Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
File:                     433BC56DE61BF5759F79705E437131F09597AF13.cer (raw, json)
Hash identifier:          rdES6d5aN1yHJ/iRld2A7r5N2xtC84xIE8932278BWY=
Subject key identifier:   43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0AA31652B6974916BAA9D887479CA09975E0A213
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Mar 2026 12:23:40 +0000
Certificate not after:    Wed 24 Mar 2027 12:28:40 +0000
Subordinate resources:    AS: 269079
                          IP: 45.179.132.0/22
                          IP: 2804:5f24::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a3:16:52:b6:97:49:16:ba:a9:d8:87:47:9c:a0:99:75:e0:a2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 12:23:40 2026 GMT
            Not After : Mar 24 12:28:40 2027 GMT
        Subject: CN=433BC56DE61BF5759F79705E437131F09597AF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:72:a4:13:94:97:7a:ea:28:54:62:c9:74:
                    72:c4:af:14:63:9e:8d:16:f7:02:ad:ae:1a:64:b7:
                    72:f3:0c:9a:e6:d0:8c:47:ab:c3:6f:28:e3:3e:33:
                    54:52:68:f4:a2:19:23:24:c4:51:37:3d:1e:8e:59:
                    b8:c1:de:d1:45:5c:2c:ce:7f:18:7c:f7:2a:4b:b2:
                    d0:6a:c1:9a:8a:ef:49:0a:ef:4a:ac:b2:49:4a:b0:
                    2b:dd:5e:08:3e:fb:50:87:37:8d:ca:51:6b:8c:ee:
                    61:36:b4:b2:27:aa:d5:ca:c0:57:ef:88:ed:11:db:
                    25:a5:38:31:b7:a5:cf:23:8e:28:30:ea:eb:02:81:
                    46:33:d5:52:8f:50:b1:3c:7a:a4:10:10:2f:cb:d2:
                    23:44:20:8c:a0:87:7e:9c:68:8d:b1:59:e8:b2:3b:
                    42:60:d3:9d:5c:71:d5:21:2b:b7:59:f4:79:b9:5e:
                    1b:6d:3e:db:54:b8:98:3b:9b:00:d2:84:35:d1:b2:
                    c3:f4:22:d5:8b:d0:0d:74:6f:50:51:2d:49:c3:23:
                    57:8d:fd:7d:03:f7:cf:06:e8:69:6b:ec:5d:b4:40:
                    0a:2f:ca:a5:cc:96:cb:46:75:91:6e:42:9c:70:5f:
                    de:23:75:b0:85:38:c7:98:97:9e:ab:e4:88:db:ac:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.132.0/22
                IPv6:
                  2804:5f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269079

    Signature Algorithm: sha256WithRSAEncryption
         ce:25:9e:4f:d2:75:ee:80:26:52:a5:d7:04:dd:3b:f2:ab:59:
         17:c8:39:3f:21:17:8c:a0:4b:89:6a:06:0a:a8:68:34:73:7a:
         0e:8e:92:b3:0c:3a:55:69:c1:6a:d3:3c:d6:bd:f7:ae:5b:f7:
         c8:ac:db:a5:9b:9c:d5:14:7e:c6:b9:f4:55:d0:09:9c:32:1b:
         bd:ff:61:e9:66:62:2d:ea:f3:c4:8d:b6:df:94:c8:f7:67:df:
         d2:d2:a4:55:e4:d3:57:f3:13:21:1f:3d:be:e8:7a:97:8f:c9:
         51:b1:c4:52:43:95:a8:a1:26:17:59:f3:e9:58:8f:b4:d4:5a:
         3a:dd:40:c8:d9:e3:01:88:08:23:e3:68:5d:f4:58:5a:c9:6b:
         37:7e:60:66:9c:a2:fe:d3:8d:cd:27:a5:55:52:e9:c6:1f:d7:
         b8:f3:51:9a:2c:ba:3d:90:de:a3:c3:2e:34:63:4f:e2:66:65:
         b1:42:c9:e8:de:ce:c3:7a:06:79:e1:3c:78:08:74:36:b5:23:
         b7:55:78:90:19:81:06:b0:60:e3:24:bb:5c:87:72:10:ae:ab:
         41:93:9a:29:ce:8b:da:fd:17:48:72:e4:88:23:2c:16:4c:ad:
         9e:d3:50:dc:06:e6:c2:e6:3d:6a:34:30:c4:3b:15:f5:33:f2:
         89:6b:88:66
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUCqMWUraXSRa6qdiHR5ygmXXgohMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAzMjUxMjIzNDBaFw0yNzAzMjQxMjI4NDBaMDMxMTAvBgNV
BAMTKDQzM0JDNTZERTYxQkY1NzU5Rjc5NzA1RTQzNzEzMUYwOTU5N0FGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH03KkE5SXeuooVGLJdHLErxRj
no0W9wKtrhpkt3LzDJrm0IxHq8NvKOM+M1RSaPSiGSMkxFE3PR6OWbjB3tFFXCzO
fxh89ypLstBqwZqK70kK70qssklKsCvdXgg++1CHN43KUWuM7mE2tLInqtXKwFfv
iO0R2yWlODG3pc8jjigw6usCgUYz1VKPULE8eqQQEC/L0iNEIIygh36caI2xWeiy
O0Jg051ccdUhK7dZ9Hm5XhttPttUuJg7mwDShDXRssP0ItWL0A10b1BRLUnDI1eN
/X0D988G6Glr7F20QAovyqXMlstGdZFuQpxwX94jdbCFOMeYl56r5IjbrO3BAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDO8Vt5hv1dZ95
cF5DcTHwlZevEzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmp3
TkZuWWMzQms1RmhyVFJVMUhBZXZjQUdUcURxTnlLam1YajlnRVBncEQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zq
d05GblljM0JrNUZoclRSVTFIQWV2Y0FHVHFEcU55S2ptWGo5Z0VQZ3BELzAvNDMz
QkM1NkRFNjFCRjU3NTlGNzk3MDVFNDM3MTMxRjA5NTk3QUYxMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbOEMA0EAgACMAcDBQAoBF8kMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbFzANBgkqhkiG9w0BAQsFAAOCAQEAziWeT9J17oAmUqXX
BN078qtZF8g5PyEXjKBLiWoGCqhoNHN6Do6Ssww6VWnBatM81r33rlv3yKzbpZuc
1RR+xrn0VdAJnDIbvf9h6WZiLerzxI2235TI92ff0tKkVeTTV/MTIR89vuh6l4/J
UbHEUkOVqKEmF1nz6ViPtNRaOt1AyNnjAYgII+NoXfRYWslrN35gZpyi/tONzSel
VVLpxh/XuPNRmiy6PZDeo8MuNGNP4mZlsULJ6N7Ow3oGeeE8eAh0NrUjt1V4kBmB
BrBg4yS7XIdyEK6rQZOaKc6L2v0XSHLkiCMsFkytntNQ3AbmwuY9ajQwxDsV9TPy
iWuIZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:06:29 2026 by rpki-client