Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer
File:                     3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer (raw, json)
Hash identifier:          fxd+f2nxNxQuR6oEiz4NxXwQ1BDsszYFh5VI17PVWWA=
Subject key identifier:   3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       761B3B55C31486EEFE111D5FA9999B7F420E048E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Mar 2026 05:05:17 +0000
Certificate not after:    Tue 23 Mar 2027 05:10:17 +0000
Subordinate resources:    AS: 271487
                          IP: 201.94.144.0/22
                          IP: 2804:7c4c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1b:3b:55:c3:14:86:ee:fe:11:1d:5f:a9:99:9b:7f:42:0e:04:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 24 05:05:17 2026 GMT
            Not After : Mar 23 05:10:17 2027 GMT
        Subject: CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:02:df:b5:bd:8a:a7:e9:23:fb:86:ac:20:
                    69:ff:c8:c1:e5:66:51:68:a3:be:17:42:e1:a1:6c:
                    9e:0f:19:8e:a8:67:2f:39:2e:9f:55:92:1f:5e:b6:
                    0b:5c:f9:85:45:c4:7b:dd:9c:74:7c:60:ee:c5:72:
                    d7:dc:e2:df:28:39:54:ad:fb:32:5d:df:91:47:12:
                    42:70:2d:32:55:68:ee:f2:63:33:df:72:0b:71:17:
                    a2:8b:e4:29:b6:eb:5e:fc:98:6d:92:e7:9b:3a:bd:
                    1e:cd:1a:63:9c:7b:f8:e4:af:29:d7:b8:03:2e:7e:
                    c5:54:9c:9b:5b:aa:13:d5:e6:d1:68:e9:23:ae:d2:
                    ef:79:44:99:66:41:21:5b:c2:45:cf:35:e6:ea:47:
                    86:9f:dc:7e:70:76:16:df:be:df:09:12:f4:d1:c4:
                    58:1c:f6:29:b0:52:d7:8e:c8:4a:66:58:09:d6:04:
                    e7:95:22:f3:14:34:3d:3b:be:46:c0:ce:79:f3:39:
                    9a:d0:d9:0c:ac:a3:4a:f9:af:f5:a0:86:d6:df:9d:
                    62:8a:28:0d:ca:0f:df:2b:cb:80:f2:d1:18:1f:4a:
                    c3:dc:e3:72:5e:09:b3:d4:bc:4d:53:cd:ec:90:0f:
                    d0:a9:47:e2:50:a9:de:22:32:5f:c5:a0:7b:2d:63:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.144.0/22
                IPv6:
                  2804:7c4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271487

    Signature Algorithm: sha256WithRSAEncryption
         ad:c8:ac:a7:d5:2e:c7:26:33:cb:5a:09:55:74:95:4f:13:8d:
         78:e8:14:7e:76:0f:f8:d7:12:46:11:3c:1f:3d:b7:b5:6d:28:
         3c:d0:74:6c:43:29:22:cc:1d:04:ca:1e:33:cc:8e:d6:ec:6c:
         24:4a:d2:bb:1c:c9:a8:0b:35:da:58:3c:83:b7:f0:64:0c:b1:
         e3:55:76:24:00:36:4d:bb:03:c3:73:d5:1d:47:5c:7d:ad:f7:
         08:86:0c:0f:1c:5b:9a:7d:58:dc:dc:52:61:35:f6:55:7b:7e:
         c3:e5:dc:83:fb:4c:0f:3b:d8:fd:ab:00:67:36:a3:78:c8:fa:
         d5:ef:a9:8f:52:03:13:24:14:3d:5a:c2:37:a5:89:7a:89:e3:
         a4:da:5c:dd:49:df:b0:6a:a3:df:80:84:9e:ca:18:43:e9:61:
         0c:54:7d:ec:64:0b:71:ad:0c:6e:d0:68:e4:54:cc:b7:be:a9:
         85:99:01:f0:ea:f7:5c:32:ae:a9:52:df:65:0d:16:57:db:2d:
         79:09:6e:de:cb:0e:41:fc:e6:b3:19:14:01:64:7f:35:60:90:
         19:20:11:86:9f:da:dc:15:36:02:d7:1e:60:ad:16:e3:54:a0:
         94:a7:e5:7e:bb:54:74:17:9f:47:e4:60:67:8e:41:5b:f2:15:
         36:1c:1e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:05:20 2026 by rpki-client