Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer
File:                     617ABB72EF15B21D2E59DAB9087F83A02F381271.cer (raw, json)
Hash identifier:          Vd+9Ng1mT5uqsG9uUmvuUUmFuShgFGchUVPZ68dGyEg=
Subject key identifier:   61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6F1EE9BDBBDCA7A2C25C08D046FC530ED443366C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Apr 2026 22:29:25 +0000
Certificate not after:    Tue 27 Apr 2027 22:34:25 +0000
Subordinate resources:    AS: 22381
                          AS: 28329
                          AS: 262589
                          AS: 268852
                          IP: 45.174.132.0/22
                          IP: 131.108.184.0/22
                          IP: 170.78.232.0/22
                          IP: 170.81.128.0/22
                          IP: 177.84.160.0/21
                          IP: 177.107.32.0/19
                          IP: 177.126.0.0/24
                          IP: 177.126.2.0 -- 177.126.5.255
                          IP: 177.126.7.0/24
                          IP: 177.126.9.0/24
                          IP: 177.126.12.0/24
                          IP: 177.126.14.0/24
                          IP: 177.130.112.0/20
                          IP: 177.136.80.0/22
                          IP: 179.96.0.0/17
                          IP: 186.219.0.0 -- 186.219.47.255
                          IP: 186.226.64.0/19
                          IP: 186.237.128.0/20
                          IP: 187.108.128.0/18
                          IP: 187.120.0.0 -- 187.120.11.255
                          IP: 187.120.13.0 -- 187.120.15.255
                          IP: 189.36.160.0/19
                          IP: 189.39.208.0/21
                          IP: 189.39.220.0/22
                          IP: 189.50.112.0 -- 189.50.143.255
                          IP: 189.51.224.0/19
                          IP: 189.91.96.0/19
                          IP: 189.127.64.0/18
                          IP: 200.150.160.0/22
                          IP: 200.150.166.0/24
                          IP: 200.150.168.0/24
                          IP: 200.150.171.0/24
                          IP: 200.150.173.0/24
                          IP: 200.220.192.0/19
                          IP: 201.23.192.0/19
                          IP: 201.33.176.0/20
                          IP: 201.87.129.0 -- 201.87.130.255
                          IP: 201.87.132.0/24
                          IP: 201.87.138.0/24
                          IP: 201.87.143.0/24
                          IP: 201.87.145.0/24
                          IP: 201.87.151.0/24
                          IP: 201.87.154.0 -- 201.87.156.255
                          IP: 201.87.158.0/23
                          IP: 201.87.208.0/20
                          IP: 2804:e0::/32
                          IP: 2804:368::/32
                          IP: 2804:39c::/32
                          IP: 2804:3f8::/32
                          IP: 2804:680::/32
                          IP: 2804:cc4::/32
                          IP: 2804:5b84::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1e:e9:bd:bb:dc:a7:a2:c2:5c:08:d0:46:fc:53:0e:d4:43:36:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 28 22:29:25 2026 GMT
            Not After : Apr 27 22:34:25 2027 GMT
        Subject: CN=617ABB72EF15B21D2E59DAB9087F83A02F381271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:60:ff:ca:c1:c2:70:86:d2:4f:0f:03:a0:
                    29:19:51:27:4f:dd:71:6c:1e:fa:09:61:3f:50:a7:
                    dc:70:e7:b3:a0:94:c3:16:c4:db:bc:bc:70:94:c1:
                    e8:1c:7c:a9:ad:2d:1c:1b:3f:81:95:a4:36:4e:bd:
                    ee:4d:51:17:0f:47:56:8e:0c:0e:d0:7b:8a:93:2b:
                    49:52:a9:5c:ac:25:f5:52:0e:4a:76:bc:d3:e7:6e:
