Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.cer
File:                     65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.cer (raw, json)
Hash identifier:          XRDB2z/Cd0DFutxX90+lmk0Xp62Sz4BSDpoep8olrBk=
Subject key identifier:   65:B1:F9:97:3A:FB:6E:FF:A9:03:19:19:C1:DD:54:07:9A:AB:8F:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C68365E9A7BFC64C05A987347C545ACC3C8B96D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Mar 2026 17:46:23 +0000
Certificate not after:    Tue 23 Mar 2027 17:51:23 +0000
Subordinate resources:    AS: 266268
                          IP: 45.65.208.0/22
                          IP: 2804:3d54::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:68:36:5e:9a:7b:fc:64:c0:5a:98:73:47:c5:45:ac:c3:c8:b9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 24 17:46:23 2026 GMT
            Not After : Mar 23 17:51:23 2027 GMT
        Subject: CN=65B1F9973AFB6EFFA9031919C1DD54079AAB8F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:b4:0a:02:50:64:3e:74:d8:3e:ec:61:eb:
                    1f:06:47:7e:40:21:fd:91:a7:0a:f3:ca:cb:9f:ae:
                    b0:09:c8:5e:8e:56:55:0e:58:99:47:4d:aa:5b:89:
                    68:95:66:0d:f6:d5:a8:ec:61:88:2b:4c:b2:04:5e:
                    d4:fe:36:04:f4:fd:0f:54:97:72:76:1c:94:7b:c0:
                    67:e8:e7:ca:54:00:9e:2e:3b:e4:85:7b:0f:a3:b5:
                    bf:9e:df:8d:6d:33:56:db:67:92:f4:ed:b2:da:18:
                    71:bf:08:bc:c7:3d:be:6f:9e:cd:2e:14:be:2b:a9:
                    d3:c2:8b:60:9b:b1:96:41:f7:9d:a3:35:1f:46:ce:
                    fa:66:8c:bb:bd:39:f9:e2:7f:b0:11:6e:95:ab:66:
                    2e:bf:99:0c:17:ae:9a:bf:6b:3b:10:fe:5f:35:12:
                    51:f5:03:f7:71:a1:b8:d5:98:df:09:25:9d:d3:24:
                    48:af:c6:e8:ae:c0:6a:f0:55:ad:57:73:86:04:64:
                    97:bd:5d:90:05:29:f3:29:ea:f2:cc:13:e2:1e:dc:
                    81:8c:e4:5f:cf:40:78:b5:d2:b6:49:0a:1a:d4:b6:
                    d8:42:d0:65:a5:1d:75:b0:3c:e6:00:0a:73:41:3d:
                    28:ef:b2:0e:1e:3a:45:99:a0:be:56:aa:33:85:5e:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:B1:F9:97:3A:FB:6E:FF:A9:03:19:19:C1:DD:54:07:9A:AB:8F:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.208.0/22
                IPv6:
                  2804:3d54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266268

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:c5:bf:0d:6d:ec:3d:57:a1:32:c7:8e:7c:d1:78:37:88:
         99:78:5e:c0:ef:fe:ed:86:53:a7:33:f5:c4:10:f6:11:51:b1:
         ee:d6:6a:b6:5b:85:7d:0c:3d:cb:5e:d2:6a:73:b0:f6:e5:ac:
         cf:21:66:90:33:86:be:01:d8:fa:3d:95:84:07:2f:ea:15:ef:
         d3:77:b4:e5:87:30:23:71:e0:c6:eb:22:cf:56:13:6e:78:d4:
         95:f6:24:d8:5c:ae:ed:42:81:44:b7:75:3a:3e:8f:6b:89:b2:
         25:c0:8f:4b:80:03:67:9b:b2:3d:3e:74:26:cc:3a:da:91:ad:
         91:b1:cb:c6:71:dd:38:10:3e:8d:64:93:2f:8b:aa:3b:26:22:
         57:40:5e:30:03:97:05:6a:e3:f0:72:1a:7a:ed:03:ed:ff:4b:
         e3:fc:06:4b:f8:40:2d:72:06:b3:cb:79:0f:37:1a:87:a2:d3:
         05:b5:f4:3d:25:4c:17:e8:40:46:76:2e:dd:56:89:ec:0d:48:
         9f:a5:58:fa:29:3e:99:00:83:38:a0:04:cc:68:2e:ae:d6:25:
         a0:35:06:67:1e:78:a2:c2:42:0b:70:e4:19:ec:83:69:a4:5e:
         46:78:0d:24:18:38:b0:ce:d6:02:6b:72:e5:bd:bb:c1:fc:bb:
         55:e2:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:28:40 2026 by rpki-client