Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer
File:                     A601CC15A099E546A3DCBD53AF497300DAA65598.cer (raw, json)
Hash identifier:          e3hY4OZ05svuRPYuGfNfaOBN/eKrQqdEA5yjzMmh0/4=
Subject key identifier:   A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       472BBF510C5794FB5E936E319346D1CC5DBFCD11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Mar 2026 10:04:54 +0000
Certificate not after:    Fri 05 Mar 2027 10:09:54 +0000
Subordinate resources:    AS: 52765
                          IP: 160.238.228.0/22
                          IP: 168.197.156.0/22
                          IP: 170.239.72.0/22
                          IP: 177.39.120.0/21
                          IP: 2804:b54::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2b:bf:51:0c:57:94:fb:5e:93:6e:31:93:46:d1:cc:5d:bf:cd:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 10:04:54 2026 GMT
            Not After : Mar  5 10:09:54 2027 GMT
        Subject: CN=A601CC15A099E546A3DCBD53AF497300DAA65598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d9:73:ae:4c:17:fe:26:6a:2c:4c:23:01:64:
                    0a:98:26:98:b2:4a:85:2d:79:b9:46:79:54:7e:00:
                    bc:fe:80:7a:8e:cd:b7:ed:30:d2:71:3e:9f:be:2b:
                    d0:a7:0c:d0:5f:8f:04:70:e7:4e:5b:5d:a8:bd:a4:
                    5f:33:a7:55:14:02:cd:36:e0:aa:6f:06:ed:11:de:
                    60:af:2f:64:ec:22:6b:01:23:8f:44:eb:84:6b:36:
                    4e:bd:66:d7:84:06:a9:9e:3f:eb:db:fb:06:8a:f3:
                    59:df:5d:e0:88:44:fe:1d:ae:54:32:9f:99:ae:46:
                    5a:74:3c:35:32:ed:6b:ce:17:b7:f4:60:ea:ff:ad:
                    34:46:87:b6:bf:94:df:31:25:43:a4:56:47:46:2f:
                    6c:35:f4:8f:a6:b5:c4:10:1b:9c:a6:ef:4c:93:70:
                    74:bf:4d:53:e0:4a:c9:56:d7:b1:59:22:32:d0:14:
                    08:6e:5c:59:28:43:79:08:9a:1f:07:50:a2:17:42:
                    c2:22:25:ef:06:67:e2:00:e5:62:b1:88:fa:fe:d3:
                    a1:62:47:1a:8a:76:1a:22:95:8b:0b:93:cc:a0:5d:
                    97:05:a0:c0:40:a9:75:3f:0b:99:9b:2e:b6:c2:74:
                    d6:01:c5:8f:51:23:56:dc:c8:fb:a2:19:9e:37:ac:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.228.0/22
                  168.197.156.0/22
                  170.239.72.0/22
                  177.39.120.0/21
                IPv6:
                  2804:b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52765

    Signature Algorithm: sha256WithRSAEncryption
         aa:65:4a:e2:9c:64:f8:c1:b0:74:c4:74:b2:36:a6:c8:52:fe:
         27:3c:7e:0d:f1:e7:1f:79:39:d4:b9:26:a9:44:dd:73:67:a8:
         40:27:a1:ed:d0:87:01:15:0e:6f:89:a6:0d:d4:68:e1:44:0a:
         23:5b:4e:01:8b:6f:82:9a:ba:9a:fb:7f:38:9a:5b:c4:8e:07:
         c9:62:6f:b8:7a:ca:4e:09:00:89:2e:1e:ca:73:0b:59:3f:d5:
         0e:bb:a0:b0:1e:0d:49:69:19:be:6a:8e:fd:b8:a6:b6:11:45:
         5e:56:24:66:24:2a:3e:53:e1:49:99:45:b8:d9:c2:a7:7d:1e:
         91:8b:1e:a3:83:4b:45:04:68:63:44:14:0e:d6:ac:f0:9e:37:
         79:01:ac:28:c5:b0:75:6f:b5:ca:de:e7:bd:a1:7b:b6:d1:c8:
         55:b8:13:76:83:61:3d:fb:29:1e:3e:0d:ae:ee:95:56:47:fd:
         99:49:06:65:31:e5:9d:75:3e:99:19:fe:94:e9:df:cb:cc:e9:
         88:f8:63:1b:b6:83:94:da:35:8b:f6:62:9e:54:bf:47:13:6f:
         97:1d:68:3a:52:61:d0:98:35:ba:b2:5f:81:ba:ea:e9:06:e0:
         b2:b9:d5:1b:2a:d5:67:90:ba:8b:25:b6:b7:c7:d0:df:db:fb:
         c7:d9:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:44 2026 by rpki-client