Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer
File:                     1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer (raw, json)
Hash identifier:          NCQWsodt4qKMwiD881q3xU4lA9RRtMoa6/auRQWjkqE=
Subject key identifier:   1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E3A12E3E77D6A044DD5602B89E867A8DDC332EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Mar 2026 11:03:23 +0000
Certificate not after:    Wed 24 Mar 2027 11:08:23 +0000
Subordinate resources:    AS: 265018
                          IP: 160.238.200.0/22
                          IP: 170.84.196.0/22
                          IP: 2804:317c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3a:12:e3:e7:7d:6a:04:4d:d5:60:2b:89:e8:67:a8:dd:c3:32:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 11:03:23 2026 GMT
            Not After : Mar 24 11:08:23 2027 GMT
        Subject: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:b0:a5:4e:2e:2a:0b:0d:17:25:cd:f3:09:
                    88:e8:e4:2e:de:5a:65:df:ff:cf:48:84:e6:b0:cb:
                    ff:d1:63:25:1b:f5:43:01:5e:56:c1:e9:53:7c:dc:
                    18:4d:82:ed:c2:84:4d:90:97:59:44:ab:8a:2a:35:
                    82:be:6e:09:4b:d0:3d:bf:7b:66:c9:b1:1b:4b:ea:
                    2b:92:0c:31:4f:40:ac:e5:53:39:e3:04:52:85:c2:
                    9c:01:b4:8f:4d:f5:dc:68:2f:38:fc:ca:75:4e:24:
                    c4:5e:5e:87:3a:6d:d4:27:ab:d8:06:66:c4:42:68:
                    c3:16:19:39:99:e3:2f:02:c7:13:39:24:ea:50:2c:
                    e4:4a:71:30:94:99:46:28:5c:6b:b9:2b:f6:db:e3:
                    44:f8:9c:36:0e:c5:c3:31:99:ec:46:92:46:6f:8e:
                    08:ab:c7:8b:1c:a8:24:4e:3e:1f:50:b3:cc:c7:b7:
                    8a:cb:1a:ec:f0:64:06:73:70:76:ec:44:af:6e:d8:
                    5b:08:1c:e1:0b:38:bc:c9:15:1f:81:f0:80:32:d1:
                    64:da:95:20:ce:58:9c:b7:92:63:9a:25:bf:8d:7b:
                    24:28:85:6d:8f:9a:f1:fc:fb:56:71:83:26:1e:40:
                    5f:76:24:a5:27:c7:78:d3:02:8b:48:ca:46:01:4e:
                    a1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.200.0/22
                  170.84.196.0/22
                IPv6:
                  2804:317c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265018

    Signature Algorithm: sha256WithRSAEncryption
         ad:d0:48:03:0c:6c:01:48:c5:f8:20:c1:99:b5:19:67:59:21:
         ed:81:8e:b2:ce:22:c7:08:db:4c:00:87:ef:74:98:01:45:64:
         48:e1:78:e0:ea:56:85:af:66:3e:1f:66:77:f0:20:f6:8b:ce:
         18:f3:90:50:44:20:63:cc:58:6f:f9:bd:21:50:c7:13:3d:e4:
         95:1d:9c:e5:8d:65:99:22:2e:fb:e9:68:7d:37:70:7d:9d:9a:
         83:02:31:d9:ae:82:14:b2:6f:0e:c4:a5:45:4c:fa:55:19:c5:
         5f:df:f9:e9:6d:70:19:3b:c0:9d:cf:56:a6:db:3e:3c:25:8e:
         e8:b0:90:f4:e8:9b:81:35:97:3c:f9:ab:8f:eb:69:9f:c1:f9:
         76:99:f6:04:6a:cc:33:bc:0a:58:51:1d:15:ba:9f:60:b2:81:
         4b:01:f6:21:29:64:bf:e3:8d:46:94:fd:30:7e:70:64:7e:1d:
         cb:67:ed:7e:c1:89:01:00:01:8a:ec:82:d3:74:06:9f:f1:b0:
         7d:ff:cf:87:b0:ba:48:d0:bf:10:15:0c:43:c8:44:9f:41:50:
         52:7d:25:b4:5a:a1:26:46:96:63:2d:cb:8c:18:10:56:f1:03:
         b0:e3:31:bc:d6:ab:b0:ac:fb:dc:cb:4d:b4:45:8d:17:ae:83:
         0f:58:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:52 2026 by rpki-client