Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/769F49CCADA497BE9A0817F0D0C4222A7AF004A1.cer
File:                     769F49CCADA497BE9A0817F0D0C4222A7AF004A1.cer (raw, json)
Hash identifier:          ic+xSGba/j5tLhgoUveDxSd5MvnqWcSaEsxfJ295unI=
Subject key identifier:   76:9F:49:CC:AD:A4:97:BE:9A:08:17:F0:D0:C4:22:2A:7A:F0:04:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       674032439C90790CB0349478DCC12564D927040A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CoDc9CSEoYvqhVBMcXgmanfuym337kM9ZH3AKeNR6rE9/0/769F49CCADA497BE9A0817F0D0C4222A7AF004A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CoDc9CSEoYvqhVBMcXgmanfuym337kM9ZH3AKeNR6rE9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Jul 2026 17:59:27 +0000
Certificate not after:    Wed 21 Jul 2027 18:04:27 +0000
Subordinate resources:    AS: 26615
                          IP: 152.233.128.0/17
                          IP: 177.30.0.0/15
                          IP: 177.48.0.0/14
                          IP: 177.108.0.0 -- 177.110.255.255
                          IP: 177.120.0.0/15
                          IP: 177.123.0.0/16
                          IP: 177.148.0.0/14
                          IP: 177.164.0.0/15
                          IP: 177.167.0.0/16
                          IP: 177.186.0.0/15
                          IP: 177.216.0.0/14
                          IP: 179.10.0.0/15
                          IP: 179.16.0.0/15
                          IP: 179.34.0.0/15
                          IP: 179.54.0.0/15
                          IP: 179.72.0.0/13
                          IP: 179.120.0.0/14
                          IP: 179.200.0.0/13
                          IP: 179.237.26.0 -- 179.237.63.255
                          IP: 179.248.0.0/14
                          IP: 181.76.0.0/15
                          IP: 186.196.15.0 -- 186.196.47.255
                          IP: 186.196.64.0 -- 186.199.255.255
                          IP: 186.228.0.0/14
                          IP: 186.252.0.0/14
                          IP: 187.46.0.0/15
                          IP: 187.80.0.0/14
                          IP: 187.96.0.0/14
                          IP: 189.40.0.0/16
                          IP: 189.64.0.0/14
                          IP: 189.116.0.0/14
                          IP: 191.41.0.0 -- 191.42.255.255
                          IP: 191.48.0.0/14
                          IP: 191.86.0.0/15
                          IP: 191.120.0.0/14
                          IP: 191.128.0.0 -- 191.128.23.255
                          IP: 191.128.25.0 -- 191.128.27.255
                          IP: 191.128.29.0 -- 191.128.79.255
                          IP: 191.128.88.0 -- 191.128.244.255
                          IP: 191.128.246.0/23
                          IP: 191.128.249.0 -- 191.143.255.255
                          IP: 191.160.0.0/20
                          IP: 191.160.20.0 -- 191.160.35.255
                          IP: 191.160.48.0 -- 191.165.255.255
                          IP: 191.167.0.0 -- 191.175.255.255
                          IP: 191.224.0.0 -- 191.227.127.255
                          IP: 191.227.129.0 -- 191.227.131.255
                          IP: 191.227.134.0/23
                          IP: 191.227.144.0 -- 191.231.255.255
                          IP: 2804:214::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:40:32:43:9c:90:79:0c:b0:34:94:78:dc:c1:25:64:d9:27:04:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 17:59:27 2026 GMT
            Not After : Jul 21 18:04:27 2027 GMT
        Subject: CN=769F49CCADA497BE9A0817F0D0C4222A7AF004A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:d8:0a:d2:70:7d:02:9f:5d:83:90:6f:f3:
                    a0:6f:59:00:80:f0:ff:5b:68:a9:f2:7b:33:96:76:
                    4e:a6:9c:0c:4b:28:b1:14:43:58:53:bf:ac:2f:98:
                    48:c0:75:19:04:aa:ab:86:21:ab:f9:a4:cd:05:15:
                    f9:30:3b:e5:f2:dc:22:11:c5:71:75:8a:a7:8a:be:
                    90:5e:ee:a4:ed:bc:5a:4f:80:15:c2:fd:5b:2c:65:
