Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.cer
File:                     75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.cer (raw, json)
Hash identifier:          iT1DqyUq5OGtB+1roMuEl0a8tqslN6ZaQEKC/b+r0Hk=
Subject key identifier:   75:B7:A7:3D:35:27:0C:2B:DB:E7:ED:7C:4C:46:D5:96:FC:4C:37:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37000587A5657C19B798CB5A7F74ABF1AFEE9B4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Mar 2026 12:40:00 +0000
Certificate not after:    Mon 22 Mar 2027 12:45:00 +0000
Subordinate resources:    AS: 270794
                          IP: 189.51.164.0/22
                          IP: 2804:7184::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:00:05:87:a5:65:7c:19:b7:98:cb:5a:7f:74:ab:f1:af:ee:9b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 23 12:40:00 2026 GMT
            Not After : Mar 22 12:45:00 2027 GMT
        Subject: CN=75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:e6:f9:43:29:2f:7e:7d:10:e9:f8:64:e5:
                    e4:cb:6b:4a:15:8e:d4:d8:8c:7f:d2:93:36:11:e6:
                    0a:dd:db:f1:5b:ab:e5:5c:bd:6d:d7:17:5d:c6:73:
                    02:ba:56:22:bc:dd:02:23:51:93:f9:8a:8e:47:7d:
                    30:dc:16:a8:62:f1:c5:38:e4:33:30:79:6b:07:23:
                    5d:df:80:6b:5b:61:87:80:14:84:99:99:15:12:1f:
                    ea:f9:56:b1:03:95:eb:37:e9:4d:e2:07:4b:2c:5f:
                    e8:03:80:2a:c6:97:f6:b2:44:72:20:68:3b:41:f1:
                    99:4a:1e:9d:99:e7:f7:50:9a:fa:b3:40:85:e7:02:
                    f9:62:35:93:b4:2e:97:da:98:76:1a:28:84:54:ee:
                    21:0a:33:7c:eb:55:0c:ea:10:8b:4a:2f:d9:e0:be:
                    ce:4b:a8:0c:2b:e5:31:c1:b2:36:4a:2d:72:7c:86:
                    de:db:6a:b3:b0:4e:c3:1f:be:95:23:91:57:ec:bc:
                    92:9b:6e:a1:4d:ed:b3:2d:6a:04:54:ae:70:6d:2a:
                    22:77:e0:5e:f9:b9:19:8d:c9:06:63:ac:c2:93:09:
                    81:34:f4:c5:b7:f3:ff:5b:64:b8:fe:ba:e0:30:e6:
                    a8:c8:9f:39:d0:44:49:4d:1f:64:67:42:55:00:ef:
                    88:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:B7:A7:3D:35:27:0C:2B:DB:E7:ED:7C:4C:46:D5:96:FC:4C:37:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.164.0/22
                IPv6:
                  2804:7184::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270794

    Signature Algorithm: sha256WithRSAEncryption
         71:e6:54:16:6f:eb:5b:7c:99:d1:b8:c2:d3:2f:74:6f:b3:75:
         ec:5a:9b:5a:07:e3:0d:ee:1c:2e:0b:c4:29:f5:52:79:8d:eb:
         38:4c:c7:bf:0e:4f:1d:72:f8:82:57:1e:1d:62:6f:07:50:9c:
         1e:7f:8a:c6:99:5f:8b:21:27:2b:1b:7a:77:b0:9e:54:85:71:
         17:92:32:f2:3c:47:b7:aa:36:23:51:0e:e8:2b:05:6f:b9:0c:
         20:90:77:6c:57:e8:bb:15:7e:00:24:5f:f3:78:85:e4:7c:b4:
         4a:ee:3f:5f:4d:a4:8e:8b:84:8a:f7:86:73:30:1b:ae:33:42:
         fd:2d:10:d5:72:64:95:92:71:a8:97:d4:fe:c4:52:22:b9:77:
         79:fa:56:26:3f:86:d1:55:d7:20:9f:43:1c:b5:85:41:55:16:
         61:f1:fb:3c:50:19:88:14:4f:a1:f9:5a:a3:7d:90:b7:73:3a:
         4c:f5:bb:e5:ad:d2:44:7f:a6:fd:92:b7:45:61:56:67:7a:ad:
         27:ab:2b:f1:6b:02:86:a7:9f:ec:6e:c4:0c:ca:8e:a7:f7:ae:
         cd:7f:b1:c2:d8:6f:28:29:7d:6f:33:c0:c2:00:60:46:b1:d8:
         77:eb:ef:19:9d:1b:3e:b4:60:94:1b:40:1c:05:ce:cd:fa:a4:
         7f:46:99:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:57:53 2026 by rpki-client