Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2311AFA6284FE336E3EF92DF968DD22CF3BEA93C.cer
File:                     2311AFA6284FE336E3EF92DF968DD22CF3BEA93C.cer (raw, json)
Hash identifier:          Ej/kb7pMXzdw79jfMwkQtaty3s+LxlEh5Y36QfpL5PU=
Subject key identifier:   23:11:AF:A6:28:4F:E3:36:E3:EF:92:DF:96:8D:D2:2C:F3:BE:A9:3C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E4E7FD8029FB04280FF87C1786058E17CB840
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/2311AFA6284FE336E3EF92DF968DD22CF3BEA93C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Mar 2026 14:23:17 +0000
Certificate not after:    Wed 24 Mar 2027 14:28:17 +0000
Subordinate resources:    AS: 269148
                          IP: 45.180.200.0/22
                          IP: 2804:6024::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4e:7f:d8:02:9f:b0:42:80:ff:87:c1:78:60:58:e1:7c:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 14:23:17 2026 GMT
            Not After : Mar 24 14:28:17 2027 GMT
        Subject: CN=2311AFA6284FE336E3EF92DF968DD22CF3BEA93C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:8e:32:d4:63:75:b1:39:d0:96:63:ed:d2:
                    69:0d:9c:73:78:0a:20:f2:ae:fd:ee:64:a7:d1:21:
                    bd:87:68:12:39:74:79:09:60:44:71:60:7f:ca:4c:
                    89:90:a8:f1:d7:8c:77:11:80:d9:12:21:bb:0f:10:
                    d5:2c:cd:c6:f6:53:5b:98:ba:f8:b9:51:d4:02:cb:
                    63:9d:b0:cb:d5:10:68:b1:0e:d2:a8:26:cf:29:1c:
                    38:ac:cc:a2:af:04:ba:da:b7:ce:a4:18:8a:e8:70:
                    c4:64:1e:08:88:e2:64:df:4f:a6:2c:4a:4e:e9:c9:
                    df:35:9e:da:62:08:e8:52:fe:22:5a:ff:24:38:85:
                    15:3b:88:85:e8:3f:97:11:04:79:96:b0:56:49:b9:
                    d6:8f:c4:4c:9a:a6:4d:0e:12:5d:33:c5:4a:ed:7d:
                    eb:30:d1:2f:f1:1d:c7:29:dd:f0:fa:4c:7b:df:61:
                    ca:5f:11:d3:b3:e5:c2:a6:7d:e7:4a:77:26:70:eb:
                    48:0b:7c:11:a6:1a:60:9c:6a:6c:db:bc:09:16:ed:
                    4a:d7:af:6a:fb:65:c4:d6:78:bf:84:76:1c:bb:31:
                    81:9a:36:4d:69:20:c9:7c:36:de:0f:59:f3:2d:b7:
                    ae:78:b5:e1:0e:4d:1e:d4:09:f0:42:e3:66:80:a1:
                    63:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:11:AF:A6:28:4F:E3:36:E3:EF:92:DF:96:8D:D2:2C:F3:BE:A9:3C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/2311AFA6284FE336E3EF92DF968DD22CF3BEA93C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.200.0/22
                IPv6:
                  2804:6024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269148

    Signature Algorithm: sha256WithRSAEncryption
         84:1c:79:c4:f5:ff:cb:9f:8f:38:15:7b:05:71:7c:25:3c:28:
         05:98:0b:d3:f3:be:97:10:12:9e:0c:86:a4:fc:31:54:b1:fb:
