Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
File:                     501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer (raw, json)
Hash identifier:          LpJrDph2DjCPk4uuWVhau31q0EPumO3nKDLBlyzA3Ns=
Subject key identifier:   50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       385D7AF3E4AD904925A22A769549875ABFD2F4D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Jul 2026 09:02:30 +0000
Certificate not after:    Thu 22 Jul 2027 09:07:30 +0000
Subordinate resources:    AS: 28299
                          IP: 177.12.160.0/20
                          IP: 177.185.192.0/20
                          IP: 187.1.128.0/20
                          IP: 189.38.80.0/20
                          IP: 191.6.192.0/19
                          IP: 2804:10::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 19:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5d:7a:f3:e4:ad:90:49:25:a2:2a:76:95:49:87:5a:bf:d2:f4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 09:02:30 2026 GMT
            Not After : Jul 22 09:07:30 2027 GMT
        Subject: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:a5:88:f9:8b:5d:3e:c1:11:61:6b:ce:29:
                    67:1f:b4:bf:83:76:d5:ad:e7:62:20:33:58:fa:25:
                    21:d1:1e:6e:77:ca:93:72:4d:e6:23:eb:ad:db:a2:
                    b3:c3:10:f3:be:fe:86:5d:bb:a8:ec:9e:03:86:ad:
                    5c:66:35:f9:ea:89:0a:9d:e8:93:75:1a:49:8a:dc:
                    ce:e6:47:3f:71:8d:b4:a0:1c:9b:8e:9e:5d:3c:d8:
                    15:bd:4b:66:6b:85:04:12:bf:53:28:4d:45:da:73:
                    84:bc:4b:92:e5:fd:a2:fd:7c:b6:44:eb:92:ea:7e:
                    1d:c2:4d:52:9c:e2:5c:08:69:d1:de:00:3c:87:e8:
                    ce:b7:57:41:a2:e2:1d:a1:62:39:b1:8f:4f:0d:92:
                    df:1f:08:26:b3:ba:8b:7f:c7:56:01:4a:e8:74:b1:
                    5f:da:02:90:a5:e2:4f:12:ce:70:ad:91:c3:09:e8:
                    0a:ac:c6:4f:1f:b7:40:f0:b9:dc:c6:9c:ff:62:1f:
                    1a:6c:14:b8:56:d4:b8:0b:dd:29:f5:98:d5:08:fd:
                    c1:16:9c:e1:a3:e6:e8:1d:75:f8:ff:5c:b2:6a:91:
                    2c:a9:36:39:cf:77:79:f4:ac:77:64:1d:8b:bb:16:
                    14:28:ad:22:e9:47:0e:71:eb:95:90:98:af:96:bc:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.160.0/20
                  177.185.192.0/20
                  187.1.128.0/20
                  189.38.80.0/20
                  191.6.192.0/19
                IPv6:
                  2804:10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28299

    Signature Algorithm: sha256WithRSAEncryption
         99:95:09:ea:ad:1b:15:ba:29:12:91:8d:dc:10:17:88:3f:cc:
         b6:6a:fb:f7:12:1f:71:88:00:5f:2b:54:e0:08:3d:f0:0d:db:
         3e:13:98:34:6c:a5:5a:f0:3d:7e:d7:84:c1:d8:f4:1e:49:0e:
         49:ce:1c:9d:0c:0f:da:a6:c7:64:80:58:a3:8b:05:5a:b5:d1:
         2e:99:f6:96:9d:b3:b1:6e:92:46:f9:99:4f:db:3f:8e:a9:1f:
         c2:3b:2d:ba:46:fa:ae:68:c5:77:c7:aa:a6:9c:06:90:97:3e:
         1f:17:52:32:51:61:00:b5:44:ff:11:d7:66:a9:f5:39:ee:2f:
         9a:ae:ac:b0:39:42:d4:4f:09:bd:e7:57:41:96:55:95:a4:9f:
         fa:5b:bc:34:1b:bc:b5:0c:c2:2b:02:24:f0:aa:0e:38:17:91:
         53:1e:f5:1a:9d:47:72:2c:d6:53:a7:ce:1b:58:0a:ad:20:50:
         3d:74:f3:f4:19:42:3f:4d:3a:be:ce:ee:1e:59:e1:1b:a4:18:
         f3:95:13:9d:ff:f6:cd:30:ca:6a:4e:70:d0:de:e9:a4:8d:38:
         18:0f:bf:4b:16:a6:af:8c:a6:b9:51:a4:33:e3:30:a9:80:5d:
         71:2c:f8:7e:0c:5f:e0:97:56:bc:42:b9:6b:7c:bf:7f:0c:13:
         6e:03:84:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:30:26 2026 by rpki-client