Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.cer
File:                     37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.cer (raw, json)
Hash identifier:          Lj5X1mkeSgFMSOBMr9FhvPk4INDoo/s8qr/JjuHLdTY=
Subject key identifier:   37:DF:45:44:36:B6:FD:02:2E:A5:DB:8D:3C:4E:6C:EC:13:3F:02:C0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       61B7990AD447CFBBE493CA3796E62DDDFE79A60F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 May 2026 16:50:09 +0000
Certificate not after:    Mon 03 May 2027 16:55:09 +0000
Subordinate resources:    AS: 270515
                          IP: 187.49.152.0/22
                          IP: 2804:6d24::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 19:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b7:99:0a:d4:47:cf:bb:e4:93:ca:37:96:e6:2d:dd:fe:79:a6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  4 16:50:09 2026 GMT
            Not After : May  3 16:55:09 2027 GMT
        Subject: CN=37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:e7:4a:4f:c6:23:f1:fb:4e:46:db:be:34:
                    97:35:5b:a2:c6:57:78:2b:21:a7:fa:35:4d:7b:4c:
                    5b:dc:23:29:7c:39:03:c7:21:d3:42:56:5a:22:27:
                    c5:74:9b:41:a0:72:22:44:b8:4e:4b:8b:fe:12:d9:
                    96:b4:33:9d:e3:aa:3d:af:53:68:65:6c:c7:4e:7d:
                    f8:0e:f8:e3:ca:f6:69:63:7e:8b:7c:00:d3:d3:7a:
                    be:85:6c:64:83:7d:49:69:f8:c1:21:fa:3c:c0:12:
                    1d:7e:09:a3:16:75:01:71:e5:13:1e:99:89:29:8e:
                    c1:49:73:39:45:ff:5e:81:01:8f:37:a3:1c:4d:13:
                    2e:9d:60:c3:06:52:ea:b5:07:18:4c:6e:13:81:ff:
                    45:51:d3:42:e5:74:04:b6:f5:6e:0f:fb:45:fb:81:
                    20:aa:5a:50:1b:70:96:b2:9e:d8:69:fe:f2:d9:60:
                    f9:31:4e:83:d4:69:86:9d:11:68:c7:f8:bc:3b:46:
                    8a:cf:98:e4:1d:79:c1:b7:3b:f8:7f:af:37:ad:84:
                    c4:34:69:70:33:14:90:68:5d:88:a5:c6:66:8d:44:
                    34:cd:f7:c3:59:cb:f1:60:ef:73:d9:c1:7c:74:9b:
                    1e:39:72:01:1b:4d:da:28:7b:1e:72:59:ea:0c:07:
                    9c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:DF:45:44:36:B6:FD:02:2E:A5:DB:8D:3C:4E:6C:EC:13:3F:02:C0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.152.0/22
                IPv6:
                  2804:6d24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270515

    Signature Algorithm: sha256WithRSAEncryption
         a5:30:d3:40:61:79:63:b8:99:3a:dd:02:47:e2:07:2d:c0:1a:
         d8:f7:6d:04:d0:df:90:bd:98:f2:f3:26:13:c9:4b:4a:9b:ea:
         a7:7d:06:4c:18:8a:60:34:a0:9f:fd:83:5e:05:0d:25:02:90:
         09:84:46:fb:ed:96:48:da:2b:df:1b:c1:9f:23:1f:bb:d7:ae:
         b0:48:8a:0d:9f:ef:1f:0f:70:84:0d:69:cc:12:8a:6c:7b:0a:
         ec:65:ef:38:af:a6:a6:54:7f:9e:5e:35:25:09:9a:e5:13:d3:
         35:15:0d:66:ca:67:06:3f:ac:84:32:e5:85:f3:72:74:28:29:
         79:da:dd:72:e7:6a:d5:16:e2:0f:6d:98:76:51:8e:67:37:a3:
         c2:1a:d6:1e:33:73:61:10:61:60:0b:a1:85:b9:74:23:e4:d2:
         a8:f3:1c:c1:a2:94:9f:18:9e:0f:c3:00:3f:ea:8b:a3:7f:93:
         63:bc:e3:42:f9:77:e6:69:59:06:a0:32:46:ab:e0:ff:f4:d2:
         09:bc:24:14:2e:64:59:43:35:8a:49:33:43:3b:f6:8a:26:9a:
         a2:d2:12:24:37:c7:36:10:b5:8a:aa:24:2e:70:52:10:e8:fa:
         8f:7a:40:12:bb:05:ec:71:68:c3:5f:80:22:d2:91:1f:8f:0d:
         ca:7f:2a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:48:12 2026 by rpki-client