Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
File:                     24C0BF59215339684BA80028158EEDE0FD534D91.cer (raw, json)
Hash identifier:          6GHc0XB2f/DHH6EjWEpCvfjIBgL1OJLCEu5EzxhUiBU=
Subject key identifier:   24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FE579ECBC21B9424337A2194119FE6D2F3876
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Mar 2026 18:21:58 +0000
Certificate not after:    Tue 23 Mar 2027 18:26:58 +0000
Subordinate resources:    AS: 270577
                          IP: 187.94.12.0/22
                          IP: 2804:6e20::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e5:79:ec:bc:21:b9:42:43:37:a2:19:41:19:fe:6d:2f:38:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 24 18:21:58 2026 GMT
            Not After : Mar 23 18:26:58 2027 GMT
        Subject: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:ef:e6:15:7f:64:96:a7:5f:e8:38:67:6c:
                    47:38:09:b1:9e:cb:f1:2c:36:93:43:16:10:64:f5:
                    f4:66:0c:c7:60:0d:e3:2f:63:6f:7f:17:93:81:2f:
                    c5:df:ba:a9:fc:3a:3f:ea:9c:da:91:18:9f:e4:0a:
                    0b:e3:6b:d4:35:51:d3:04:e3:05:37:05:2e:35:56:
                    0c:a5:52:95:fe:d7:7f:1e:df:01:16:bd:ce:be:95:
                    5e:e6:92:a5:05:87:d6:56:01:b7:d1:3b:bc:b0:bf:
                    54:9b:af:a0:06:40:b1:b0:6a:06:88:7a:c5:cd:ce:
                    9f:02:56:73:6c:1b:8d:ed:da:dd:0b:39:13:3c:b3:
                    d7:41:48:a3:bc:b5:e8:68:90:db:d5:1e:07:d7:e4:
                    a0:e7:55:2f:ab:2b:1e:b4:e5:3e:4c:ae:f1:28:b8:
                    93:9b:68:2c:54:1f:32:00:86:8a:95:52:06:c4:cf:
                    91:74:87:f9:e6:18:e0:29:db:74:e0:b4:0a:9f:17:
                    8e:94:e3:47:cf:e3:11:78:82:1d:7e:8f:3d:a2:6a:
                    70:03:15:4b:ea:dc:c7:af:a9:55:6a:87:72:30:a6:
                    38:2c:9c:2d:22:71:1e:0d:52:dd:2a:ef:49:96:2c:
                    9e:7f:86:3d:6b:70:76:a6:1b:6c:73:69:c8:9e:17:
                    0c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.12.0/22
                IPv6:
                  2804:6e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270577

    Signature Algorithm: sha256WithRSAEncryption
         d9:ea:02:63:5c:81:de:c1:f1:e3:f7:17:91:d2:71:56:d8:19:
         3f:3d:16:fa:5d:33:40:94:f8:02:ad:5c:8a:de:84:4e:60:3c:
         8e:c8:44:a8:35:25:60:54:17:98:81:93:e5:26:8d:b9:94:99:
         e3:05:91:09:7c:26:2b:ec:fb:59:3a:84:34:55:22:be:dc:f4:
         97:f8:1c:71:6a:e6:d0:cd:d2:93:7b:56:78:3a:c3:11:da:e6:
         ac:2e:29:cd:d7:16:59:9a:ae:f6:41:d8:17:2c:ae:6b:ba:e4:
         75:37:71:e6:ff:16:74:b4:67:45:82:f2:3b:a2:25:8b:30:b2:
         95:fc:c3:35:f3:17:63:b6:91:ca:71:1c:81:10:37:08:26:54:
         ef:9a:c6:cc:85:07:05:8f:73:36:1c:ab:ad:9f:b1:6f:3d:5d:
         7a:23:8f:ec:81:38:92:a3:72:54:38:cc:30:0c:80:64:c4:57:
         f6:9d:74:b4:75:db:7a:42:a8:6f:f0:ff:61:ed:81:0a:ce:d9:
         88:4f:f7:8b:7d:1a:80:86:58:8a:28:7b:c5:60:89:80:c5:5e:
         a9:41:66:d8:2d:77:3d:d5:29:43:c1:52:50:e9:96:48:7d:ab:
         03:cf:16:37:cc:24:51:56:c5:31:99:fa:60:ae:d8:ff:0f:1a:
         2e:9c:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:34:28 2026 by rpki-client