Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
File:                     624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer (raw, json)
Hash identifier:          FzJQU/bHS6WrJj1HCz2P+xwAlq/hKu95rXM5UOfZGv8=
Subject key identifier:   62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3BEC058A90BA975C83018700BDC975BAAEF8AEAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Oct 2026 11:15:29 +0000
Certificate not after:    Sat 23 Oct 2027 11:20:29 +0000
Subordinate resources:    AS: 52923
                          IP: 177.184.176.0/20
                          IP: 2804:acc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Oct 2026 19:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ec:05:8a:90:ba:97:5c:83:01:87:00:bd:c9:75:ba:ae:f8:ae:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 24 11:15:29 2026 GMT
            Not After : Oct 23 11:20:29 2027 GMT
        Subject: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:30:e4:2e:8b:dc:f2:8a:b0:16:9d:e5:49:
                    98:c5:1e:6f:4c:b1:08:a9:a0:60:c3:1e:81:b9:af:
                    2e:fa:b7:ad:f1:6c:37:a2:3a:ae:c2:82:60:34:6f:
                    d6:2c:f2:b4:bb:76:17:0a:50:cf:f6:93:56:2a:9c:
                    55:75:83:da:51:58:f1:1d:67:58:b4:37:b3:85:75:
                    64:f3:35:27:1e:1a:6e:69:aa:c6:22:d6:73:20:cd:
                    e7:32:da:37:dc:d4:95:e8:e2:78:86:db:75:5d:28:
                    c8:3c:da:19:67:fc:f6:e0:f7:04:22:1b:30:7f:74:
                    70:f2:72:a3:f6:a3:49:35:35:57:8b:82:f3:39:55:
                    14:86:b2:1a:e1:e2:de:e9:ba:1c:0c:10:07:d4:c3:
                    9b:01:f7:d3:6d:f6:8a:bd:8f:1c:6b:2d:60:80:08:
                    49:11:89:28:c9:a9:de:18:77:41:a2:da:2f:71:12:
                    02:b9:f1:22:51:bd:c1:3c:01:71:82:6c:8f:c6:4b:
                    c8:88:c2:cf:0e:0c:75:a6:fd:98:62:6b:fd:f9:64:
                    b1:4f:75:c7:6b:b9:2b:22:fb:27:da:f7:c3:6f:a6:
                    55:76:53:71:fe:3f:58:11:1d:61:97:ef:f4:34:88:
                    ca:56:20:79:5b:5e:06:70:fc:0c:6b:b3:cd:3c:6d:
                    4a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.176.0/20
                IPv6:
                  2804:acc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52923

    Signature Algorithm: sha256WithRSAEncryption
         44:67:05:f8:c3:35:ac:13:16:8d:a8:3b:0c:46:cb:33:a9:da:
         04:f3:b6:f7:ae:26:67:f3:56:75:ce:53:6d:c1:b7:34:16:88:
         a1:57:1e:d9:63:84:25:81:1e:fa:86:09:65:ab:0b:00:8c:4e:
         d7:3d:85:dd:dd:bb:84:a7:be:73:9f:b5:b3:96:a0:4a:a1:6a:
         79:46:ca:6b:b0:29:a3:27:d7:66:81:75:1e:0a:7d:64:9b:de:
         16:fa:eb:45:e4:b9:cb:8a:88:2b:16:5e:b2:05:da:6e:be:fe:
         2f:e7:b6:47:22:bf:23:43:8a:ad:39:02:42:8b:ed:24:66:b4:
         24:42:a5:e6:c7:67:f1:5a:7d:05:e3:84:ef:99:0a:83:4c:a1:
         1b:a2:22:c1:56:98:73:65:c9:39:a6:d2:97:5f:fa:61:49:f7:
         be:bf:5d:0d:02:1c:d6:f1:90:b5:07:5d:80:e7:af:96:9b:75:
         ab:3c:47:3a:e3:0e:6c:56:35:57:70:06:4d:43:b3:be:96:76:
         49:bc:98:aa:aa:2f:53:46:4d:78:46:dd:d8:89:02:46:a6:e3:
         bb:9b:5c:35:12:7b:95:cc:cf:be:b2:6b:54:3d:87:de:c8:47:
         88:2a:8f:cd:22:ef:30:f4:66:24:82:35:4e:d2:ef:a4:b7:9c:
         af:de:19:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:39:38 2026 by rpki-client