Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.cer
File:                     CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.cer (raw, json)
Hash identifier:          prishCnH4nj++C7ByqC0oH7U8Lbpyi2cheFaSkZrBh8=
Subject key identifier:   CA:78:BC:B5:1F:15:F2:9B:EB:B3:DA:72:81:CF:01:1A:F4:FB:15:82
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5754630D4873684F73A5F7496C9CF14783A0BF09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Mar 2026 20:34:56 +0000
Certificate not after:    Wed 17 Mar 2027 20:39:56 +0000
Subordinate resources:    AS: 268459
                          IP: 45.161.128.0/22
                          IP: 2804:518c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:54:63:0d:48:73:68:4f:73:a5:f7:49:6c:9c:f1:47:83:a0:bf:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 18 20:34:56 2026 GMT
            Not After : Mar 17 20:39:56 2027 GMT
        Subject: CN=CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:3b:f6:2f:b7:98:60:12:0d:f5:99:79:e2:
                    cf:04:5a:6b:59:47:84:2b:ad:8b:b8:7b:5f:f7:3a:
                    d2:5e:91:6a:23:8e:52:9e:bf:bf:26:15:54:8a:f5:
                    73:d9:24:ac:11:fa:0e:6d:bb:a2:55:e0:23:fd:8c:
                    73:5c:d8:ed:89:7b:67:a9:a9:05:32:04:03:41:e1:
                    63:c9:3d:26:b9:2b:d5:f2:00:25:68:0e:08:4d:ea:
                    3c:9a:72:07:d1:21:e7:61:fe:ea:dc:a9:7e:42:a8:
                    a1:af:b7:a2:92:45:4a:fe:00:10:29:c7:6c:15:12:
                    d8:7c:30:3c:37:af:fe:39:5d:5b:a0:2d:2e:59:9f:
                    a4:b2:67:de:42:86:1c:6d:a2:cf:3a:13:1c:ae:3c:
                    13:06:f1:a3:cf:ea:b6:3a:54:40:eb:0b:f1:18:e4:
                    37:8b:12:8d:d7:45:1c:c7:9b:58:5c:85:40:3c:ad:
                    c1:e8:b8:1c:a1:25:1c:17:cd:bd:75:70:c4:db:88:
                    cd:9a:b3:55:a5:8d:45:2b:b2:17:ae:48:6e:a9:8e:
                    6e:4e:e3:17:2c:c6:43:ca:96:64:05:51:73:62:32:
                    3b:e0:c8:25:94:90:34:17:cc:33:57:b9:f5:02:a7:
                    19:88:1c:e8:23:e2:77:f6:45:05:dc:77:19:a5:0c:
                    da:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:78:BC:B5:1F:15:F2:9B:EB:B3:DA:72:81:CF:01:1A:F4:FB:15:82
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.128.0/22
                IPv6:
                  2804:518c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268459

    Signature Algorithm: sha256WithRSAEncryption
         54:db:d6:55:1f:88:c2:4f:1a:7d:62:f0:0c:0c:c8:fa:63:e5:
         da:90:6e:92:cf:89:8a:a1:77:69:25:d2:80:5d:e3:06:77:49:
         72:24:73:c7:40:6d:9b:e7:1b:51:63:e6:14:2e:57:ff:da:d0:
         99:5d:12:3a:46:9f:0c:16:5b:6e:72:9f:fb:be:a6:a3:5f:42:
         01:54:ee:eb:80:1e:6b:16:e7:ad:96:18:fe:ac:0c:9b:d0:e7:
         0d:27:0f:c6:8e:95:c5:2e:0d:dc:8c:49:f5:59:77:db:ad:20:
         59:fb:2a:20:7f:a7:86:48:29:eb:a4:4f:ca:f6:f8:06:97:ff:
         34:ff:47:ba:ba:52:e6:a1:2a:23:48:e5:ba:22:48:0c:bf:f8:
         10:a1:37:57:8f:86:1c:d0:a3:65:70:42:ac:19:c3:41:c5:96:
         fe:d3:92:58:0c:55:04:d5:4f:78:d4:0f:0a:eb:38:ea:e2:a6:
         99:c7:23:de:c8:4f:3c:e0:77:0a:ab:ac:60:75:c5:40:3a:bf:
         26:c6:0f:7b:b4:0a:30:71:bb:95:24:e2:ec:49:2c:f8:65:e7:
         fa:0f:2d:f6:77:34:f2:e7:f8:73:7b:61:d1:c6:22:90:01:07:
         25:79:0a:a8:1c:dd:b2:16:44:64:b8:90:0a:07:21:b1:76:01:
         e2:83:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:59:15 2026 by rpki-client