Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
File:                     40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer (raw, json)
Hash identifier:          J5FCXVNcbnBi5VmrrcghfPHzuk0smM/tP/S17isdgFA=
Subject key identifier:   40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5DD0FB18940D01BEADCE9EDA1E3072E8F454BFD9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 May 2026 20:25:49 +0000
Certificate not after:    Fri 07 May 2027 20:30:49 +0000
Subordinate resources:    AS: 272418
                          IP: 186.65.76.0/22
                          IP: 2804:80e0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d0:fb:18:94:0d:01:be:ad:ce:9e:da:1e:30:72:e8:f4:54:bf:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  8 20:25:49 2026 GMT
            Not After : May  7 20:30:49 2027 GMT
        Subject: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:a8:43:9f:95:c5:00:d0:26:e1:8c:0c:e3:
                    68:e1:a8:c6:4e:67:2b:6a:3c:ac:75:6b:a7:6f:d2:
                    d2:7c:de:7b:a8:52:a2:7b:eb:af:9b:3b:f0:ce:5e:
                    d8:89:b2:cb:72:2e:26:06:5f:79:f4:a3:15:72:d1:
                    b6:97:ee:bb:31:ec:7d:20:95:47:bc:ae:7a:38:19:
                    71:b2:c4:e6:59:12:14:5a:ee:11:4e:29:a7:16:a9:
                    ac:d8:a5:25:ac:15:1b:42:8d:16:28:ec:0a:f3:98:
                    3e:1b:05:2b:5f:9a:64:f8:f7:a7:95:30:7c:7c:78:
                    67:55:ea:21:7b:1d:e6:8e:d0:be:d3:cc:0d:aa:63:
                    2c:f3:6c:02:b7:3c:41:3d:6c:21:61:95:d0:d9:76:
                    5c:7b:ae:0e:4f:94:ad:04:19:a2:70:0f:57:37:3e:
                    4d:4a:45:35:50:35:17:e4:a3:e8:53:06:e4:e0:1b:
                    7a:2d:55:b7:61:79:0f:aa:fd:fd:0f:21:2b:ae:40:
                    45:04:4c:7e:f5:c3:3a:b5:95:56:1e:26:cd:5c:dc:
                    6f:fe:88:fd:fc:29:d6:4a:aa:f3:23:58:3f:be:58:
                    6a:d4:a2:04:03:4f:49:9b:55:18:76:83:ad:f8:68:
                    6c:1e:0f:68:9a:be:9a:c0:2a:60:72:33:d3:3d:90:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.76.0/22
                IPv6:
                  2804:80e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272418

    Signature Algorithm: sha256WithRSAEncryption
         00:14:4c:ff:55:7c:a9:75:5d:41:ba:7b:9e:94:71:e3:cf:2e:
         d1:73:0f:6a:cb:83:69:16:0e:ec:c1:3d:fe:95:23:0f:51:95:
         b2:6b:d4:e9:08:e8:7a:3f:d0:46:e1:17:76:f7:ee:9d:a0:8b:
         86:54:dc:f8:3f:c2:a4:f1:81:7a:df:c6:30:be:7c:4b:41:42:
         ae:06:c8:7c:a3:d5:a1:b4:d1:2f:a7:10:5b:8e:ee:d8:8b:59:
         68:04:2d:fd:d9:47:d2:4a:ea:63:20:ad:41:e5:2c:01:9f:25:
         7f:7d:3f:37:54:13:44:47:fc:7c:fd:c6:87:45:de:d0:71:a5:
         32:1c:ac:cb:4c:fb:8f:9d:75:f5:2c:ce:fd:43:b7:b7:fa:65:
         1d:6a:02:8a:14:0c:0d:a4:1b:a3:df:09:3b:cc:59:2c:88:a6:
         2e:ee:85:2a:ae:0d:9b:2a:47:08:b5:9a:da:e8:ff:a6:b6:d0:
         b8:de:83:04:09:48:6d:9e:c2:28:79:ce:1b:e0:68:69:1b:51:
         21:67:b0:df:f6:c1:c3:62:f7:c8:8f:88:81:7c:44:4e:8f:c9:
         57:c3:55:85:32:dd:5e:ec:d5:e8:d5:cf:2a:65:cb:18:06:c0:
         ba:16:a0:d5:76:0d:ee:be:e8:0f:22:30:8c:5b:09:07:08:b7:
         57:0c:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:05 2026 by rpki-client