         3d:56:7b:c3:57:cf:f7:49:2f:04:a9:05:b1:5b:53:d1:6a:8a:
         9e:c1:a1:5f:b0:2f:74:11:cb:2e:ec:ef:5d:82:1f:a8:7b:15:
         6c:72:a5:7d:cf:30:37:58:bb:76:95:fb:cf:27:6d:24:e3:e4:
         3c:21:ca:8a:f8:1f:00:82:fb:08:85:68:83:7f:e2:a7:5c:58:
         12:15:b1:d6:ea:3e:96:e9:e0:6f:19:43:76:14:1c:93:2a:88:
         67:2c:9c:a0:4e:74:78:18:28:d6:59:72:a4:0f:b0:86:76:28:
         21:43:b7:87:0d:54:fc:a1:ab:96:79:6f:d1:aa:8b:46:d4:86:
         ba:bd:3a:4e:9c:d0:2f:8b:14:63:d3:0d:cb:7f:f7:66:df:b4:
         be:c4:0b:06:4f:0b:4c:57:c3:64:a2:5a:32:0f:ea:19:ba:5a:
         81:7f:e7:b0:34:37:c9:a2:cd:19:bf:2a:d5:2f:41:10:77:71:
         bf:b3:76:1c:d9:fc:e5:06:57:8f:dd:a2:8e:6b:56:01:da:0e:
         29:c7:8b:2e:25:31:1d:85:35:08:3a:92:f8:d2:fe:2d:85:05:
         18:51:e0:de
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgITPk5/2AKfsEKA/4fBeGBY4Xy4QDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3
Q0E4QTRCMB4XDTI2MDMyNTE0MjMxN1oXDTI3MDMyNDE0MjgxN1owMzExMC8GA1UE
AxMoMjMxMUFGQTYyODRGRTMzNkUzRUY5MkRGOTY4REQyMkNGM0JFQTkzQzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMXIjjLUY3WxOdCWY+3SaQ2cc3gK
IPKu/e5kp9EhvYdoEjl0eQlgRHFgf8pMiZCo8deMdxGA2RIhuw8Q1SzNxvZTW5i6
+LlR1ALLY52wy9UQaLEO0qgmzykcOKzMoq8Eutq3zqQYiuhwxGQeCIjiZN9PpixK
TunJ3zWe2mII6FL+Ilr/JDiFFTuIheg/lxEEeZawVkm51o/ETJqmTQ4SXTPFSu19
6zDRL/Edxynd8PpMe99hyl8R07PlwqZ950p3JnDrSAt8EaYaYJxqbNu8CRbtStev
avtlxNZ4v4R2HLsxgZo2TWkgyXw23g9Z8y23rni14Q5NHtQJ8ELjZoChY4MCAwEA
AaOCAzowggM2MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFCMRr6YoT+M24++S
35aN0izzvqk8MB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud
DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy
MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG
CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB
MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy
OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBQAYIKwYBBQUHAQsEggEyMIIBLjBeBggr
BgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85MlJj
YVJadUpzVWZlQ0ZKbnhBQ0Y2ZURpUmZ5ejY2c2JBaFMxUWpmQjNNaS8wLzCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTJS
Y2FSWnVKc1VmZUNGSm54QUNGNmVEaVJmeXo2NnNiQWhTMVFqZkIzTWkvMC8yMzEx
QUZBNjI4NEZFMzM2RTNFRjkyREY5NjhERDIyQ0YzQkVBOTNDLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIttMgwDQQCAAIwBwMFACgEYCQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBtcMA0GCSqGSIb3DQEBCwUAA4IBAQCEHHnE9f/Ln484FXsF
cXwlPCgFmAvT876XEBKeDIak/DFUsfs9VnvDV8/3SS8EqQWxW1PRaoqewaFfsC90
Ecsu7O9dgh+oexVscqV9zzA3WLt2lfvPJ20k4+Q8IcqK+B8AgvsIhWiDf+KnXFgS
FbHW6j6W6eBvGUN2FByTKohnLJygTnR4GCjWWXKkD7CGdighQ7eHDVT8oauWeW/R
qotG1Ia6vTpOnNAvixRj0w3Lf/dm37S+xAsGTwtMV8NkoloyD+oZulqBf+ewNDfJ
os0ZvyrVL0EQd3G/s3Yc2fzlBleP3aKOa1YB2g4px4suJTEdhTUIOpL40v4thQUY
UeDe
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:55:12 2026 by rpki-client