Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.cer
File:                     4009BCA227DBF1010DF403A7CB5061E4A9AC0162.cer (raw, json)
Hash identifier:          bvATS80CpTzJO8ayXxBAyhc30sQazCr0+5Yypt1rMGc=
Subject key identifier:   40:09:BC:A2:27:DB:F1:01:0D:F4:03:A7:CB:50:61:E4:A9:AC:01:62
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2337A410695A2226381FAEDF8F04AA01DAB1B620
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.mft
caRepository:             rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Jul 2026 14:08:00 +0000
Certificate not after:    Wed 14 Jul 2027 14:13:00 +0000
Subordinate resources:    AS: 269317
                          IP: 45.184.60.0/22
                          IP: 2804:62c4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:37:a4:10:69:5a:22:26:38:1f:ae:df:8f:04:aa:01:da:b1:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 15 14:08:00 2026 GMT
            Not After : Jul 14 14:13:00 2027 GMT
        Subject: CN=4009BCA227DBF1010DF403A7CB5061E4A9AC0162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:f4:08:9c:9a:8e:4f:14:8b:fa:7f:12:ac:
                    71:54:d2:be:93:c6:3c:a8:5c:cc:e9:46:71:59:68:
                    ca:46:a1:c8:92:59:97:bd:04:87:08:c6:f0:a3:30:
                    06:56:7f:7d:4c:cf:3a:20:59:28:65:61:bc:42:9a:
                    99:0e:95:36:84:ac:9d:16:46:9d:87:17:24:a2:51:
                    a0:1a:1d:6f:c5:c9:cb:71:8e:9e:03:f4:95:39:66:
                    ea:58:ed:f2:cb:a4:72:fe:11:5a:e5:a5:dc:dd:65:
                    66:8e:9e:f9:ff:93:f0:b7:36:c0:8c:e7:e0:fe:1e:
                    cc:ba:45:08:16:e9:67:2a:2f:66:fd:9b:f0:04:90:
                    90:b4:cc:40:9d:80:2a:c4:4a:d6:25:91:8b:a9:cc:
                    27:77:5a:f4:7f:5f:ba:c6:f0:2b:75:86:bb:e8:a0:
                    a8:57:a0:e1:77:2f:d7:2e:f6:fa:68:0d:50:63:2b:
                    e2:1a:05:84:fa:b5:d3:e7:d8:23:4b:29:e7:3c:ea:
                    4d:79:29:d7:69:4b:5f:53:30:85:26:5c:48:8f:3f:
                    77:04:d9:9a:35:f3:7e:50:22:34:0c:3c:d9:06:fb:
                    75:d5:15:e6:ce:da:ac:e1:bd:e9:a4:30:0f:ab:4e:
                    4b:b2:c0:21:a4:b8:89:1b:ca:9a:24:ed:60:75:fd:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:09:BC:A2:27:DB:F1:01:0D:F4:03:A7:CB:50:61:E4:A9:AC:01:62
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.60.0/22
                IPv6:
                  2804:62c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269317

    Signature Algorithm: sha256WithRSAEncryption
         65:66:2a:ac:19:d0:18:0f:d1:e6:13:d5:c2:9c:e8:66:4e:e5:
         75:ea:f0:b0:86:b3:56:83:a5:19:e7:c6:97:83:80:f6:db:15:
         28:2b:a9:d4:47:7e:11:96:09:8a:11:7e:05:e0:f8:f9:20:e2:
         7a:b0:ce:44:ae:c9:10:e4:29:88:a5:5c:7a:4d:c8:2a:e2:36:
         e3:80:e8:7a:a7:c9:c2:0b:fe:f4:bc:d8:0b:65:87:e3:2d:b0:
         b1:26:5e:c7:8a:1b:91:67:64:f9:4a:3f:f6:08:02:49:e1:27:
         b2:32:75:48:d3:8d:45:99:90:1a:31:0d:0c:d1:2b:26:21:dd:
         e2:a2:f4:db:5d:d3:43:a1:27:64:9d:e4:b5:53:3e:41:45:76:
         0a:d2:18:72:6e:29:7c:b1:2e:d0:b7:84:17:ed:d8:0b:b6:c3:
         fc:57:53:bb:67:c7:e6:47:a2:1f:8e:bd:87:76:81:f7:bd:00:
         88:07:8c:b7:dc:c4:f0:0c:4d:58:f1:c5:e1:ce:8a:df:67:5d:
         32:5a:35:00:7d:20:db:e3:e7:1e:33:96:96:de:7c:e6:37:9b:
         e4:3c:88:04:52:10:6d:c9:4b:17:37:11:87:d6:8a:d8:71:41:
         72:fb:48:ba:00:fd:cc:22:f2:cf:b9:99:ab:b5:e3:a4:4b:0f:
         d6:d6:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:19:53 2026 by rpki-client