Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/70620B1C61C863D5C9CBBD460F66E1351DF8915F.cer
File:                     70620B1C61C863D5C9CBBD460F66E1351DF8915F.cer (raw, json)
Hash identifier:          FGseSUNkGUn3SRBrjHfWJ+43I+AMlldxQK1s2wMme2M=
Subject key identifier:   70:62:0B:1C:61:C8:63:D5:C9:CB:BD:46:0F:66:E1:35:1D:F8:91:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FD82049703C05EEFF1DFBE7195198F37F7BA3F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/70620B1C61C863D5C9CBBD460F66E1351DF8915F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Mar 2026 13:33:49 +0000
Certificate not after:    Fri 19 Mar 2027 13:38:49 +0000
Subordinate resources:    AS: 266143
                          IP: 160.20.20.0/22
                          IP: 186.251.206.0/23
                          IP: 2804:3b58::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d8:20:49:70:3c:05:ee:ff:1d:fb:e7:19:51:98:f3:7f:7b:a3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 20 13:33:49 2026 GMT
            Not After : Mar 19 13:38:49 2027 GMT
        Subject: CN=70620B1C61C863D5C9CBBD460F66E1351DF8915F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:d6:27:90:71:c3:e7:36:59:1b:f0:26:be:
                    b5:52:28:a6:ee:38:8b:8c:8e:cf:93:12:f0:2b:6b:
                    10:f1:f3:82:04:7d:49:25:b8:b4:a1:95:fe:a4:41:
                    8a:0a:3c:ae:fb:83:bb:ff:a4:83:c7:b0:dd:92:bd:
                    f6:5e:56:14:10:dd:9c:91:2c:4e:43:47:6b:80:19:
                    1d:be:e9:22:c4:76:69:f3:30:ec:95:44:54:4c:bc:
                    e2:b4:bf:2e:5b:6a:72:a5:ab:b8:26:df:16:16:a9:
                    55:41:02:5d:1c:33:61:2b:3c:63:ea:5f:f1:23:31:
                    73:3d:d1:47:23:e3:86:5f:06:10:30:2a:87:2b:08:
                    76:50:19:b7:5f:b5:ae:d2:e4:63:65:80:c9:fe:a8:
                    92:a8:d3:f2:0d:b4:45:11:35:51:0b:95:cb:0b:a1:
                    06:6b:8b:e7:79:5a:ac:bc:ca:2f:61:35:98:59:e2:
                    53:3f:86:6d:2f:c6:85:ad:3b:de:f4:ca:a4:3b:45:
                    c3:ee:77:d1:16:ac:ce:9a:9f:b1:0e:6f:35:76:f1:
                    5f:5c:6e:8d:c2:e6:4e:c7:e4:ae:02:38:b0:4b:52:
                    e7:87:54:17:b5:20:db:d5:06:7c:59:2c:c0:f0:59:
                    fe:2e:7e:0a:04:ad:45:a5:20:11:56:b0:77:e5:d2:
                    c4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:62:0B:1C:61:C8:63:D5:C9:CB:BD:46:0F:66:E1:35:1D:F8:91:5F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/70620B1C61C863D5C9CBBD460F66E1351DF8915F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.20.0/22
                  186.251.206.0/23
                IPv6:
                  2804:3b58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266143

    Signature Algorithm: sha256WithRSAEncryption
         c8:7d:66:8f:f3:19:c1:09:2d:71:27:e3:20:1d:b1:8a:05:b2:
         7e:b9:19:05:6a:cb:45:74:97:43:e2:6b:ed:98:ce:ed:88:97:
         e4:09:d5:d1:19:5a:11:5c:97:3f:a8:31:15:2f:60:dc:ca:03:
         59:6a:6f:e6:ba:f7:b0:4d:b9:5b:8d:ff:69:5b:cd:e2:18:a1:
         88:d9:fd:41:7c:3a:7b:0d:87:2e:07:7a:30:cf:42:2f:1b:40:
         c6:4c:c1:21:7e:f0:49:0a:69:3a:bd:0d:9a:67:40:dc:4b:fd:
         22:b7:32:c6:7d:99:9c:cf:36:72:19:a7:a3:cc:25:15:0c:b1:
         72:44:69:7d:dd:4a:e9:ec:47:3f:a8:4d:60:2c:56:46:47:ef:
         05:68:5a:2f:7e:a7:fc:0d:de:0e:ca:07:74:6e:ad:06:77:0f:
         f6:18:e5:e2:f6:7c:f1:e6:29:ed:fc:48:b0:d1:21:87:f7:5c:
         a2:17:b0:0f:c9:9e:88:25:a0:b9:7c:2e:e0:bb:a6:e0:13:4c:
         25:f6:11:3b:ec:47:cc:d6:e5:8d:51:e1:e5:fc:6c:04:8b:50:
         31:f1:37:14:c5:c2:66:0c:31:29:20:1e:3a:5e:95:02:8a:67:
         a4:24:e6:31:b6:18:d6:84:ca:c5:af:67:e4:2a:db:85:15:7a:
         3a:7c:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:30:03 2026 by rpki-client