Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
File:                     09B74F5AE0A9C9687059CF905757A70385D63DD2.cer (raw, json)
Hash identifier:          ZSlbQ6Mf4qgC2VflkVkUeJOWzQKSBMDUnng7WwrdkD0=
Subject key identifier:   09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2629C043DC2475317A415C193F60236CA4AC9F0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Apr 2026 08:19:03 +0000
Certificate not after:    Tue 27 Apr 2027 08:24:03 +0000
Subordinate resources:    AS: 264886
                          IP: 168.227.180.0/22
                          IP: 179.108.44.0/22
                          IP: 201.49.224.0/20
                          IP: 2804:2f5c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:29:c0:43:dc:24:75:31:7a:41:5c:19:3f:60:23:6c:a4:ac:9f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 28 08:19:03 2026 GMT
            Not After : Apr 27 08:24:03 2027 GMT
        Subject: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c0:0a:87:10:87:d3:2d:e9:f9:cf:f9:0f:d2:
                    bd:f9:ae:dd:df:32:7a:04:87:50:a8:dd:93:c7:16:
                    0e:94:27:7b:d5:38:25:6e:c9:4e:90:de:03:20:1c:
                    05:61:e1:fd:04:84:97:a3:a2:2f:6d:9d:a4:d6:8e:
                    9b:4c:12:e7:81:69:a9:fa:d1:17:b1:51:22:b2:bd:
                    1c:a9:45:fc:2a:1c:05:87:fe:68:7f:f0:cb:a5:3c:
                    b4:dc:71:a9:7a:94:60:e3:c8:45:ec:fc:5d:5c:f3:
                    8c:d3:0c:df:cc:2d:45:ac:e7:12:2a:a1:2a:87:ca:
                    52:50:a2:1c:54:8c:8a:e4:6a:66:11:26:49:3e:f8:
                    b7:ab:6e:ea:54:19:bd:10:5a:14:93:29:8a:1e:85:
                    ef:e6:ba:7e:7f:30:5c:6d:69:48:c9:36:60:b5:68:
                    91:46:4b:39:08:45:4b:40:f5:fb:f1:00:9d:62:d0:
                    04:83:35:38:cc:15:ac:50:58:89:fe:be:94:ac:99:
                    98:73:80:69:bd:be:eb:06:c1:6d:84:e0:48:48:85:
                    4b:33:f8:a7:e2:4e:22:c2:03:2b:1b:72:8a:22:56:
                    5c:2a:75:bd:31:eb:d5:29:57:d6:3d:06:c2:06:e5:
                    fa:05:18:e7:da:67:b8:90:c9:35:4f:5a:69:03:8c:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.180.0/22
                  179.108.44.0/22
                  201.49.224.0/20
                IPv6:
                  2804:2f5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264886

    Signature Algorithm: sha256WithRSAEncryption
         81:e2:fd:a9:d7:38:af:76:f0:fd:88:26:55:2c:3c:3e:ab:2e:
         2a:4c:9a:48:d7:1e:fc:af:99:d7:66:7b:33:f7:30:39:12:11:
         92:92:89:2b:67:8b:df:49:06:d8:25:dc:35:1d:27:b3:b3:82:
         07:60:83:1a:b9:6e:7e:56:27:d0:09:21:53:b7:f2:9d:cd:51:
         b4:4f:40:d1:fa:56:57:ea:f6:43:c5:36:48:89:0b:9a:6f:ec:
         b5:76:cf:f0:55:06:d4:85:9b:00:54:20:6b:46:f9:b1:f4:59:
         d3:fc:e0:2a:b8:ee:d8:13:2f:83:89:e2:89:fd:18:98:9b:15:
         c8:96:24:98:55:d1:28:d5:f9:50:5b:af:99:13:f7:50:d7:c3:
         e5:68:a4:fc:bf:f4:79:a4:31:48:9b:41:64:04:3d:25:53:89:
         67:7e:20:c3:92:4b:29:54:32:59:13:8f:70:cf:96:9f:b1:7c:
         bc:ae:41:f6:b5:6f:d2:66:68:ed:95:82:f9:89:41:20:00:0d:
         1a:de:2a:01:6d:ff:71:d6:a7:5f:84:78:62:44:05:75:1d:5b:
         89:1a:d8:6d:e1:e6:87:36:4a:e8:ae:c6:47:95:55:38:e6:9e:
         87:4c:e9:08:92:6c:3e:34:50:51:ee:7e:3d:75:98:82:b3:25:
         2c:8b:82:cd
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIUJinAQ9wkdTF6QVwZP2AjbKSsnw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA0MjgwODE5MDNaFw0yNzA0MjcwODI0MDNaMDMxMTAvBgNV
BAMTKDA5Qjc0RjVBRTBBOUM5Njg3MDU5Q0Y5MDU3NTdBNzAzODVENjNERDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwAqHEIfTLen5z/kP0r35rt3f
MnoEh1Co3ZPHFg6UJ3vVOCVuyU6Q3gMgHAVh4f0EhJejoi9tnaTWjptMEueBaan6
0RexUSKyvRypRfwqHAWH/mh/8MulPLTccal6lGDjyEXs/F1c84zTDN/MLUWs5xIq
oSqHylJQohxUjIrkamYRJkk++LerbupUGb0QWhSTKYoehe/mun5/MFxtaUjJNmC1
aJFGSzkIRUtA9fvxAJ1i0ASDNTjMFaxQWIn+vpSsmZhzgGm9vusGwW2E4EhIhUsz
+KfiTiLCAysbcooiVlwqdb0x69UpV9Y9BsIG5foFGOfaZ7iQyTVPWmkDjNPlAgMB
AAGjggNEMIIDQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJt09a4KnJaHBZ
z5BXV6cDhdY90jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vYWZY
Rk1rUXlwSmphU2FVenQzRVFRb0pOY1Z1emhobWRCTnUxVzRYRW8zaS8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vYWZY
Rk1rUXlwSmphU2FVenQzRVFRb0pOY1Z1emhobWRCTnUxVzRYRW8zaS8wLzA5Qjc0
RjVBRTBBOUM5Njg3MDU5Q0Y5MDU3NTdBNzAzODVENjNERDIubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB
/wQrMCkwGAQCAAEwEgMEAqjjtAMEArNsLAMEBMkx4DANBAIAAjAHAwUAKAQvXDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECrYwDQYJKoZIhvcNAQELBQADggEBAIHi
/anXOK928P2IJlUsPD6rLipMmkjXHvyvmddmezP3MDkSEZKSiStni99JBtgl3DUd
J7Ozggdggxq5bn5WJ9AJIVO38p3NUbRPQNH6Vlfq9kPFNkiJC5pv7LV2z/BVBtSF
mwBUIGtG+bH0WdP84Cq47tgTL4OJ4on9GJibFciWJJhV0SjV+VBbr5kT91DXw+Vo
pPy/9HmkMUibQWQEPSVTiWd+IMOSSylUMlkTj3DPlp+xfLyuQfa1b9JmaO2VgvmJ
QSAADRreKgFt/3HWp1+EeGJEBXUdW4ka2G3h5oc2SuiuxkeVVTjmnodM6QiSbD40
UFHufj11mIKzJSyLgs0=
-----END CERTIFICATE-----
Generated at Wed May 13 15:36:26 2026 by rpki-client