Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3341988D6B27C003A09002BC75B27E71BFE15380.cer
File:                     3341988D6B27C003A09002BC75B27E71BFE15380.cer (raw, json)
Hash identifier:          CZW5lp0yFNeOtlLhxgk2vBxzPiobr2zsckALQrt9oFc=
Subject key identifier:   33:41:98:8D:6B:27:C0:03:A0:90:02:BC:75:B2:7E:71:BF:E1:53:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       24EDC23C3EC7C8EBFE9B7C5888FB54ABAA58C501
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/3341988D6B27C003A09002BC75B27E71BFE15380.mft
caRepository:             rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Apr 2026 01:14:46 +0000
Certificate not after:    Mon 19 Apr 2027 01:19:46 +0000
Subordinate resources:    AS: 274529
                          IP: 2804:958c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ed:c2:3c:3e:c7:c8:eb:fe:9b:7c:58:88:fb:54:ab:aa:58:c5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 20 01:14:46 2026 GMT
            Not After : Apr 19 01:19:46 2027 GMT
        Subject: CN=3341988D6B27C003A09002BC75B27E71BFE15380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:8e:56:ba:99:b7:68:ad:e3:df:88:23:ff:
                    33:e8:9b:08:95:85:c9:18:60:b7:6b:1f:ac:ec:99:
                    a6:f9:41:5a:62:5c:dc:12:80:f8:15:1a:a9:ec:5f:
                    65:25:21:95:89:bd:f6:27:6f:d3:3d:59:46:64:bb:
                    99:c8:a1:28:a1:4f:ce:17:86:3f:ca:cd:d0:20:6a:
                    b6:f1:97:42:99:1c:85:27:36:99:cd:66:20:a4:99:
                    cf:9d:9e:65:e4:5e:43:ee:fc:82:36:0e:0b:42:a8:
                    8e:29:89:aa:01:9e:b9:f0:48:85:ba:29:fb:8a:0a:
                    4f:15:5e:a8:99:19:1e:4b:dd:85:9b:86:72:b4:1b:
                    23:d2:ae:c5:e8:1a:74:f3:d7:50:1e:15:56:63:6c:
                    b2:e5:cd:a3:c4:7d:4b:bf:33:69:b5:55:9c:7e:38:
                    ce:8b:85:d7:57:b3:2c:a9:37:13:62:ba:88:d7:79:
                    fa:f9:42:b7:ce:42:5d:f2:17:60:46:31:0b:22:7c:
                    bb:a9:7b:e4:85:72:e5:50:36:ff:eb:17:d0:bf:3c:
                    44:ff:c6:80:50:0b:b2:55:af:8a:52:bd:3a:12:05:
                    b7:eb:bb:22:7a:ad:95:47:4d:cc:e1:5a:a6:c9:ee:
                    fb:2e:6a:df:b2:73:94:b9:37:ee:72:ce:97:ac:a0:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:41:98:8D:6B:27:C0:03:A0:90:02:BC:75:B2:7E:71:BF:E1:53:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/3341988D6B27C003A09002BC75B27E71BFE15380.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:958c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274529

    Signature Algorithm: sha256WithRSAEncryption
         2c:3c:76:f7:e2:0a:70:48:e7:6e:48:5e:c1:46:8a:89:11:88:
         c7:15:71:6b:37:a6:7a:68:ea:30:18:70:2e:89:73:14:1a:90:
         0f:10:46:40:8a:2e:a4:22:21:6b:1a:97:d7:0b:ad:5a:cc:e3:
         91:53:71:83:71:e5:77:bc:04:99:ad:c4:a4:8d:6f:a0:35:f4:
         ea:30:d8:16:93:a4:52:18:6f:44:b3:ae:83:e0:59:e9:e7:82:
         3f:64:3b:36:ad:0c:d1:75:de:89:d6:04:ec:fe:33:63:28:4a:
         41:8b:94:54:09:04:8c:d0:35:0b:d1:0f:c5:09:1f:8e:7d:fd:
         82:28:ba:23:8f:f8:8b:fa:83:d3:ad:79:a0:46:89:62:49:c6:
         1f:8a:05:7d:33:1a:13:1e:fc:72:86:57:15:96:17:fc:1e:30:
         62:2d:5c:47:a3:67:f6:c0:a2:88:f5:a7:8b:9f:1f:c5:ed:9d:
         3f:89:78:1a:30:81:b8:e1:28:85:38:6d:8d:cd:79:7e:e8:13:
         bf:63:84:d3:08:6d:64:d9:61:94:9a:61:66:75:e9:24:88:0c:
         eb:1c:b6:c8:2f:2e:9e:ff:b1:50:d3:eb:8c:88:f9:01:2e:b0:
         fb:a6:12:2f:f7:7a:d6:6a:36:ac:f6:ee:46:5b:6c:e2:4d:8f:
         9a:da:9d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:21 2026 by rpki-client