Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.cer
File:                     56270EA333BF00580A15474FAE7DE9C32E6CF849.cer (raw, json)
Hash identifier:          T5V9S8MGG3Mqvjb927wydk0oqsMIDcf+qDFUyS62DQs=
Subject key identifier:   56:27:0E:A3:33:BF:00:58:0A:15:47:4F:AE:7D:E9:C3:2E:6C:F8:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       649CD166F8DC2B6A2ADC2561AF6CFDC91C23B024
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Mar 2026 18:39:00 +0000
Certificate not after:    Tue 23 Mar 2027 18:44:00 +0000
Subordinate resources:    AS: 271220
                          IP: 179.49.244.0/22
                          IP: 2804:7818::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9c:d1:66:f8:dc:2b:6a:2a:dc:25:61:af:6c:fd:c9:1c:23:b0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 24 18:39:00 2026 GMT
            Not After : Mar 23 18:44:00 2027 GMT
        Subject: CN=56270EA333BF00580A15474FAE7DE9C32E6CF849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:40:a2:07:1e:68:f6:ea:29:d4:60:11:36:
                    b9:c6:0d:67:4a:96:ea:43:bf:58:74:d3:70:e6:7b:
                    15:7b:6a:ef:70:e8:5c:a2:89:bc:60:e7:72:be:c5:
                    7d:60:46:a9:d0:df:83:9f:79:2e:0a:c4:66:cd:d2:
                    e5:46:07:9d:e2:47:99:6b:df:11:e0:a1:7f:c3:d3:
                    aa:6a:13:5f:22:40:1d:0f:e3:81:28:78:42:07:9f:
                    6f:72:11:05:99:24:34:e1:8f:bb:1f:f8:bb:de:18:
                    20:f1:92:b1:ca:3f:c7:fe:df:6e:84:12:5e:67:3a:
                    1e:9b:3b:62:54:95:f9:61:8f:7c:1e:5e:fd:9c:4e:
                    85:8d:7b:65:6e:f8:f1:ce:c2:4a:62:9e:ad:70:ae:
                    d9:44:de:16:9f:f0:cc:5f:7c:89:02:ef:e0:b0:e5:
                    03:46:b3:17:5f:6a:5f:29:31:a8:d6:3d:c1:68:1f:
                    61:76:45:28:c6:f0:2a:6d:a6:7d:60:28:83:35:d9:
                    33:b4:3a:9a:bc:c8:fc:b9:e2:51:f4:66:55:f3:4f:
                    64:5d:ed:15:0e:c2:59:01:c7:db:48:cd:94:7f:9f:
                    e9:e6:b1:cb:80:01:86:61:bc:8c:18:dc:3c:08:c4:
                    b5:d8:2f:f4:09:f3:07:fd:1e:88:12:2a:16:ad:df:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:27:0E:A3:33:BF:00:58:0A:15:47:4F:AE:7D:E9:C3:2E:6C:F8:49
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.244.0/22
                IPv6:
                  2804:7818::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271220

    Signature Algorithm: sha256WithRSAEncryption
         87:30:b8:f0:a6:98:31:cd:18:ed:2b:07:ab:a3:6b:2a:83:df:
         09:e5:94:db:12:40:99:ac:79:8f:14:5a:98:22:87:22:84:3e:
         9b:cb:6c:b8:9f:98:52:00:79:ab:64:77:6c:d8:89:5a:0d:17:
         e0:e5:77:32:2c:72:62:8a:b9:93:65:b9:c0:00:e8:cf:c5:7e:
         73:10:35:0d:4d:c7:1a:ca:ef:0d:c1:5c:c6:a6:62:da:a1:87:
         88:17:8d:1c:05:b6:08:c5:7f:92:b7:6f:6d:fe:12:83:34:7c:
         ea:58:a1:77:bf:cc:5b:b4:1d:33:f2:23:ce:d0:69:90:3b:5c:
         a8:ac:d6:70:18:ad:e3:53:bd:25:cf:48:db:65:af:68:68:3a:
         02:1d:73:ba:8d:8f:64:64:60:10:83:de:61:0c:11:b8:72:76:
         b6:c0:be:ea:ed:1e:71:89:24:cc:b0:18:55:41:b9:89:01:6d:
         8b:21:33:51:1b:a7:37:29:44:39:28:85:66:d4:b6:4b:8b:46:
         da:a9:48:db:8b:71:6c:64:11:d5:c8:65:ad:5f:3e:81:52:16:
         ab:32:94:c9:1f:15:be:17:1d:9b:24:a9:03:80:bb:9c:78:85:
         0d:56:18:39:67:66:64:5e:13:fc:1c:75:39:ab:5d:9c:57:e6:
         0a:b9:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:33:41 2026 by rpki-client