1MUczNE1GYlBNLzAvMUQz
QTlFODgzNDRCM0Y4NENCODkxRjVBRTk3MTc3REE2RTQyQjYzQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLQWoMA0EAgACMAcDBQAoBDvoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPwzANBgkqhkiG9w0BAQsFAAOCAQEAdE3P2XmWsXQc60a5
BQ4cX3lJSHkVqMYuU/xr0CCh7cOj5jX261UX+JbNA8sk2WHvPFL3AC67vt0MxaXP
vjSOLuBOBb8Gx6fg6wqYubeD4PI69sdN2PDs4+CNO4aP1akhnrRfDB80e12BZg4D
TivZr2OtULJKi6zBmDMOIloLh6JsQET0jUASOaWLOPBzOo7ywsoWSN9FZgxbLU2g
gG71RcTt+GxUwSmHbcPW4C/PUTVoWDUdGGvGadtv0uXEsUeBKvdUzvgTdkBVX1Fk
9FULZfwhAqXYoHTbPo9yNYnQOB1vSF4Mg8Ti87FqGAhgyqStgMGHUH1HXzbxttoH
mBkOFA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:03:55 2026 by rpki-client