Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
File:                     D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer (raw, json)
Hash identifier:          LYC3mzrorq3LIkvQQwZTgOeYdffLApqZoDabwKr+XM8=
Subject key identifier:   D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FE63B83FBD157F42E30B5E01A2DDC36199F2E15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Jul 2026 14:38:23 +0000
Certificate not after:    Mon 19 Jul 2027 14:43:23 +0000
Subordinate resources:    AS: 263915
                          IP: 138.204.224.0/22
                          IP: 2804:27a8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e6:3b:83:fb:d1:57:f4:2e:30:b5:e0:1a:2d:dc:36:19:9f:2e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 20 14:38:23 2026 GMT
            Not After : Jul 19 14:43:23 2027 GMT
        Subject: CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:e4:f4:22:ad:a4:c0:ae:5c:41:fe:4a:18:
                    7a:c0:92:07:18:51:92:b4:84:2e:cb:02:21:d5:0a:
                    84:05:1e:21:65:f0:15:97:66:f3:e2:0d:07:8d:18:
                    cb:33:37:6f:1c:21:81:92:6b:f0:35:f8:e5:36:c7:
                    3c:42:cd:c3:71:ed:32:8c:15:9f:e4:ff:65:01:14:
                    18:18:0e:bf:7a:fa:e0:40:f6:27:92:e0:1c:e8:21:
                    c8:48:40:aa:ed:c8:54:a8:34:de:ef:15:df:f0:c3:
                    86:9e:e0:aa:a2:0d:0d:97:0a:4b:c4:d4:04:a3:4b:
                    85:e0:c0:c9:0d:7c:da:31:be:c5:db:01:de:be:18:
                    9e:57:8e:44:ba:3b:8e:ff:ef:10:66:5a:02:7f:03:
                    3e:62:86:ee:72:c2:0a:14:a1:8d:9f:49:ce:7a:3d:
                    d1:97:e9:dc:c2:81:c8:e3:72:65:a2:cf:98:06:8a:
                    94:68:ee:56:ee:35:d4:42:d8:83:08:64:c2:40:fd:
                    ae:af:55:c9:33:25:fd:47:a3:db:8b:34:b7:e5:1c:
                    56:e5:7d:2e:c9:5d:72:da:a6:fb:b7:dd:d4:6c:10:
                    eb:f1:29:f8:9a:1c:91:27:f4:81:93:f2:94:c8:e3:
                    48:71:44:be:6b:e0:8b:08:03:5c:b7:5f:0e:80:36:
                    d1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.224.0/22
                IPv6:
                  2804:27a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263915

    Signature Algorithm: sha256WithRSAEncryption
         00:25:aa:a9:d8:34:b6:d9:f8:5c:90:78:a1:9c:b0:3a:4b:77:
         b4:6d:04:aa:3f:ef:36:9c:d4:1a:b4:1a:a6:9c:42:7c:bc:72:
         03:9b:59:23:48:48:18:63:60:60:32:d8:99:a6:b7:f1:a2:22:
         e3:16:6c:73:f8:9e:a0:9e:e9:d6:9c:7d:80:0f:18:fb:29:73:
         89:fa:d8:7b:c3:9d:cf:e9:4f:69:90:f2:29:ba:c4:cc:be:9a:
         b4:2a:89:ec:d0:57:81:8f:d4:30:90:5f:3c:de:8a:aa:0d:8b:
         de:92:c3:3d:5b:46:5c:16:98:0a:65:0f:26:a6:b7:b6:94:dc:
         39:ce:22:8e:37:f7:2e:c7:86:12:77:51:df:f3:8e:dc:36:68:
         51:d4:55:de:ad:eb:d9:e9:93:7e:cf:29:fb:af:c7:bd:89:89:
         a0:b5:f8:cc:55:ff:3a:a7:20:66:79:90:63:a1:41:a1:97:f7:
         93:30:2b:6d:10:0e:42:7a:ae:05:28:70:e0:7b:71:76:c0:b2:
         66:e3:af:9f:1b:7c:e9:35:b6:23:8f:20:56:45:c5:fb:f0:19:
         3a:f7:f2:31:65:26:d7:67:c9:3c:89:68:e0:b0:f0:0a:05:4c:
         52:7f:ed:53:8a:95:9e:69:33:48:22:e4:07:28:7f:80:13:d4:
         fb:90:66:98
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUb+Y7g/vRV/QuMLXgGi3cNhmfLhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA3MjAxNDM4MjNaFw0yNzA3MTkxNDQzMjNaMDMxMTAvBgNV
BAMTKEQzQ0IwNEVFMEJFOUZGM0U0NUQyMTAyMEUzNUEyMEMwMkNERjk2NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJuT0Iq2kwK5cQf5KGHrAkgcY
UZK0hC7LAiHVCoQFHiFl8BWXZvPiDQeNGMszN28cIYGSa/A1+OU2xzxCzcNx7TKM
FZ/k/2UBFBgYDr96+uBA9ieS4BzoIchIQKrtyFSoNN7vFd/ww4ae4KqiDQ2XCkvE
1ASjS4XgwMkNfNoxvsXbAd6+GJ5XjkS6O47/7xBmWgJ/Az5ihu5ywgoUoY2fSc56
PdGX6dzCgcjjcmWiz5gGipRo7lbuNdRC2IMIZMJA/a6vVckzJf1Ho9uLNLflHFbl
fS7JXXLapvu33dRsEOvxKfiaHJEn9IGT8pTI40hxRL5r4IsIA1y3Xw6ANtHPAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTywTuC+n/PkXS
ECDjWiDALN+WQzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2J0
aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhFR3gvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNi
dGl3RlpjYW14OHpyQW15cVVlcGg2eGREVlp1SFhzeGU2OHVRTGZ4RUd4LzIvRDND
QjA0RUUwQkU5RkYzRTQ1RDIxMDIwRTM1QTIwQzAyQ0RGOTY0My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCiszgMA0EAgACMAcDBQAoBCeoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQG6zANBgkqhkiG9w0BAQsFAAOCAQEAACWqqdg0ttn4XJB4
oZywOkt3tG0Eqj/vNpzUGrQappxCfLxyA5tZI0hIGGNgYDLYmaa38aIi4xZsc/ie
oJ7p1px9gA8Y+ylzifrYe8Odz+lPaZDyKbrEzL6atCqJ7NBXgY/UMJBfPN6Kqg2L
3pLDPVtGXBaYCmUPJqa3tpTcOc4ijjf3LseGEndR3/OO3DZoUdRV3q3r2emTfs8p
+6/HvYmJoLX4zFX/OqcgZnmQY6FBoZf3kzArbRAOQnquBShw4HtxdsCyZuOvnxt8
6TW2I48gVkXF+/AZOvfyMWUm12fJPIlo4LDwCgVMUn/tU4qVnmkzSCLkByh/gBPU
+5BmmA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:09 2026 by rpki-client