Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21A4AB054FAD83CEEA3A934B082B50B209645B17.cer
File:                     21A4AB054FAD83CEEA3A934B082B50B209645B17.cer (raw, json)
Hash identifier:          JpKNrXbnt0dqWtBVuvzJ/7O1IsG9CmOICBBMEyu3rEM=
Subject key identifier:   21:A4:AB:05:4F:AD:83:CE:EA:3A:93:4B:08:2B:50:B2:09:64:5B:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20905E2C67A0EE6FC4C118181FE2AF4054DD44E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/21A4AB054FAD83CEEA3A934B082B50B209645B17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Mar 2026 19:52:06 +0000
Certificate not after:    Mon 15 Mar 2027 19:57:06 +0000
Subordinate resources:    AS: 270837
                          IP: 177.52.140.0/22
                          IP: 2804:722c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:90:5e:2c:67:a0:ee:6f:c4:c1:18:18:1f:e2:af:40:54:dd:44:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 16 19:52:06 2026 GMT
            Not After : Mar 15 19:57:06 2027 GMT
        Subject: CN=21A4AB054FAD83CEEA3A934B082B50B209645B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:02:b1:71:d3:40:68:28:b8:32:d9:00:15:59:
                    87:e6:3c:a6:e2:3f:24:ef:75:ec:fb:0e:52:bf:62:
                    70:84:ad:78:23:3d:0f:05:d4:04:7a:ef:8b:c0:03:
                    96:e6:7c:61:38:37:bd:f8:1d:d0:3f:51:4c:63:2e:
                    d6:7d:19:60:f3:98:6e:ee:a3:bf:f1:1d:82:5b:15:
                    76:f2:2f:34:e5:4b:f0:b5:90:89:c9:f8:6a:41:3d:
                    6c:bb:5a:fb:a8:1f:ff:97:5c:d9:19:78:9c:21:53:
                    ed:ba:26:dd:8d:48:b5:e4:0a:a3:b3:d5:a7:4b:67:
                    2e:6c:6d:3d:61:00:7c:7b:66:95:88:3d:e6:08:88:
                    07:45:cf:f0:e7:a3:1c:cd:b6:ab:0b:da:49:e5:33:
                    b1:2e:a5:0b:0d:41:11:11:e1:78:9f:95:8c:87:48:
                    00:cc:9f:73:5e:ae:31:2f:4b:3d:3f:0f:97:8f:e3:
                    6e:cc:10:0c:a3:f5:26:2b:82:04:86:18:95:4d:ba:
                    7a:bc:9e:89:28:40:7d:ea:c2:29:f4:16:ec:80:0a:
                    b3:ac:3f:3d:99:58:5c:7e:a9:92:cb:20:13:5a:40:
                    f9:21:5d:9e:0f:a1:d4:3b:1c:e6:6a:71:9f:d1:61:
                    62:50:41:22:d9:27:25:e1:e6:c5:b2:d2:c5:97:16:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:A4:AB:05:4F:AD:83:CE:EA:3A:93:4B:08:2B:50:B2:09:64:5B:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/21A4AB054FAD83CEEA3A934B082B50B209645B17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.140.0/22
                IPv6:
                  2804:722c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270837

    Signature Algorithm: sha256WithRSAEncryption
         96:77:de:89:3b:53:ee:35:9a:d9:27:5f:e9:39:02:63:d1:74:
         fc:6d:14:72:15:1b:54:c4:1d:b2:05:28:43:67:3e:57:a1:5d:
         0c:98:d4:9f:c8:ef:a8:ea:0e:29:19:a5:26:c2:54:20:34:d6:
         d7:3b:a6:73:9a:3a:d6:4c:68:08:3e:74:c8:75:a6:76:28:e0:
         ab:a2:21:59:51:4f:02:b5:7b:dc:f3:57:86:36:04:ce:f5:95:
         f9:65:b2:79:32:42:6b:40:5a:ea:ed:96:9e:d4:d6:43:d6:40:
         86:f5:01:98:87:94:97:36:97:f5:eb:9e:0f:a7:81:40:86:e3:
         b2:52:09:4d:1a:45:02:de:a4:cc:31:ef:f7:44:1a:87:e6:3e:
         7e:73:91:0c:29:04:73:c9:3f:47:af:95:72:6f:0a:7c:62:73:
         f6:1b:66:a1:1c:b7:fa:66:4a:b3:5b:84:49:11:d9:c0:04:bb:
         7a:93:de:24:cc:fe:4a:14:19:b4:2c:25:ac:be:12:c2:2c:0d:
         9f:3c:80:e8:f6:89:9f:13:83:1a:45:c6:c3:29:f7:0c:f2:e3:
         2d:7a:8c:9f:4b:85:d3:09:f5:02:43:25:9f:02:08:5d:c5:b0:
         df:50:b6:1c:59:6a:f4:ae:ed:99:b6:36:dd:46:82:d7:b1:de:
         59:e0:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:59:40 2026 by rpki-client