Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.cer
File:                     A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.cer (raw, json)
Hash identifier:          qpdZw9vZMkbXM7lSC6NSmZJ0KmpC+CkL390IReehRx8=
Subject key identifier:   A1:AC:AB:9F:CA:6E:F5:88:54:8A:D2:B6:BD:F8:A6:1A:C7:59:40:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6CFA9DF9413708DA2A0F54BC807C92DDB0584C72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Apr 2026 12:47:35 +0000
Certificate not after:    Wed 28 Apr 2027 12:52:35 +0000
Subordinate resources:    AS: 269172
                          IP: 45.181.52.0/22
                          IP: 2804:6084::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 19:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fa:9d:f9:41:37:08:da:2a:0f:54:bc:80:7c:92:dd:b0:58:4c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 29 12:47:35 2026 GMT
            Not After : Apr 28 12:52:35 2027 GMT
        Subject: CN=A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:99:8d:a2:12:f0:9e:e7:1c:4a:aa:37:e4:
                    2d:6a:e5:8d:3c:e7:d4:68:a0:2f:77:6c:54:cd:8f:
                    19:02:db:a0:84:d7:38:0d:fd:4e:16:18:7e:1b:97:
                    f5:33:18:7f:cf:d8:51:1b:68:fc:98:fb:82:27:0c:
                    1e:a8:4f:d3:60:1a:89:02:bd:56:ec:12:86:ba:a5:
                    58:ea:0c:70:11:0a:9e:c1:63:fd:da:e0:1b:1f:d0:
                    b6:52:23:ae:79:f4:ca:16:1c:40:51:8e:05:71:50:
                    bc:a4:e7:24:44:eb:25:17:bb:70:87:c4:1a:b2:59:
                    96:59:c2:50:93:e8:ce:15:50:92:a3:91:61:b9:91:
                    22:7b:42:bf:08:e8:32:8e:39:1f:e1:64:16:4c:b4:
                    e8:f9:62:84:bd:c0:30:8a:5a:44:de:ca:5b:db:98:
                    ab:0f:b2:80:01:ed:72:87:54:7e:42:b8:9e:a4:89:
                    75:50:ce:31:2c:fe:2f:5c:65:7b:dc:ed:c8:59:be:
                    71:76:3c:50:96:76:e3:c7:01:23:f9:11:d3:82:a0:
                    02:fa:ca:aa:55:36:22:3d:63:bd:bb:ba:b2:9c:94:
                    ec:3d:5d:1e:f3:01:8f:b2:8a:bf:64:7b:77:bc:4b:
                    93:bd:63:55:17:83:e1:63:45:b9:ac:a9:3a:85:d0:
                    ae:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:AC:AB:9F:CA:6E:F5:88:54:8A:D2:B6:BD:F8:A6:1A:C7:59:40:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4vudqjw7dHsEsckGb6JjqXtKZp483DgxXQzvRo8mEoBq/0/A1ACAB9FCA6EF588548AD2B6BDF8A61AC75940EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.52.0/22
                IPv6:
                  2804:6084::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269172

    Signature Algorithm: sha256WithRSAEncryption
         56:cf:df:85:15:d7:e8:cd:34:da:e5:5e:89:e3:52:f5:44:88:
         3a:90:02:e3:fa:b7:b8:5a:0a:f7:8a:18:84:93:22:41:77:5b:
         c3:3a:b5:b9:52:df:85:10:49:cf:a1:4f:59:83:19:b6:7c:bd:
         d0:c0:e0:3d:49:30:a8:75:2c:fc:83:32:d6:61:72:98:20:13:
         47:d6:d9:8d:b9:09:8a:53:c7:14:4a:a0:5e:0c:3f:9d:c5:c0:
         39:85:e4:8e:4c:9b:34:a5:2f:36:4f:21:07:34:ff:90:fd:b9:
         53:11:1f:d8:39:a8:1d:a8:cb:c8:e1:1b:06:0c:37:09:2e:75:
         a9:d3:45:28:c4:60:6b:c9:1b:5d:ce:8c:a3:d4:d0:70:e5:09:
         93:f7:dc:4e:5e:66:41:7c:01:5d:64:90:af:35:f5:4f:21:4e:
         64:2a:24:53:4b:f8:e3:b8:90:98:09:9b:9e:f9:60:da:84:f8:
         e6:ec:41:56:2a:90:32:f5:68:44:1f:0b:a6:12:08:fc:07:ff:
         67:0c:3f:82:01:18:fb:dc:e3:04:40:1b:ec:b2:32:55:76:33:
         3c:35:dd:bb:ef:8e:80:e0:c7:08:36:db:e3:b7:9b:7e:dd:85:
         1d:64:b9:aa:90:82:29:7b:dc:9b:e5:1e:22:7a:ae:9f:84:eb:
         01:20:48:7a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUbPqd+UE3CNoqD1S8gHyS3bBYTHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA0MjkxMjQ3MzVaFw0yNzA0MjgxMjUyMzVaMDMxMTAvBgNV
BAMTKEExQUNBQjlGQ0E2RUY1ODg1NDhBRDJCNkJERjhBNjFBQzc1OTQwRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnB5mNohLwnuccSqo35C1q5Y08
59RooC93bFTNjxkC26CE1zgN/U4WGH4bl/UzGH/P2FEbaPyY+4InDB6oT9NgGokC
vVbsEoa6pVjqDHARCp7BY/3a4Bsf0LZSI6559MoWHEBRjgVxULyk5yRE6yUXu3CH
xBqyWZZZwlCT6M4VUJKjkWG5kSJ7Qr8I6DKOOR/hZBZMtOj5YoS9wDCKWkTeylvb
mKsPsoAB7XKHVH5CuJ6kiXVQzjEs/i9cZXvc7chZvnF2PFCWduPHASP5EdOCoAL6
yqpVNiI9Y727urKclOw9XR7zAY+yir9ke3e8S5O9Y1UXg+FjRbmsqTqF0K4dAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBShrKufym71iFSK
0ra9+KYax1lA7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHZ1
ZHFqdzdkSHNFc2NrR2I2SmpxWHRLWnA0ODNEZ3hYUXp2Um84bUVvQnEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR2
dWRxanc3ZEhzRXNja0diNkpqcVh0S1pwNDgzRGd4WFF6dlJvOG1Fb0JxLzAvQTFB
Q0FCOUZDQTZFRjU4ODU0OEFEMkI2QkRGOEE2MUFDNzU5NDBFRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbU0MA0EAgACMAcDBQAoBGCEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbdDANBgkqhkiG9w0BAQsFAAOCAQEAVs/fhRXX6M002uVe
ieNS9USIOpAC4/q3uFoK94oYhJMiQXdbwzq1uVLfhRBJz6FPWYMZtny90MDgPUkw
qHUs/IMy1mFymCATR9bZjbkJilPHFEqgXgw/ncXAOYXkjkybNKUvNk8hBzT/kP25
UxEf2DmoHajLyOEbBgw3CS51qdNFKMRga8kbXc6Mo9TQcOUJk/fcTl5mQXwBXWSQ
rzX1TyFOZCokU0v447iQmAmbnvlg2oT45uxBViqQMvVoRB8LphII/Af/Zww/ggEY
+9zjBEAb7LIyVXYzPDXdu++OgODHCDbb47ebft2FHWS5qpCCKXvcm+UeInqun4Tr
ASBIeg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:41:58 2026 by rpki-client