                    72:54:55:72:f0:07:bc:53:94:72:df:eb:41:e7:16:
                    0d:c4:c9:ee:24:6d:9b:d8:da:ff:9a:27:8f:8b:3c:
                    f3:80:fc:22:67:db:d0:7c:26:62:8b:c6:77:06:d2:
                    74:cb:9a:b6:67:b8:92:ca:5d:bc:65:93:ca:73:51:
                    2d:35:f4:d4:ef:2f:a9:3f:06:36:bd:98:79:fa:35:
                    37:2c:bc:90:c6:60:1e:b9:b4:03:3b:2f:45:68:80:
                    37:c4:eb:36:97:66:16:20:c9:c6:91:f4:90:8c:28:
                    30:86:4e:58:45:7f:ca:45:c6:d6:27:0d:4b:05:40:
                    57:88:ce:04:b5:fe:e5:2b:6a:66:dc:4d:7e:f2:8f:
                    86:98:df:1f:76:d2:98:60:71:ae:16:46:21:af:e7:
                    c5:c1:91:39:5d:bb:2d:d6:87:fd:75:c1:02:61:ba:
                    0c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.132.0/22
                  131.108.184.0/22
                  170.78.232.0/22
                  170.81.128.0/22
                  177.84.160.0/21
                  177.107.32.0/19
                  177.126.0.0/24
                  177.126.2.0-177.126.5.255
                  177.126.7.0/24
                  177.126.9.0/24
                  177.126.12.0/24
                  177.126.14.0/24
                  177.130.112.0/20
                  177.136.80.0/22
                  179.96.0.0/17
                  186.219.0.0-186.219.47.255
                  186.226.64.0/19
                  186.237.128.0/20
                  187.108.128.0/18
                  187.120.0.0-187.120.11.255
                  187.120.13.0-187.120.15.255
                  189.36.160.0/19
                  189.39.208.0/21
                  189.39.220.0/22
                  189.50.112.0-189.50.143.255
                  189.51.224.0/19
                  189.91.96.0/19
                  189.127.64.0/18
                  200.150.160.0/22
                  200.150.166.0/24
                  200.150.168.0/24
                  200.150.171.0/24
                  200.150.173.0/24
                  200.220.192.0/19
                  201.23.192.0/19
                  201.33.176.0/20
                  201.87.129.0-201.87.130.255
                  201.87.132.0/24
                  201.87.138.0/24
                  201.87.143.0/24
                  201.87.145.0/24
                  201.87.151.0/24
                  201.87.154.0-201.87.156.255
                  201.87.158.0/23
                  201.87.208.0/20
                IPv6:
                  2804:e0::/32
                  2804:368::/32
                  2804:39c::/32
                  2804:3f8::/32
                  2804:680::/32
                  2804:cc4::/32
                  2804:5b84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22381
                  28329
                  262589
                  268852

    Signature Algorithm: sha256WithRSAEncryption
         56:2a:29:0e:c4:2e:5a:ce:e2:0c:d5:ef:66:12:e5:a2:f9:ee:
         a3:42:df:e7:61:fc:53:db:6e:56:a8:c3:c8:83:2b:a6:c0:57:
         15:82:06:ec:90:82:bc:48:ef:5c:52:9a:48:bf:61:13:b0:7c:
         2e:bd:12:95:72:34:43:af:b9:8b:8f:16:0b:a3:cc:45:25:72:
         79:ac:b4:91:e8:1c:04:f7:76:01:b1:e3:fd:b2:81:ab:bc:8d:
         a0:9e:f8:8c:ff:75:bf:c3:bf:6f:71:59:b6:1a:4e:69:b6:54:
         5c:42:1f:58:23:ad:1c:53:b6:a6:0c:fb:ba:78:f4:a7:ac:c4:
         83:ed:9e:ae:ba:7a:e7:71:2a:ee:81:c0:2a:92:b2:0e:04:25:
         09:1c:e4:0f:3a:34:e1:98:66:5c:6a:51:57:7a:5a:c3:06:6f:
         c7:2e:db:ce:2a:78:94:98:63:06:57:0c:83:78:78:09:3c:11:
         05:ea:81:a6:61:c4:66:fd:7c:49:45:e4:ac:4f:95:e5:95:7a:
         3e:91:c6:90:77:83:c7:a1:0f:37:34:72:93:bb:a8:c7:61:e9:
         87:fb:6d:fc:30:d3:29:05:09:02:88:c9:10:2a:d5:93:31:79:
         02:a9:34:c6:51:d4:a0:04:a3:4d:ec:a2:e1:bd:86:5f:26:3a:
         b4:69:fb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:16:45 2026 by rpki-client