Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.cer
File:                     B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.cer (raw, json)
Hash identifier:          NOhoP7KnjufbaXrE06crqmtsXOoKFavxJMvMFI5fqH4=
Subject key identifier:   B4:ED:4F:1D:BF:65:11:CF:F8:BB:3D:95:56:54:85:B1:A9:B8:7B:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E31FA7419922681B94815AA19398B22E35DFB77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Mar 2026 18:46:14 +0000
Certificate not after:    Wed 10 Mar 2027 18:51:14 +0000
Subordinate resources:    AS: 267972
                          IP: 45.166.228.0/22
                          IP: 2804:5608::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:31:fa:74:19:92:26:81:b9:48:15:aa:19:39:8b:22:e3:5d:fb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 11 18:46:14 2026 GMT
            Not After : Mar 10 18:51:14 2027 GMT
        Subject: CN=B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:2c:f4:b3:af:66:6c:d8:98:a9:6d:cc:45:
                    2a:07:c1:73:e1:40:67:c4:de:5a:af:94:aa:30:fb:
                    0a:e1:fa:91:41:f5:48:0d:10:30:a5:4d:ba:ba:e1:
                    f8:b9:e5:da:84:4f:19:00:29:f1:b7:78:85:16:ee:
                    86:bb:67:4c:23:00:9a:71:65:70:2b:a7:ba:03:8d:
                    eb:6c:a8:e0:f1:a6:40:66:f0:d2:3f:19:e9:1f:d5:
                    cd:6c:55:7f:a8:6e:a2:81:96:12:5b:dd:c6:0e:80:
                    90:fc:8c:8c:a2:22:5e:d7:60:55:ed:36:67:0b:91:
                    ed:3a:44:e7:97:11:1b:36:fe:83:51:c6:47:43:61:
                    ad:88:20:36:ca:7d:51:a7:1b:d2:0a:64:e2:40:f0:
                    15:9d:42:fe:9f:5d:e1:42:64:dd:bf:81:ef:d4:c2:
                    0b:24:8d:6c:68:62:06:55:57:d8:5b:2a:43:3b:44:
                    8e:50:f8:37:c3:ce:b6:ce:cf:53:74:9e:fb:43:52:
                    96:05:cb:43:93:5b:37:b1:c0:66:8f:87:b9:33:69:
                    42:52:71:12:3f:f9:d3:60:8b:68:ed:15:97:36:2c:
                    37:c2:9e:75:2a:74:7a:1b:74:e9:5e:fa:ef:29:29:
                    20:d3:46:3a:f4:ad:b4:96:28:2a:9f:48:d2:db:67:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:ED:4F:1D:BF:65:11:CF:F8:BB:3D:95:56:54:85:B1:A9:B8:7B:E1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.228.0/22
                IPv6:
                  2804:5608::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267972

    Signature Algorithm: sha256WithRSAEncryption
         07:30:88:ff:fe:e8:3c:f9:f7:2d:44:12:b7:56:fb:52:5e:bd:
         a2:ba:dc:37:06:6c:46:66:8c:a6:f0:e4:a5:03:62:0a:2a:d6:
         2f:56:61:04:e6:fb:4d:c9:96:80:26:57:b3:fc:c9:34:e7:69:
         9c:ff:78:e6:c0:54:8e:9e:f1:db:a3:6a:0b:ba:44:38:65:08:
         9e:8c:16:fa:c8:d2:0f:cf:45:d7:94:d5:74:0c:0e:56:07:d2:
         25:b1:e2:7f:bd:25:7a:32:b1:a4:c8:d1:7a:f1:60:a2:32:30:
         e7:ab:22:8d:06:b9:ab:6b:33:42:b9:60:86:e7:7c:2b:b5:16:
         48:e1:c0:06:ab:c8:6f:21:70:4a:dd:ac:f4:02:f6:47:fc:2d:
         73:67:ba:92:86:40:77:cc:37:87:0a:2b:c2:ab:1b:40:cc:39:
         08:e5:aa:90:af:5c:df:d5:3f:d4:61:c1:ac:56:f3:2a:6c:cc:
         df:01:ea:f1:0e:45:68:07:1b:4d:17:8c:cd:80:3b:92:8c:66:
         25:4a:f8:64:ae:9a:f2:bf:df:b3:e9:9d:d2:e2:10:14:3b:0f:
         d2:cb:af:10:58:a4:cc:fb:28:ce:a1:e4:0f:34:74:90:85:61:
         ad:da:89:ee:69:ea:ae:59:53:b5:8e:4a:c2:dd:1e:31:70:cb:
         24:24:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:54:52 2026 by rpki-client