Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/302BDDD6801156430042469F04C7EF5AA97B76B9.cer
File:                     302BDDD6801156430042469F04C7EF5AA97B76B9.cer (raw, json)
Hash identifier:          vh3X3/gpytWz5opBfgtzSAAqXU8EjCyHAp6NNYGoR+Y=
Subject key identifier:   30:2B:DD:D6:80:11:56:43:00:42:46:9F:04:C7:EF:5A:A9:7B:76:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A612B9057850352B6F701943A010C7DF1F1AD81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/302BDDD6801156430042469F04C7EF5AA97B76B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 03 May 2026 17:53:44 +0000
Certificate not after:    Sun 02 May 2027 17:58:44 +0000
Subordinate resources:    AS: 263145
                          IP: 168.205.136.0/22
                          IP: 170.245.224.0/22
                          IP: 177.154.28.0/22
                          IP: 2804:1774::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:61:2b:90:57:85:03:52:b6:f7:01:94:3a:01:0c:7d:f1:f1:ad:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  3 17:53:44 2026 GMT
            Not After : May  2 17:58:44 2027 GMT
        Subject: CN=302BDDD6801156430042469F04C7EF5AA97B76B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:65:2a:e1:43:44:60:24:2b:45:0f:9a:f9:
                    57:1b:be:10:de:9d:a3:c9:0d:7a:b0:60:26:85:2b:
                    2b:53:82:82:9e:90:c2:b9:f2:2a:34:fe:d3:90:aa:
                    07:2c:63:f2:4e:30:a1:a5:ea:eb:df:64:f9:95:ba:
                    a4:b3:c2:96:c9:4d:bf:1b:4a:8d:fc:f2:6d:af:f4:
                    26:03:72:7f:0b:40:c7:c5:34:76:24:51:79:bf:f0:
                    96:65:fa:1e:f4:85:7e:34:a2:a2:1a:40:1a:2c:93:
                    34:c2:4d:65:ea:f5:20:95:fa:0c:8a:df:8a:f2:3a:
                    99:0c:e3:52:81:d4:61:f8:70:3a:ed:24:8e:55:53:
                    c5:52:88:2b:71:40:d6:b2:95:df:60:67:af:88:4f:
                    fc:2f:d2:46:d6:e5:00:04:f8:c3:20:56:67:16:77:
                    bd:e5:2a:9a:a9:96:a0:e2:85:3b:45:17:2d:ef:d5:
                    e7:40:70:df:59:f4:75:54:36:99:34:af:9f:8c:c3:
                    29:ab:b7:31:c0:2f:85:ab:af:38:ff:50:c1:a1:fb:
                    56:cc:88:e5:cc:79:98:61:cb:ac:3e:68:6e:15:a1:
                    5f:63:85:d1:f1:2b:82:d8:77:d0:86:9c:01:20:5d:
                    5b:79:c1:11:f4:2b:32:c7:6a:19:7e:0e:3b:30:59:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:2B:DD:D6:80:11:56:43:00:42:46:9F:04:C7:EF:5A:A9:7B:76:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/302BDDD6801156430042469F04C7EF5AA97B76B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.136.0/22
                  170.245.224.0/22
                  177.154.28.0/22
                IPv6:
                  2804:1774::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263145

    Signature Algorithm: sha256WithRSAEncryption
         b9:3f:bb:b2:dc:69:5e:cc:42:25:7f:de:81:f5:5a:ed:d2:ae:
         ae:27:64:dc:a8:45:40:a8:6e:e4:8f:1e:c6:0c:78:81:e0:58:
         05:52:59:af:c4:6d:ba:62:9c:e6:40:f9:70:7b:a8:76:a1:db:
         b1:1f:51:5b:2d:26:74:bb:f6:bf:bb:3f:e4:f0:67:24:8b:12:
         f9:32:7e:a0:ba:b9:6e:95:8c:93:58:16:39:58:08:01:96:f8:
         63:34:11:e1:5c:84:06:16:fc:8e:0b:4d:e8:1f:a0:bf:78:81:
         4d:b0:56:dc:46:e8:f8:69:be:f7:4d:a1:34:42:61:8c:c5:69:
         ea:f8:1b:01:e6:87:6f:5d:d7:97:15:dc:58:2b:9f:4a:7b:09:
         58:0d:c7:88:fe:a5:63:26:f6:aa:08:f7:d7:27:55:5d:76:7d:
         43:aa:28:2c:70:a8:65:47:34:2a:da:88:cf:d6:41:1f:b0:0f:
         53:74:fc:98:a8:59:6d:8c:6a:3f:d2:8a:81:b4:6f:ac:b1:57:
         e6:ba:43:99:cb:a3:c9:c4:1c:3d:e9:63:31:3a:a1:36:32:22:
         ad:1f:07:46:c4:70:2a:5e:b4:b1:38:41:9a:80:c8:f8:12:5f:
         76:5c:3d:d5:4c:87:28:92:13:55:98:a3:04:48:1d:62:d3:7d:
         b3:6c:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:43 2026 by rpki-client