                    8f:fc:f2:f1:8b:a7:66:99:15:7c:00:de:58:af:d0:
                    dd:70:53:1a:27:60:95:98:c9:f3:77:0e:73:d6:df:
                    a7:a1:ad:2a:4b:30:51:ba:19:d1:8f:e2:9c:09:aa:
                    99:11:b4:2f:75:3d:82:30:14:c2:f9:79:24:cb:15:
                    98:c0:96:43:ba:61:ff:13:25:55:39:ac:ac:5a:3f:
                    41:8b:68:b2:b2:75:66:58:f2:b9:bd:33:3b:0b:03:
                    01:35:a8:f1:90:a7:e2:35:de:b3:7a:38:20:aa:00:
                    72:3f:46:50:ad:12:d1:2f:0a:30:8c:b8:18:e3:9d:
                    16:9c:ee:e5:4a:93:88:82:da:15:10:4a:46:2b:88:
                    6f:7a:91:79:7e:16:f0:99:fc:ae:a0:40:59:38:bc:
                    71:6b:06:ab:7b:b6:45:1c:2b:07:54:7b:9e:43:c9:
                    43:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:9F:49:CC:AD:A4:97:BE:9A:08:17:F0:D0:C4:22:2A:7A:F0:04:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CoDc9CSEoYvqhVBMcXgmanfuym337kM9ZH3AKeNR6rE9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CoDc9CSEoYvqhVBMcXgmanfuym337kM9ZH3AKeNR6rE9/0/769F49CCADA497BE9A0817F0D0C4222A7AF004A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.233.128.0/17
                  177.30.0.0/15
                  177.48.0.0/14
                  177.108.0.0-177.110.255.255
                  177.120.0.0/15
                  177.123.0.0/16
                  177.148.0.0/14
                  177.164.0.0/15
                  177.167.0.0/16
                  177.186.0.0/15
                  177.216.0.0/14
                  179.10.0.0/15
                  179.16.0.0/15
                  179.34.0.0/15
                  179.54.0.0/15
                  179.72.0.0/13
                  179.120.0.0/14
                  179.200.0.0/13
                  179.237.26.0-179.237.63.255
                  179.248.0.0/14
                  181.76.0.0/15
                  186.196.15.0-186.196.47.255
                  186.196.64.0-186.199.255.255
                  186.228.0.0/14
                  186.252.0.0/14
                  187.46.0.0/15
                  187.80.0.0/14
                  187.96.0.0/14
                  189.40.0.0/16
                  189.64.0.0/14
                  189.116.0.0/14
                  191.41.0.0-191.42.255.255
                  191.48.0.0/14
                  191.86.0.0/15
                  191.120.0.0/14
                  191.128.0.0-191.128.23.255
                  191.128.25.0-191.128.27.255
                  191.128.29.0-191.128.79.255
                  191.128.88.0-191.128.244.255
                  191.128.246.0/23
                  191.128.249.0-191.143.255.255
                  191.160.0.0/20
                  191.160.20.0-191.160.35.255
                  191.160.48.0-191.165.255.255
                  191.167.0.0-191.175.255.255
                  191.224.0.0-191.227.127.255
                  191.227.129.0-191.227.131.255
                  191.227.134.0/23
                  191.227.144.0-191.231.255.255
                IPv6:
                  2804:214::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26615

    Signature Algorithm: sha256WithRSAEncryption
         ac:91:08:88:fc:c7:32:1a:79:2c:1c:5d:07:16:f2:0d:fb:bf:
         e3:be:96:d6:09:0c:3e:86:1a:90:0b:bc:3d:5a:e4:7b:30:d3:
         cd:f8:ec:ce:6e:97:b2:19:98:1b:78:da:90:68:79:cf:dd:f9:
         f7:2f:30:5f:27:53:77:b9:b8:41:49:fc:0c:55:87:3c:7f:a8:
         47:a4:d3:bf:06:08:06:b9:fd:73:98:e2:20:67:62:82:18:57:
         86:38:b3:16:95:81:72:b7:04:d8:a2:b2:ad:7d:b2:8a:84:0c:
         77:27:df:a7:d2:c4:1f:78:11:ab:5f:ab:84:a0:ae:66:fa:11:
         e2:fa:62:88:b7:a3:25:21:d0:c7:54:b5:4a:10:db:c8:4b:80:
         a7:8c:e9:cc:99:81:0e:c7:46:99:9e:36:37:38:e0:53:4a:79:
         a6:1b:fa:75:85:93:ea:f0:29:b6:29:c6:9d:69:32:f7:bd:0a:
         0f:f5:33:32:2d:de:a1:cc:6f:6e:93:70:3e:6c:be:ea:11:9c:
         0a:b6:a1:c1:ea:98:41:2f:f3:f0:1d:5e:68:db:48:ca:27:83:
         04:c4:4a:27:1c:ae:7c:ec:fd:f7:e7:87:44:f6:89:67:0c:fd:
         25:c0:22:38:8b:29:4e:ae:70:f2:10:85:53:c6:44:42:32:d3:
         27:56:5e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:53 2026 by rpki-client