Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
File:                     CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer (raw, json)
Hash identifier:          UGTHnyzr8zInsn0pUjd/ahI8Eb3JBUb9Q8s7KyLg6b0=
Subject key identifier:   CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E32914C0FA3FB2BD9810A84C2DAE4CB23BFC175
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Mar 2026 18:02:22 +0000
Certificate not after:    Thu 11 Mar 2027 18:07:22 +0000
Subordinate resources:    AS: 268033
                          IP: 45.166.200.0/22
                          IP: 2804:56f0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:32:91:4c:0f:a3:fb:2b:d9:81:0a:84:c2:da:e4:cb:23:bf:c1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 12 18:02:22 2026 GMT
            Not After : Mar 11 18:07:22 2027 GMT
        Subject: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:80:34:96:3d:e8:75:0f:c8:e6:36:d4:29:
                    de:0d:f3:08:61:ad:52:1a:66:9d:05:d2:a9:db:c3:
                    84:48:85:48:11:a4:35:f9:d3:87:77:2b:7d:1a:da:
                    84:f4:0a:35:a1:28:3e:56:13:e8:48:9e:17:22:28:
                    97:22:61:f0:20:ba:cf:bc:13:8e:c9:45:78:6d:e7:
                    a3:10:c6:f0:03:54:29:d4:d2:ee:ae:eb:f6:08:35:
                    b6:3d:4f:ef:18:bf:4a:49:72:2c:bb:68:03:03:8b:
                    02:f9:9d:0d:ea:5d:7e:bc:27:1a:5e:08:5f:0e:9c:
                    7d:67:ed:62:af:a8:5d:4a:5f:36:d6:7c:84:ff:5c:
                    12:6e:0c:de:3f:fb:15:76:56:2b:4d:c0:a3:60:fd:
                    26:cd:6a:fd:a9:88:57:d9:50:89:d1:c5:cf:f9:f3:
                    1f:c4:b5:c0:20:58:29:a3:e9:0a:11:13:3a:e6:5c:
                    ee:eb:fb:b8:d6:4b:39:d9:42:a3:20:68:83:d3:11:
                    5e:a4:0c:e5:42:25:df:4a:93:20:f1:35:50:7a:b6:
                    05:5b:fb:71:51:59:ce:10:de:8c:0b:60:58:d5:42:
                    ec:ce:c4:88:9f:d7:ce:a0:0f:33:6e:68:71:ab:4d:
                    63:27:1f:a1:b4:4a:2a:86:4c:02:62:12:c3:ca:23:
                    2b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.200.0/22
                IPv6:
                  2804:56f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268033

    Signature Algorithm: sha256WithRSAEncryption
         0b:db:0a:fe:e5:f1:5d:b1:3e:c7:18:e7:c8:cf:8f:24:32:6a:
         24:c6:be:7a:8c:45:f2:eb:47:be:50:f3:66:8c:74:60:d4:31:
         23:80:f4:3d:d2:86:27:ac:ba:7d:5b:b7:71:6e:2d:cb:c1:f5:
         72:7e:af:42:c2:10:ec:4c:73:19:11:2d:e3:73:aa:84:e2:c8:
         14:47:86:02:4a:dc:c0:c9:7b:c8:75:77:f0:ba:6c:2b:ad:5d:
         c6:57:03:eb:40:01:a3:c6:60:87:29:ec:02:a3:b0:0d:bd:06:
         eb:12:82:a7:ba:04:02:9c:cc:28:2b:9e:fc:28:d9:93:62:ae:
         ae:ad:d1:18:8d:e4:c9:77:f8:af:eb:6c:24:13:41:b6:94:1c:
         68:cd:f8:b0:f5:c3:a8:d5:07:d6:f7:15:38:0e:dd:bb:da:c4:
         ce:1f:2b:33:4c:9f:d5:d3:6b:f4:8f:3e:ff:65:81:ae:8f:27:
         5c:a9:de:a2:70:d8:29:54:82:84:ed:f5:66:bf:00:e0:bf:3f:
         ca:d9:b9:b3:76:dd:77:8f:6f:1b:eb:04:e0:9f:fe:22:39:bf:
         98:7e:97:13:ef:e5:58:a7:21:29:e4:82:cb:f7:8e:71:7b:5e:
         4e:9f:9c:48:50:3c:48:e3:84:22:e7:5d:55:4f:7f:79:64:14:
         1d:d9:70:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:16:05 2026 by rpki-client