Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
File:                     974B1286BDF6AAAF8648D23141EAB781B973C049.cer (raw, json)
Hash identifier:          tI1Q+eYQ/zoFZh35Jkf4B6slWDmoMQVIb2TjNaWVfu8=
Subject key identifier:   97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2233B93185A3706F7BEF701E04F797C7AFC49FB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Jul 2026 16:33:27 +0000
Certificate not after:    Wed 14 Jul 2027 16:38:27 +0000
Subordinate resources:    AS: 268077
                          IP: 45.168.168.0/22
                          IP: 2804:57a4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:33:b9:31:85:a3:70:6f:7b:ef:70:1e:04:f7:97:c7:af:c4:9f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 15 16:33:27 2026 GMT
            Not After : Jul 14 16:38:27 2027 GMT
        Subject: CN=974B1286BDF6AAAF8648D23141EAB781B973C049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:de:f6:06:e8:13:2f:29:7f:3a:93:a8:c3:
                    35:77:a9:38:b6:8f:c3:be:f8:21:37:ef:e7:b0:75:
                    5f:b6:aa:66:d7:34:53:e6:aa:5e:b0:ea:cc:28:32:
                    40:54:3f:44:91:39:28:87:67:0a:47:3b:2e:68:52:
                    9f:bf:0c:5c:5e:05:b5:a7:f1:48:22:5b:6e:16:33:
                    97:7b:17:f6:56:3e:0f:48:8d:2a:30:ed:7e:41:2f:
                    0c:3b:2d:a9:e5:81:6e:0e:d4:d2:ff:99:eb:a5:dc:
                    f2:64:b0:59:7d:48:89:8d:1a:16:3a:e1:07:11:92:
                    1a:d2:16:be:f2:61:76:63:ba:55:a0:0b:8d:59:d3:
                    80:c9:cb:c3:67:46:d2:ea:9f:bb:6f:97:b1:94:ff:
                    80:ab:67:7e:d2:44:3a:b0:06:03:77:18:94:71:6d:
                    2a:43:d2:a9:f9:50:c4:14:2a:85:22:38:74:36:56:
                    96:47:40:5a:27:c4:91:69:b2:c4:0a:48:61:07:48:
                    27:26:4c:cb:1d:54:1e:4a:ab:7c:ac:48:ef:8d:e9:
                    12:6e:e6:91:d5:ea:f8:63:ab:41:34:7b:cc:82:64:
                    f2:d7:3e:21:69:de:52:c6:4b:9a:42:bc:0e:f5:23:
                    88:67:1c:30:5e:6d:5f:4a:d6:1e:fc:53:ec:37:56:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.168.0/22
                IPv6:
                  2804:57a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268077

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:9f:d6:e1:d7:1f:aa:57:85:60:d6:a2:e9:83:d2:fe:3e:
         83:27:eb:08:42:7c:8a:f9:5e:ee:42:93:ca:7f:c8:be:8f:8b:
         0d:81:ec:db:58:bb:cc:5b:fc:64:39:a3:4b:48:f6:1f:c0:12:
         e6:6d:d3:31:bc:8f:08:80:a3:b8:6e:4d:06:71:30:b7:7c:26:
         93:20:a6:80:c0:b8:c2:ea:cf:db:ef:35:4b:9d:5f:d1:3e:22:
         fb:d9:d8:42:73:7c:f3:32:1f:01:54:20:e1:53:3a:31:d9:eb:
         89:0e:49:91:8d:88:ab:b9:1d:b9:3a:22:af:52:53:17:3a:a7:
         05:07:fc:0d:83:a1:6c:cd:7c:10:bc:97:0a:1a:d0:9a:50:90:
         14:fd:5f:7f:f9:42:38:0b:44:58:26:5e:5b:be:4b:7b:c2:15:
         00:82:4f:d5:1d:cf:d6:21:ba:8b:17:9a:3a:b2:be:48:26:a4:
         44:25:48:02:5c:f0:27:7f:80:52:8b:fb:82:43:39:43:89:a4:
         ae:00:19:79:48:b4:f8:c9:10:c0:df:70:cd:6f:55:b8:3e:da:
         bd:67:7c:97:ac:51:ff:cd:55:e0:47:08:29:07:06:57:2d:30:
         88:91:94:84:b2:25:fb:e0:13:8f:03:01:57:7d:ad:db:e6:69:
         5e:a7:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:26:24 2026 by rpki-client