Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
File:                     4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer (raw, json)
Hash identifier:          /6xljWp7vVJzp2nBvkGuWlLO4bmpE0NmGAZafe/JVXw=
Subject key identifier:   44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B1B60FF6751F54E8263D0242ACD84A8D19505F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Apr 2026 11:55:06 +0000
Certificate not after:    Thu 29 Apr 2027 12:00:06 +0000
Subordinate resources:    AS: 263988
                          IP: 138.255.188.0/22
                          IP: 2804:28f0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1b:60:ff:67:51:f5:4e:82:63:d0:24:2a:cd:84:a8:d1:95:05:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 11:55:06 2026 GMT
            Not After : Apr 29 12:00:06 2027 GMT
        Subject: CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:a4:67:fe:5d:75:bd:06:cd:38:c7:47:f3:
                    f3:ca:f7:cf:14:84:be:58:9a:02:69:04:ed:33:36:
                    4e:74:5b:2c:90:ba:90:3d:10:28:80:3b:5a:18:86:
                    bd:e6:ed:a7:3d:e0:cd:cb:4b:19:6a:53:91:cd:e1:
                    1b:24:6b:4c:1b:04:bd:29:bb:70:63:86:24:41:83:
                    8a:89:36:1c:5f:1e:6b:a1:f9:ec:d5:db:06:d3:51:
                    c7:a5:24:9a:95:68:29:86:44:8e:f0:7a:f6:f1:4f:
                    3f:d4:4a:82:44:ff:b6:84:07:00:31:cb:c0:d2:90:
                    e2:79:99:67:b5:b0:28:fd:01:b2:88:9c:d6:47:b9:
                    2c:58:a8:24:e3:0b:b1:26:8a:5d:2e:6c:d4:94:6b:
                    0f:49:d5:c7:b7:7b:0c:e3:b7:d5:79:86:dd:36:9a:
                    82:54:4c:8f:81:10:c7:04:e5:5b:3e:20:ef:27:3b:
                    4b:2a:21:db:c5:d4:74:c1:b4:47:f4:a5:df:ad:ba:
                    d7:72:21:e9:af:38:08:dc:7f:ce:23:64:54:57:fa:
                    22:ff:b5:62:53:ab:15:e7:c9:e0:fd:b8:ee:54:7e:
                    92:d8:35:97:7b:b6:b4:87:96:d4:d8:ba:be:1e:6a:
                    a3:91:a6:d4:4a:c2:f2:91:62:29:2b:5a:9f:dc:80:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.188.0/22
                IPv6:
                  2804:28f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263988

    Signature Algorithm: sha256WithRSAEncryption
         58:36:83:9f:4a:92:26:e6:c6:07:a4:65:7e:8e:b8:b0:4e:92:
         9c:68:95:87:f3:63:ee:13:f8:8e:a8:63:0f:ff:73:fc:e1:24:
         e7:06:42:71:87:98:6f:55:55:59:3b:9e:2a:bb:82:b0:f3:fd:
         51:78:af:37:22:bc:ad:93:7b:e1:42:8f:20:7b:fa:34:07:82:
         c8:d4:59:36:a4:9e:f1:6e:d0:53:82:8c:e3:70:f3:ad:51:61:
         d0:8b:3b:9d:b7:fd:15:96:1c:fd:e5:f3:6a:a6:31:86:6c:2f:
         c3:79:35:14:09:b7:f9:cb:ac:b1:92:47:18:57:f7:2e:63:82:
         79:11:70:91:67:8d:1a:92:32:83:33:4b:66:9d:41:bd:35:27:
         f1:24:ce:81:d2:d9:54:56:8b:72:7b:ed:29:50:f3:2a:7c:f5:
         9f:02:48:58:97:44:b4:17:20:64:38:f2:a0:dc:fa:8b:c4:cf:
         bb:5c:92:5f:76:69:57:d2:8a:59:f9:e5:47:9d:4d:3a:4f:fd:
         56:20:65:7a:49:32:4a:65:8f:7a:dd:0f:fe:78:a8:76:47:4d:
         28:53:67:1e:e9:59:f9:e6:e9:68:d2:12:4a:d6:4a:51:31:0e:
         b5:5c:43:7f:55:92:1b:95:17:25:eb:28:7d:3d:25:fe:2a:3c:
         31:fa:c1:21
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUextg/2dR9U6CY9AkKs2EqNGVBfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA0MzAxMTU1MDZaFw0yNzA0MjkxMjAwMDZaMDMxMTAvBgNV
BAMTKDQ0OTFGNjFBMzM5MkY1OERDRjVCMzM0MTFBRDBFQzQzMjlDOEFGQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1g6Rn/l11vQbNOMdH8/PK988U
hL5YmgJpBO0zNk50WyyQupA9ECiAO1oYhr3m7ac94M3LSxlqU5HN4Rska0wbBL0p
u3BjhiRBg4qJNhxfHmuh+ezV2wbTUcelJJqVaCmGRI7wevbxTz/USoJE/7aEBwAx
y8DSkOJ5mWe1sCj9AbKInNZHuSxYqCTjC7Emil0ubNSUaw9J1ce3ewzjt9V5ht02
moJUTI+BEMcE5Vs+IO8nO0sqIdvF1HTBtEf0pd+tutdyIemvOAjcf84jZFRX+iL/
tWJTqxXnyeD9uO5UfpLYNZd7trSHltTYur4eaqORptRKwvKRYikrWp/cgMKfAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREkfYaM5L1jc9b
M0Ea0OxDKcivtzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRk5D
d3FZUEhjQVVFUGVhbW9TN205WEMzVUppOUxrdHU1djlReXdYRnRIQXMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZO
Q3dxWVBIY0FVRVBlYW1vUzdtOVhDM1VKaTlMa3R1NXY5UXl3WEZ0SEFzLzAvNDQ5
MUY2MUEzMzkyRjU4RENGNUIzMzQxMUFEMEVDNDMyOUM4QUZCNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCiv+8MA0EAgACMAcDBQAoBCjwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQHNDANBgkqhkiG9w0BAQsFAAOCAQEAWDaDn0qSJubGB6Rl
fo64sE6SnGiVh/Nj7hP4jqhjD/9z/OEk5wZCcYeYb1VVWTueKruCsPP9UXivNyK8
rZN74UKPIHv6NAeCyNRZNqSe8W7QU4KM43DzrVFh0Is7nbf9FZYc/eXzaqYxhmwv
w3k1FAm3+cussZJHGFf3LmOCeRFwkWeNGpIygzNLZp1BvTUn8STOgdLZVFaLcnvt
KVDzKnz1nwJIWJdEtBcgZDjyoNz6i8TPu1ySX3ZpV9KKWfnlR51NOk/9ViBlekky
SmWPet0P/niodkdNKFNnHulZ+ebpaNISStZKUTEOtVxDf1WSG5UXJesofT0l/io8
MfrBIQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:03:13 2026 by rpki-client