Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF51549A7DFDEB7F32BA12D74E211A558DCB0D23.cer
File:                     DF51549A7DFDEB7F32BA12D74E211A558DCB0D23.cer (raw, json)
Hash identifier:          EfDOwn6xks3X/0JFePoR/blgHa7op7kafmmOI/YB5MA=
Subject key identifier:   DF:51:54:9A:7D:FD:EB:7F:32:BA:12:D7:4E:21:1A:55:8D:CB:0D:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B78EB20FCB4AA4083E6CB60C7109CD16DD3B40B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/DF51549A7DFDEB7F32BA12D74E211A558DCB0D23.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Mar 2026 16:45:03 +0000
Certificate not after:    Fri 05 Mar 2027 16:50:03 +0000
Subordinate resources:    AS: 263035
                          IP: 177.20.176.0/21
                          IP: 2804:a38::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:78:eb:20:fc:b4:aa:40:83:e6:cb:60:c7:10:9c:d1:6d:d3:b4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 16:45:03 2026 GMT
            Not After : Mar  5 16:50:03 2027 GMT
        Subject: CN=DF51549A7DFDEB7F32BA12D74E211A558DCB0D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c5:cd:22:74:c9:b3:b2:78:cb:5f:c3:22:22:
                    bf:71:8e:2d:78:3b:7b:33:a6:e3:ae:70:f2:eb:a1:
                    78:65:09:63:93:0e:f6:71:01:ba:4a:81:44:90:15:
                    35:c5:4b:3f:91:d0:1d:d8:4d:3c:72:e1:eb:21:2a:
                    a6:1d:99:10:78:bf:d3:be:c2:8f:33:c7:d9:b8:c8:
                    f5:72:f1:98:85:8b:1a:2c:ad:4f:c1:3c:01:c2:69:
                    2e:86:69:08:13:c3:7e:c8:9d:f4:2e:6e:f4:ae:94:
                    90:14:43:ad:0d:b7:11:fc:7d:92:a9:18:22:c6:fe:
                    27:09:ab:bb:df:39:15:78:68:e3:24:ac:1f:fa:8a:
                    6f:43:4f:92:3d:ce:c1:d9:67:ea:b8:94:73:d2:ce:
                    09:dc:8c:4e:2b:9b:9e:23:9c:1f:e2:d2:a9:b6:69:
                    93:44:c3:5f:27:10:01:ce:f0:d1:9e:aa:53:8b:41:
                    35:62:8f:8e:73:cb:f3:ff:10:af:0c:5f:ec:4c:2a:
                    f0:b6:ed:ef:4d:e9:08:95:38:80:e9:70:26:48:74:
                    60:0b:5b:38:c4:b9:12:bf:20:bc:ef:07:65:8b:0f:
                    ba:72:7f:be:4d:12:7d:bc:53:cc:98:9b:77:1b:dc:
                    3a:fb:55:13:cd:63:bd:d4:f6:b4:8d:7f:44:9b:38:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:51:54:9A:7D:FD:EB:7F:32:BA:12:D7:4E:21:1A:55:8D:CB:0D:23
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/DF51549A7DFDEB7F32BA12D74E211A558DCB0D23.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.176.0/21
                IPv6:
                  2804:a38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263035

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:f9:1a:37:53:a9:5b:35:52:c6:40:c3:54:4e:67:22:00:
         7e:74:8c:d6:21:7f:82:84:40:41:4f:e6:8e:11:2b:14:fb:cb:
         6d:4e:00:5a:24:f2:c0:2e:49:5c:a0:21:99:f6:8a:0e:19:3f:
         d1:07:40:e0:54:02:bc:7c:a6:4a:75:f6:b1:e7:1e:35:14:3d:
         8f:f6:9f:77:17:80:0d:a6:36:17:af:aa:3c:4b:3c:0b:c0:5a:
         8a:0b:89:60:e4:ee:44:e4:6d:a9:ec:68:6c:46:62:60:24:49:
         63:70:c1:e1:32:55:ed:89:c8:e9:83:96:05:d8:db:18:99:e4:
         a2:9d:7a:20:dc:33:54:f5:89:cc:57:ba:26:9a:c3:20:7b:1f:
         27:fa:4e:60:67:28:b0:c1:2c:1f:ce:fd:34:7a:60:74:77:d1:
         6d:f5:ac:36:15:ee:d5:d4:fe:d9:dd:d7:8f:e2:fe:a2:b3:dc:
         8e:dd:b9:ca:82:32:bf:4f:b4:a6:48:6f:9a:58:b5:06:ef:bd:
         02:c4:d0:ca:89:76:5a:50:50:27:4a:a1:6a:f4:3a:8f:1a:7a:
         a5:a7:7f:89:69:c2:5c:fb:6c:c2:2a:58:e9:ac:bd:3b:db:55:
         0d:f1:b4:62:4a:20:83:62:df:f5:0a:bd:ff:7c:11:c9:16:d5:
         99:e9:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:57 2026 by rpki-client