Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.cer
File:                     2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.cer (raw, json)
Hash identifier:          lCTFYcCeEhSx3Grm+fj/u8tCZATuef7ij2abQqNfEyI=
Subject key identifier:   26:56:83:44:61:C6:B8:CB:2F:F0:DD:FE:70:EB:F6:A4:57:86:D5:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59A5700B898D6CBB6AB7801D90B808F3D26D1B7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Mar 2026 13:23:00 +0000
Certificate not after:    Mon 22 Mar 2027 13:28:00 +0000
Subordinate resources:    AS: 52715
                          IP: 177.84.20.0/22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a5:70:0b:89:8d:6c:bb:6a:b7:80:1d:90:b8:08:f3:d2:6d:1b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 23 13:23:00 2026 GMT
            Not After : Mar 22 13:28:00 2027 GMT
        Subject: CN=2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:e5:f8:da:2c:9d:17:bc:90:f9:15:3b:95:
                    78:71:f4:9c:02:7a:2d:48:61:e3:bd:89:a2:ed:77:
                    88:4c:87:2b:4b:13:2b:1b:6e:85:f9:19:7d:e1:b3:
                    11:09:b0:49:6c:97:ee:c0:bc:93:27:6d:ce:e8:a2:
                    0f:4f:45:61:00:f7:a1:47:a0:b2:4c:b5:2e:1d:93:
                    96:10:7d:c9:6b:b3:83:1d:38:25:68:ab:f4:30:26:
                    19:27:31:25:f5:71:5e:d1:f5:8c:83:3b:47:32:fe:
                    66:2a:44:68:84:29:ac:28:8c:bf:96:8d:26:c1:e7:
                    d3:20:10:5b:bd:ca:2c:68:f3:94:eb:00:5e:7d:39:
                    0a:77:4f:b1:ac:48:70:bd:86:15:66:28:75:49:c0:
                    ef:b6:fe:36:e6:1d:d4:44:02:8f:95:bb:e2:26:c3:
                    11:3b:f2:c6:d3:ec:01:00:e6:6a:b6:33:c8:50:20:
                    84:aa:8d:48:69:72:ed:09:b4:e6:36:16:40:5a:b2:
                    94:f7:13:71:9c:89:1a:f8:ac:75:19:dd:5c:f9:de:
                    76:53:b2:2b:b4:a9:71:55:6e:8d:27:14:07:d0:bf:
                    b5:ad:97:f5:bc:c4:3d:1e:4a:17:4f:76:ab:e8:51:
                    0b:8c:f7:68:0b:a1:83:53:26:6f:1d:6e:84:b3:19:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:56:83:44:61:C6:B8:CB:2F:F0:DD:FE:70:EB:F6:A4:57:86:D5:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/2656834461C6B8CB2FF0DDFE70EBF6A45786D5E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.20.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52715

    Signature Algorithm: sha256WithRSAEncryption
         76:c7:82:55:cf:c7:9b:86:b7:e1:49:5b:a6:0a:6f:3e:e4:13:
         01:61:d8:e6:e1:8a:0e:ef:64:29:aa:74:bc:83:75:06:a6:7a:
         38:8d:53:d4:e6:e3:f0:1e:c2:8a:d2:99:88:eb:3d:df:a1:b8:
         42:dd:93:7b:24:d2:e2:6f:97:da:e5:06:34:3c:8d:81:71:28:
         40:05:85:83:ac:78:e1:15:c3:c1:a7:21:25:cf:78:0d:af:d4:
         e8:6a:86:4e:33:45:49:71:b0:b2:8b:a2:2e:84:34:a8:5e:6a:
         61:7f:c6:df:a1:e7:e3:5e:9c:34:6c:38:93:8d:44:d9:9e:cf:
         79:e7:27:12:e4:6c:53:0a:01:a7:5d:46:e3:a9:c1:8b:bd:bd:
         4b:d4:f4:9a:e3:6f:b7:88:e5:81:59:5b:a0:1b:3c:ee:77:9e:
         33:f4:3c:3e:b2:14:d0:9a:1f:78:80:f4:87:47:39:74:dd:30:
         5d:d7:f9:1a:cb:8d:bc:a3:b6:a8:6d:6d:22:dd:ef:52:8b:1d:
         55:41:14:91:02:f7:e5:dc:30:d7:e0:b6:16:b9:31:d9:b9:7f:
         56:b0:fe:42:60:d4:30:fe:56:e2:f2:15:40:bc:d0:5a:a3:1a:
         8f:87:b0:42:58:23:b0:89:f7:6d:12:28:00:58:71:34:c9:e9:
         dc:38:6f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:59 2026 by rpki-client