Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D282C434761DFE35CC47D787CB5B49E8C70879C7.cer
File:                     D282C434761DFE35CC47D787CB5B49E8C70879C7.cer (raw, json)
Hash identifier:          +5QZFtD4dwW5dUr5pqwaCzHGJS7Jkq12PxPWhJQHi00=
Subject key identifier:   D2:82:C4:34:76:1D:FE:35:CC:47:D7:87:CB:5B:49:E8:C7:08:79:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       75011E9FA9DD427467FBDF651940B0095EFC5A45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/NkeyBvC69A3LmtCgkMFTRd6mT5K9NtCkAPQcYMrKPzg/0/D282C434761DFE35CC47D787CB5B49E8C70879C7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/NkeyBvC69A3LmtCgkMFTRd6mT5K9NtCkAPQcYMrKPzg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Jul 2026 16:47:31 +0000
Certificate not after:    Fri 23 Jul 2027 16:52:31 +0000
Subordinate resources:    AS: 61873
                          IP: 201.149.108.0/22
                          IP: 2804:1aa4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 16:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:01:1e:9f:a9:dd:42:74:67:fb:df:65:19:40:b0:09:5e:fc:5a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 24 16:47:31 2026 GMT
            Not After : Jul 23 16:52:31 2027 GMT
        Subject: CN=D282C434761DFE35CC47D787CB5B49E8C70879C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2b:04:cc:50:d6:41:74:b2:ad:b5:b5:88:e6:
                    b3:fa:4d:3b:e8:5f:1f:b5:32:61:b1:4a:ed:cb:69:
                    fa:f1:7f:a6:57:3d:cc:6e:1e:16:72:34:65:c4:0a:
                    07:1c:ee:4d:cf:10:73:2a:71:51:04:63:64:f0:83:
                    d6:11:d4:64:2f:97:93:db:b2:72:4d:2c:2a:70:4b:
                    14:ec:31:f0:c6:64:6e:39:7d:92:dc:f0:07:43:40:
                    68:a4:6f:33:8b:f2:09:47:16:06:c4:38:ed:cd:22:
                    44:78:5a:3c:1c:76:05:2f:ba:4a:22:38:08:85:19:
                    45:54:b7:df:0e:cf:c2:08:7e:d9:17:89:ce:12:68:
                    4e:0b:ed:bb:c1:86:1f:1f:17:5a:0a:08:50:b8:e7:
                    af:96:d1:8d:5a:6f:3e:fd:0e:34:d0:2c:b0:68:21:
                    b5:40:39:3e:d2:31:62:75:9e:13:e8:ee:e3:f9:7f:
                    07:0c:ed:63:16:61:cc:e7:7e:4f:46:ac:ca:9a:9e:
                    dc:49:eb:f0:df:4f:1e:39:23:6c:07:df:e5:63:51:
                    26:52:e6:d3:6b:6c:77:77:a7:19:0c:77:80:a4:d0:
                    0d:a6:8b:e9:20:dc:92:33:9d:4e:5e:ff:f8:79:89:
                    59:99:f0:15:1c:57:56:ae:3b:fd:bf:86:8c:c0:1c:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:82:C4:34:76:1D:FE:35:CC:47:D7:87:CB:5B:49:E8:C7:08:79:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/NkeyBvC69A3LmtCgkMFTRd6mT5K9NtCkAPQcYMrKPzg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/NkeyBvC69A3LmtCgkMFTRd6mT5K9NtCkAPQcYMrKPzg/0/D282C434761DFE35CC47D787CB5B49E8C70879C7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.108.0/22
                IPv6:
                  2804:1aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61873

    Signature Algorithm: sha256WithRSAEncryption
         8d:f2:95:2e:ec:e7:90:8a:45:e7:a9:c3:21:ab:4a:20:01:d6:
         53:f3:4b:e8:c6:65:db:33:7f:34:a3:64:8b:86:b6:71:c0:27:
         2b:52:f4:23:bd:95:7d:52:65:78:f8:75:b2:75:7f:78:b3:75:
         f4:9f:d3:7e:80:84:ce:52:77:c6:5b:a2:8f:f2:c2:49:de:06:
         bb:3c:4f:98:7b:85:d8:31:80:99:e8:3d:db:7f:65:b9:19:2d:
         88:88:71:6f:92:83:13:65:1e:43:d3:c9:5f:99:3b:09:e4:45:
         69:9e:08:b2:15:a6:98:96:a6:c0:7b:38:86:98:86:fa:fb:7e:
         19:fe:80:bb:9e:09:5b:bb:d6:13:dd:22:f7:41:21:92:0c:45:
         99:5c:35:bd:34:2f:f9:3a:1a:83:5f:8b:ee:7c:c3:b5:61:4b:
         1b:13:2e:12:56:a1:a4:65:0e:f2:54:72:ea:c4:92:78:4f:fe:
         1c:23:e8:0e:62:d9:2b:f2:49:4f:4c:f2:43:28:72:80:bc:f7:
         5f:fc:55:66:5f:c1:1a:18:ba:6e:ca:16:21:b8:9c:76:49:19:
         3e:ce:a7:cf:0a:68:44:49:a4:25:a4:73:27:dc:20:52:27:6c:
         f7:4f:12:c1:c5:89:76:f4:bd:26:11:62:47:aa:4f:56:70:30:
         c9:93:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:15:17 2026 by rpki-client