Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer
File:                     C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer (raw, json)
Hash identifier:          KyYud0jHEB+WstF27S/mLKL6g+2t1PTTCyZs0MilHEg=
Subject key identifier:   C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1B37E997A31779B871BC51C4264A5A127216FD49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Jul 2026 18:00:04 +0000
Certificate not after:    Wed 21 Jul 2027 18:05:04 +0000
Subordinate resources:    AS: 269704
                          IP: 45.189.160.0/22
                          IP: 45.191.104.0/22
                          IP: 2804:689c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:37:e9:97:a3:17:79:b8:71:bc:51:c4:26:4a:5a:12:72:16:fd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 18:00:04 2026 GMT
            Not After : Jul 21 18:05:04 2027 GMT
        Subject: CN=C2C86C47FC39E808F8CF5C00C62D57D80858C738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:bc:b8:8f:a9:b8:29:1e:1a:bb:ec:e8:fa:
                    a9:aa:f3:5c:56:cb:01:11:65:85:3e:85:66:2b:d2:
                    b5:ad:7b:33:2b:e1:82:dd:5d:03:ce:c8:48:42:87:
                    b0:38:93:87:91:b1:8a:5c:9d:ff:e2:5a:52:da:0d:
                    77:b2:69:3d:55:bb:a4:79:9d:d2:2e:07:a3:5b:b0:
                    d5:b9:9c:40:33:af:9f:39:09:a2:ac:c4:8f:36:9a:
                    9e:cb:ab:b5:15:9f:fa:e2:a3:3f:5a:b3:3a:e8:18:
                    61:66:b4:ab:ae:fa:90:6b:38:ec:8e:45:01:68:33:
                    d8:a2:aa:81:1e:62:00:ba:3a:89:36:06:a6:ee:8f:
                    f1:8a:76:89:be:0f:34:4a:75:0b:d3:1a:f5:67:7e:
                    94:83:0c:70:20:73:9c:3d:47:df:a1:5d:d1:2c:af:
                    92:43:ec:01:fe:21:88:db:a8:84:2b:a1:ca:13:a1:
                    ed:16:88:8e:64:20:a9:9c:4e:35:f7:23:0d:2b:16:
                    77:83:be:5f:43:db:0a:62:2a:4d:0a:61:80:34:43:
                    2c:88:f0:cb:3f:91:19:8a:90:d2:ed:65:2a:e6:6b:
                    a9:c5:66:f6:41:57:94:8c:fd:a1:ef:14:03:4e:5e:
                    52:8e:91:98:bd:9a:db:f1:a3:f2:3b:6f:88:c2:41:
                    d6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.160.0/22
                  45.191.104.0/22
                IPv6:
                  2804:689c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269704

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:95:f6:50:6c:ad:0a:48:17:07:44:18:44:b0:45:eb:17:
         38:c8:e6:08:0e:50:b9:eb:a3:d3:f6:4b:9e:e1:ad:ca:78:c7:
         37:a1:92:70:9f:e1:bf:66:09:c1:b7:b0:3d:80:27:c5:a6:a0:
         3f:4c:c0:4a:07:fe:b5:1a:bd:24:b2:78:08:0c:90:d6:87:05:
         70:22:d5:34:84:87:d9:9b:d9:84:a3:40:2b:c0:1d:ec:a9:23:
         a7:23:10:6f:c5:70:9b:29:bd:52:94:c6:fc:6e:a9:f5:4e:07:
         50:81:a7:6d:c7:16:09:74:58:ea:11:f5:88:6e:e3:32:58:00:
         89:35:24:2b:d0:c6:c5:d9:30:47:57:b9:51:fd:6c:41:22:32:
         98:96:54:9d:97:eb:a7:73:b0:ac:0a:43:d8:eb:79:ef:aa:0f:
         fc:fc:b1:d3:72:12:d7:2e:53:5e:1b:bb:04:6f:14:64:54:d9:
         d0:05:b5:6f:41:f7:d0:84:f0:19:90:8a:4b:b5:a8:a3:87:77:
         43:11:2e:e8:61:da:3d:fb:d1:ce:98:83:77:bc:97:8d:df:21:
         3d:9e:28:0e:8b:83:2a:6b:92:11:77:55:ca:dc:b9:22:f8:43:
         5d:10:08:34:b7:80:49:c9:c0:a4:68:68:61:cf:5e:7a:55:81:
         14:c6:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:04:13 2026 by rpki-client