Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.cer
File:                     2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.cer (raw, json)
Hash identifier:          xzcHvoQCEH7ybGYcKSdFbADmq4kRcv/eMWhEczGrSQI=
Subject key identifier:   23:77:DF:7A:37:15:09:E2:CB:D9:F6:DE:C7:CE:28:15:4D:9C:45:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       012A58E47A621DF55BC57FE9ADCDAD25E09BCAEB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 May 2026 15:36:00 +0000
Certificate not after:    Fri 07 May 2027 15:41:00 +0000
Subordinate resources:    AS: 268637
                          IP: 45.164.208.0/22
                          IP: 2804:5440::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2a:58:e4:7a:62:1d:f5:5b:c5:7f:e9:ad:cd:ad:25:e0:9b:ca:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  8 15:36:00 2026 GMT
            Not After : May  7 15:41:00 2027 GMT
        Subject: CN=2377DF7A371509E2CBD9F6DEC7CE28154D9C4550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:89:d4:54:36:13:86:59:d2:95:28:c1:af:
                    25:1b:ad:2e:c5:59:7b:54:d6:f8:99:1d:05:dd:9f:
                    8b:db:77:04:3a:19:3f:c8:20:08:f8:4b:af:c6:f7:
                    3f:76:c2:98:a9:1a:51:43:ce:2d:56:66:9f:6e:dd:
                    52:d2:fd:5c:90:1b:4d:38:a9:1e:a9:b1:b6:78:e7:
                    84:cd:b5:5a:4c:15:91:d1:33:4a:a1:b2:24:26:86:
                    3e:ce:a1:00:2a:6d:6f:8a:36:5d:32:56:68:93:0a:
                    ab:e2:ef:8e:87:bd:81:e3:b0:25:96:da:4d:6b:5b:
                    3c:24:4b:b6:aa:e4:4f:ec:a2:e8:2e:16:fa:2f:5c:
                    81:f2:b5:12:b2:a0:f6:47:38:8c:d4:d7:6f:21:ed:
                    fd:14:a0:35:ca:ba:2a:18:4c:fe:91:61:8f:fc:c8:
                    bf:7a:1a:7a:99:5b:81:cd:76:cb:fd:8d:ab:86:d8:
                    0d:c0:35:f8:ed:a6:46:77:98:dc:4c:0d:6f:a7:b8:
                    46:3a:d6:ab:c3:87:3e:8f:9d:91:95:48:17:60:5d:
                    28:02:c5:fe:86:10:16:04:a2:fb:60:8e:9e:fb:b4:
                    e8:cd:bc:a2:5c:50:27:9f:21:ba:0e:8a:ee:cf:f2:
                    c5:96:31:1b:c2:29:f1:ba:f0:46:02:80:e3:56:ef:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:77:DF:7A:37:15:09:E2:CB:D9:F6:DE:C7:CE:28:15:4D:9C:45:50
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.208.0/22
                IPv6:
                  2804:5440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268637

    Signature Algorithm: sha256WithRSAEncryption
         d9:32:38:3a:2e:dc:b3:13:9c:48:02:21:1b:77:60:48:f7:95:
         22:e6:22:76:5c:4d:26:b4:a1:30:78:ce:e0:2f:fc:9e:c0:89:
         be:e2:83:10:b0:18:59:25:41:89:8e:3c:6e:d1:d1:6e:86:cd:
         e6:35:41:a6:f3:f3:fb:60:18:69:68:df:d5:b6:88:43:36:55:
         7b:6c:93:8f:5b:6b:b8:61:27:5a:54:32:bb:dd:ce:95:c4:81:
         97:19:0e:93:07:fc:93:04:af:de:a7:65:dc:72:3a:68:d4:57:
         ff:92:22:41:70:e0:1c:f2:dc:94:a3:a2:86:7a:60:7b:89:b4:
         f4:3a:00:22:55:9f:74:c1:c2:bd:f6:aa:32:c0:53:0f:b8:3f:
         2a:eb:ac:5b:33:ca:f6:30:41:0b:d7:19:7d:77:65:98:28:8e:
         40:b9:eb:39:1b:78:b0:d7:fa:1d:f5:9e:b4:2f:36:ab:b8:78:
         ef:9c:36:51:77:1d:c1:0d:08:10:ab:5b:7c:7c:de:78:a0:34:
         78:d4:8e:86:8a:bc:dd:23:6b:b1:73:b9:e1:49:a3:bf:de:1f:
         60:a1:b1:76:36:a7:3e:e5:69:fe:3e:48:ca:0f:22:46:e5:02:
         81:58:fe:f5:d3:4b:74:0c:ff:af:57:e5:8a:d4:60:35:18:d1:
         66:66:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:34:24 2026 by rpki-client