Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
File:                     422625563D5C776AFD91FC7267113152605F299D.cer (raw, json)
Hash identifier:          PWTpGWstQrsaWPnj6sYkZk0DPSrSwYutRi3+AQfkqHA=
Subject key identifier:   42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       552FEC8E73A9539B32F3716E9A949E95FF4104CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Mar 2026 18:07:09 +0000
Certificate not after:    Thu 18 Mar 2027 18:12:09 +0000
Subordinate resources:    AS: 61936
                          IP: 201.158.8.0/21
                          IP: 2804:1880::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2f:ec:8e:73:a9:53:9b:32:f3:71:6e:9a:94:9e:95:ff:41:04:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 19 18:07:09 2026 GMT
            Not After : Mar 18 18:12:09 2027 GMT
        Subject: CN=422625563D5C776AFD91FC7267113152605F299D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:af:a0:4a:09:df:50:1c:e6:94:de:b8:16:
                    09:60:b5:bf:8f:28:d2:2f:cc:13:6f:73:b4:22:8c:
                    47:3e:a0:9d:22:92:71:53:96:36:e0:90:5e:a4:70:
                    00:57:fc:dc:11:ee:c5:2e:24:38:cd:02:97:95:86:
                    06:7d:43:2b:97:db:c7:33:de:be:51:b1:e3:0b:93:
                    fc:28:9b:d9:ec:a6:40:42:ae:88:4a:f3:54:7f:dc:
                    ef:f9:3e:fb:dd:d0:d4:b1:ae:73:a3:9f:d3:2a:c2:
                    d0:4a:2f:6b:a9:f2:15:b1:5e:5e:a2:bc:37:0a:00:
                    2d:6f:4a:3e:5b:88:8b:51:29:2a:a1:a9:73:be:ee:
                    df:96:a5:cb:b1:4a:14:5a:12:2e:06:d0:30:d4:04:
                    64:78:e6:bd:8b:9a:05:cd:ca:43:05:c8:56:50:73:
                    e8:a3:4b:0c:b3:e7:4d:18:e3:10:93:14:b2:66:41:
                    36:ef:46:0e:0f:3e:0d:ff:41:73:e4:ee:03:45:b4:
                    82:3f:8f:5b:36:3a:91:66:e9:43:aa:4a:f9:16:d6:
                    12:24:07:77:4c:25:a7:8f:e1:6e:0e:95:e8:5e:2f:
                    47:cd:e3:9d:9c:47:ad:9c:96:17:e2:1b:14:6a:81:
                    e8:c7:a0:92:3c:d2:b9:f3:80:04:9a:30:1b:a4:79:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.8.0/21
                IPv6:
                  2804:1880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61936

    Signature Algorithm: sha256WithRSAEncryption
         cf:0b:2c:30:73:1e:5c:19:fb:c9:3d:66:b0:95:d5:10:3b:be:
         2b:c7:c2:aa:c2:85:67:91:2f:4f:17:75:87:49:09:4f:d6:13:
         fe:fd:bc:ad:6b:54:1b:ae:23:7d:bf:59:94:6a:fc:79:f9:f1:
         ed:f4:10:c9:3a:df:fc:7b:d8:d0:85:c9:43:46:68:27:e2:c7:
         8b:1f:88:b3:d5:51:0c:4e:14:3a:3a:ea:62:0d:dd:dc:3c:d6:
         29:dc:ff:97:0e:5b:1b:64:a0:1e:51:4e:de:21:c7:8f:bb:48:
         58:22:a0:86:bc:33:a4:a1:15:d8:06:58:c1:32:f1:51:b0:35:
         9b:78:9b:e7:d6:4d:14:98:3a:64:1b:cb:c0:39:10:4e:cd:28:
         5e:cc:9b:02:d5:c1:37:2d:c7:77:93:e2:34:dd:fe:48:33:23:
         34:c5:9f:d0:91:43:36:8d:37:e6:5a:4d:f2:f3:ee:5b:32:9c:
         5d:1b:5e:76:55:11:50:e6:58:d7:3f:8c:31:0e:79:02:5e:57:
         2e:54:b8:ef:d0:3f:ec:5f:46:60:90:39:85:a6:05:06:cb:b0:
         17:52:66:12:61:0f:0f:5d:dc:bf:0b:b5:87:cb:95:f7:45:93:
         ed:dc:ad:87:50:36:26:b1:13:9d:e2:cf:2e:6a:b7:ec:10:c6:
         b0:02:c5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:59 2026 by rpki-client