Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.cer
File:                     5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.cer (raw, json)
Hash identifier:          vumh5WKVBlIiHFMYLW8+yzmqr7WoCBuZVDDlq4RxOfc=
Subject key identifier:   5D:DC:0A:B4:FF:84:A3:2E:5E:87:D9:7B:50:F8:4A:D1:94:61:2E:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0AF0D053A06637A69C69B1B0EE19E1974CA1E75B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 May 2026 10:37:02 +0000
Certificate not after:    Fri 07 May 2027 10:42:02 +0000
Subordinate resources:    AS: 270375
                          IP: 190.89.156.0/22
                          IP: 2804:6b10::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f0:d0:53:a0:66:37:a6:9c:69:b1:b0:ee:19:e1:97:4c:a1:e7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  8 10:37:02 2026 GMT
            Not After : May  7 10:42:02 2027 GMT
        Subject: CN=5DDC0AB4FF84A32E5E87D97B50F84AD194612E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:be:91:48:22:91:28:ce:1b:c5:02:14:36:
                    4f:b2:d4:dd:22:a5:e1:3b:c5:0e:27:61:c2:c4:8b:
                    b5:d2:69:fc:11:0d:e5:e3:99:f3:0c:f2:39:4c:46:
                    9d:e8:ef:27:cf:6b:e5:7e:79:c8:f3:3c:30:b5:6f:
                    e6:8b:0c:5a:5e:74:65:73:3f:12:8c:96:39:d1:00:
                    88:9c:47:31:03:ba:17:4a:48:56:1e:dc:72:74:69:
                    e3:86:b9:65:0c:dc:e3:0b:ae:9c:49:9f:8a:30:9a:
                    23:84:52:3f:97:f8:4a:4f:b1:2f:4b:97:85:29:87:
                    92:03:45:05:e9:09:fa:86:da:a8:a8:c7:97:e4:82:
                    c0:9b:3e:74:fb:b4:f7:70:c3:0a:44:e4:a6:4e:86:
                    01:05:f1:22:d5:6e:37:7e:8b:af:9e:11:2c:6e:8f:
                    29:0f:45:1e:a9:b5:4c:c2:df:df:17:f0:91:09:7c:
                    2f:0c:36:ec:01:f9:34:d5:23:90:87:eb:ce:06:8a:
                    37:88:0f:36:1b:a7:c2:56:fd:84:be:61:30:3b:dd:
                    98:a8:96:7c:d0:bd:6f:9f:86:d3:b3:58:5b:4a:4f:
                    4d:66:eb:81:3d:fb:16:58:a1:0d:32:65:5d:5f:04:
                    7c:f8:c4:94:21:4f:ad:50:f6:82:93:87:28:a6:46:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:DC:0A:B4:FF:84:A3:2E:5E:87:D9:7B:50:F8:4A:D1:94:61:2E:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/22
                IPv6:
                  2804:6b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270375

    Signature Algorithm: sha256WithRSAEncryption
         b6:4a:f8:91:b0:e5:c0:24:10:06:36:99:90:a9:0c:6f:e9:d3:
         c6:84:45:58:97:d1:5c:07:4f:90:f6:25:c6:09:e2:b1:85:9c:
         68:5f:bd:87:46:eb:26:71:27:f9:3d:a3:b1:52:b7:44:5c:e1:
         74:20:ec:25:46:b9:ec:be:72:51:f8:92:5e:37:c4:98:74:b5:
         35:7b:59:dd:1c:53:35:99:3d:c3:f9:9c:fa:ee:cb:ea:f0:3d:
         4d:83:4d:a8:1e:64:1f:2d:97:b6:5e:a3:64:71:90:07:e2:4e:
         f5:57:fa:cb:b6:06:4a:0f:08:3d:f4:28:a3:f1:28:41:67:93:
         11:4c:b9:ad:7f:49:68:8c:ff:f6:8b:b0:19:c8:72:29:03:b4:
         24:3e:e6:6a:1b:07:5c:4b:ab:2d:41:17:21:bb:e5:30:03:a8:
         01:0e:91:8c:96:3c:f0:4f:dc:43:14:52:58:11:e8:93:11:cd:
         e7:79:44:b0:ef:d8:3c:23:b6:d5:23:6e:92:49:5e:f4:a9:20:
         5b:c7:b1:e9:79:bd:2d:e3:94:e6:e3:bc:79:e8:33:65:5d:93:
         15:c8:f2:5f:70:4d:5b:ce:44:52:40:4d:29:42:b5:e3:b1:2d:
         af:0b:e3:18:db:2e:4c:7d:14:ce:1d:22:fe:61:18:84:21:f0:
         7a:de:b3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:36:55 2026 by rpki-client