Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.cer
File:                     96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.cer (raw, json)
Hash identifier:          wl04zNfclk3G1l8y5qGcFLdvUluLqKTeeMZYIbCEQP8=
Subject key identifier:   96:E3:30:CC:67:B9:42:4B:0A:45:DB:E2:B7:D5:98:DA:74:36:BD:2B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       42DDD69A1788748A49283AB9EB70869089565958
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Feb 2026 16:59:51 +0000
Certificate not after:    Tue 23 Feb 2027 17:04:51 +0000
Subordinate resources:    AS: 28360
                          IP: 138.94.8.0/22
                          IP: 177.8.0.0/19
                          IP: 179.124.224.0/20
                          IP: 189.76.208.0 -- 189.76.239.255
                          IP: 2804:14::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 20:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:dd:d6:9a:17:88:74:8a:49:28:3a:b9:eb:70:86:90:89:56:59:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 24 16:59:51 2026 GMT
            Not After : Feb 23 17:04:51 2027 GMT
        Subject: CN=96E330CC67B9424B0A45DBE2B7D598DA7436BD2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:ec:1d:5b:40:1c:df:f7:31:dc:27:8b:0d:
                    a2:45:79:d6:12:de:55:78:27:ce:ea:a9:3e:ec:59:
                    3e:af:c4:b9:44:17:41:60:0f:ba:eb:f3:b7:75:f8:
                    c2:74:e7:86:dd:11:06:93:7e:29:82:27:40:84:72:
                    6e:55:72:c3:fe:17:c7:1c:f7:ed:61:aa:59:89:93:
                    1b:b1:a0:b5:0f:52:b6:12:72:31:6f:93:98:7f:37:
                    32:06:a6:6c:be:d3:d7:c8:c4:0f:7c:69:4c:2d:55:
                    3b:82:72:4c:f8:26:90:ce:f7:30:0f:aa:6d:0b:e1:
                    f4:8c:16:ff:b2:fb:a0:ea:0e:07:34:ef:e4:2f:83:
                    93:29:aa:79:20:b4:70:28:86:a1:fe:0b:71:f2:e0:
                    51:69:25:48:5b:f7:7c:9a:6a:7f:a2:6f:fd:fd:84:
                    5d:19:ff:2f:31:fa:ee:78:84:65:5b:4c:75:a5:35:
                    80:a2:30:39:1a:4a:f9:2d:de:83:64:90:38:46:d3:
                    92:15:23:0d:91:c7:f0:9c:de:34:da:77:b9:24:e8:
                    50:bb:ee:6b:2c:33:0d:bd:e7:59:19:73:43:cf:6b:
                    18:e6:0c:0b:e7:54:61:1a:ab:a4:21:1c:98:1a:a6:
                    4e:a1:8e:ad:c0:77:e3:92:ff:a1:45:21:93:88:47:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:E3:30:CC:67:B9:42:4B:0A:45:DB:E2:B7:D5:98:DA:74:36:BD:2B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/96E330CC67B9424B0A45DBE2B7D598DA7436BD2B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.8.0/22
                  177.8.0.0/19
                  179.124.224.0/20
                  189.76.208.0-189.76.239.255
                IPv6:
                  2804:14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28360

    Signature Algorithm: sha256WithRSAEncryption
         6e:40:5a:70:82:33:04:3f:a1:18:08:96:f7:a9:d1:23:b9:f2:
         66:e7:f4:57:87:92:08:40:f1:a0:78:57:c3:9d:c7:dc:4a:72:
         1a:b5:bb:a8:01:28:c9:81:59:26:28:79:25:01:31:aa:a6:54:
         82:e9:d7:e8:af:69:30:1f:e9:49:89:14:7d:36:92:d0:81:d0:
         4b:5f:b8:27:d0:e0:82:76:f7:cd:be:36:3c:b6:e1:37:8d:6e:
         a2:48:22:f3:79:25:0e:22:9b:9b:e0:74:d3:0b:c7:ad:6d:a8:
         00:24:ac:31:0a:55:5e:ed:fe:2b:3b:0c:ae:50:74:f0:af:0f:
         36:da:7b:16:e3:36:1d:f3:fa:40:d9:64:9b:f0:45:10:bb:84:
         be:55:4c:73:db:24:34:65:9b:0d:73:a2:55:f8:50:a7:36:20:
         32:ad:21:55:6c:14:b6:5c:a8:4e:2f:dc:a2:00:28:d6:12:63:
         d5:30:da:56:b5:9f:64:e5:84:47:01:71:1e:17:ad:29:5c:83:
         c6:11:7b:56:ac:31:a8:e9:20:f5:0c:e7:ea:eb:bf:fc:15:63:
         28:f8:70:a1:19:31:db:f0:5d:66:83:90:a7:e0:81:44:3d:a9:
         79:7c:05:7f:67:ea:24:6f:f8:5f:57:bf:69:86:b3:76:6a:d6:
         41:32:9f:6d
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUQt3WmheIdIpJKDq563CGkIlWWVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAyMjQxNjU5NTFaFw0yNzAyMjMxNzA0NTFaMDMxMTAvBgNV
BAMTKDk2RTMzMENDNjdCOTQyNEIwQTQ1REJFMkI3RDU5OERBNzQzNkJEMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/ewdW0Ac3/cx3CeLDaJFedYS
3lV4J87qqT7sWT6vxLlEF0FgD7rr87d1+MJ054bdEQaTfimCJ0CEcm5VcsP+F8cc
9+1hqlmJkxuxoLUPUrYScjFvk5h/NzIGpmy+09fIxA98aUwtVTuCckz4JpDO9zAP
qm0L4fSMFv+y+6DqDgc07+Qvg5MpqnkgtHAohqH+C3Hy4FFpJUhb93yaan+ib/39
hF0Z/y8x+u54hGVbTHWlNYCiMDkaSvkt3oNkkDhG05IVIw2Rx/Cc3jTad7kk6FC7
7mssMw2951kZc0PPaxjmDAvnVGEaq6QhHJgapk6hjq3Ad+OS/6FFIZOIR2DlAgMB
AAGjggNTMIIDTzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSW4zDMZ7lCSwpF
2+K31ZjadDa9KzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEJo
YXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkozUDIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRC
aGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAvOTZF
MzMwQ0M2N0I5NDI0QjBBNDVEQkUyQjdENTk4REE3NDM2QkQyQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEH
AQH/BDkwNzAmBAIAATAgAwQCil4IAwQFsQgAAwQEs3zgMAwDBAS9TNADBAS9TOAw
DQQCAAIwBwMFACgEABQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbsgwDQYJKoZI
hvcNAQELBQADggEBAG5AWnCCMwQ/oRgIlvep0SO58mbn9FeHkghA8aB4V8Odx9xK
chq1u6gBKMmBWSYoeSUBMaqmVILp1+ivaTAf6UmJFH02ktCB0EtfuCfQ4IJ2982+
Njy24TeNbqJIIvN5JQ4im5vgdNMLx61tqAAkrDEKVV7t/is7DK5QdPCvDzbaexbj
Nh3z+kDZZJvwRRC7hL5VTHPbJDRlmw1zolX4UKc2IDKtIVVsFLZcqE4v3KIAKNYS
Y9Uw2la1n2TlhEcBcR4XrSlcg8YRe1asMajpIPUM5+rrv/wVYyj4cKEZMdvwXWaD
kKfggUQ9qXl8BX9n6iRv+F9Xv2mGs3Zq1kEyn20=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:34 2026 by rpki-client