Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer
File:                     DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer (raw, json)
Hash identifier:          TZmBa2Iot41muZypl7vCC1vLw0mwUbh7skQlyTufCc8=
Subject key identifier:   DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D9628D3133347109B26DEA5CED812654534D827
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Sep 2026 06:18:42 +0000
Certificate not after:    Fri 24 Sep 2027 06:23:42 +0000
Subordinate resources:    AS: 269372
                          IP: 45.185.96.0/22
                          IP: 2804:639c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Sep 2026 21:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:96:28:d3:13:33:47:10:9b:26:de:a5:ce:d8:12:65:45:34:d8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 25 06:18:42 2026 GMT
            Not After : Sep 24 06:23:42 2027 GMT
        Subject: CN=DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:c1:26:9a:e1:a5:34:45:3a:cb:9d:64:e1:
                    ad:fa:b5:cf:29:ee:c8:5b:ab:6b:cb:be:db:ae:66:
                    5f:d7:66:c8:a9:9b:f9:08:84:45:49:79:4d:aa:da:
                    f0:1f:c6:2b:b5:f5:0c:32:44:22:e3:e5:7d:9b:9c:
                    34:f4:52:93:55:49:dd:f1:8d:5e:4c:7d:52:22:db:
                    82:3b:a6:b2:be:10:1c:dd:24:b1:98:c3:11:2e:30:
                    1d:63:7a:0b:3d:81:55:bc:f4:20:ed:5e:56:62:e3:
                    65:77:86:b2:a0:aa:37:ca:ba:38:1f:d4:6d:d1:c9:
                    2b:60:80:33:f3:cc:d6:4c:5f:0a:19:38:ca:66:bb:
                    a1:dc:6b:b6:ce:d6:56:04:f7:cc:19:96:71:84:24:
                    eb:48:65:4c:19:6d:1d:31:82:94:cb:dd:bd:99:ab:
                    fa:3d:fb:5d:d8:28:db:f1:a9:bc:9a:eb:e1:1d:09:
                    40:e1:05:e7:98:8e:9a:06:ec:f5:10:d5:20:fc:46:
                    44:8f:b7:08:ae:0c:2f:4e:db:fd:ec:94:73:a4:76:
                    b0:da:af:ed:e9:91:da:9d:1f:68:8d:9e:78:f0:10:
                    a6:94:a5:2b:1d:0b:29:6d:ff:46:17:51:21:77:8f:
                    5f:62:1f:d9:99:2b:a1:45:c2:e5:57:6d:7b:92:a3:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.96.0/22
                IPv6:
                  2804:639c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269372

    Signature Algorithm: sha256WithRSAEncryption
         73:71:84:6a:74:a4:73:d1:ff:6c:73:76:36:ed:a5:52:96:bf:
         29:19:03:c1:be:59:40:3c:e0:4d:41:6f:5b:95:34:14:4d:06:
         1c:bf:8c:51:41:23:ba:90:fd:d6:e4:8f:4e:71:fb:e8:c0:53:
         0f:e8:d4:88:61:98:10:fa:5c:27:ca:1f:48:f2:fa:a3:1d:d5:
         cd:fe:5e:47:bb:a3:f8:de:b2:78:23:4b:85:e8:08:d3:ca:4b:
         05:90:ca:08:2e:23:71:24:34:4f:ab:28:b0:82:43:ff:f2:15:
         8e:7f:26:ef:a8:db:a5:3a:56:40:76:f2:b7:0f:63:25:b9:15:
         e9:c5:aa:a3:5f:4d:40:24:ac:75:cb:90:0f:d9:3b:7f:46:29:
         cd:37:cb:33:ba:7f:3c:37:73:36:4b:98:d7:7a:dc:2f:13:d7:
         4d:2c:d9:bc:2f:c5:ce:79:2c:bf:52:5a:7d:e2:ff:11:21:2e:
         2b:29:6c:6f:cd:7e:c4:82:e2:00:c4:83:79:26:0d:01:ba:72:
         f0:47:95:ea:d4:30:d6:b9:4c:46:03:b7:a6:67:89:f4:a7:8f:
         64:72:cb:13:c7:ab:c5:eb:c2:2f:8c:c1:47:95:33:1b:d2:70:
         16:f0:c9:05:36:f8:42:c3:4e:47:63:2f:b7:21:2e:86:9d:27:
         3d:4d:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:52:34 2026 by rpki-client