Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer
File:                     E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer (raw, json)
Hash identifier:          oaBlCmsqZsN1GLmfFMcjML3PP6oivYELpRM5F2/vhOo=
Subject key identifier:   E2:84:29:D3:AB:E3:02:90:9D:F4:02:CE:9F:F3:4A:BB:4C:C8:83:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5645A2CAE829E088DA11B7808A7DD7AD4C3AA08B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Jul 2026 14:38:10 +0000
Certificate not after:    Wed 07 Jul 2027 14:43:10 +0000
Subordinate resources:    AS: 274520
                          IP: 170.84.164.0/22
                          IP: 2804:9564::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 19:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:45:a2:ca:e8:29:e0:88:da:11:b7:80:8a:7d:d7:ad:4c:3a:a0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  8 14:38:10 2026 GMT
            Not After : Jul  7 14:43:10 2027 GMT
        Subject: CN=E28429D3ABE302909DF402CE9FF34ABB4CC883F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:4b:72:e8:87:1a:75:3d:38:7a:03:00:5b:
                    e6:be:25:38:35:29:7e:6e:90:95:02:10:01:ae:59:
                    c4:47:94:10:de:5e:e8:4a:c3:04:49:0c:4f:64:91:
                    90:eb:23:15:f0:1b:f4:9d:b8:a9:8e:81:50:2d:d9:
                    aa:cb:de:77:97:32:6a:5b:e9:92:f5:aa:3b:ee:c5:
                    76:e5:5f:00:a1:ca:23:0c:1c:25:6f:11:a1:b1:bd:
                    27:5a:34:79:d1:91:de:30:2c:33:ce:25:70:93:ff:
                    95:b0:e3:fb:14:23:1d:44:7e:7d:39:9f:49:10:af:
                    3b:b4:63:c0:65:35:83:4d:42:6d:66:3f:15:d0:06:
                    60:ae:53:b8:d0:2f:85:2d:1d:17:e3:24:d7:61:98:
                    b8:3f:9a:0a:d8:97:fe:06:e1:94:bc:f5:ce:d2:6f:
                    7a:2b:53:b3:bc:46:eb:15:c0:98:f5:3a:52:48:47:
                    4d:ee:de:30:3e:e7:b7:f1:83:7c:74:ae:ca:4a:b5:
                    68:9c:0d:3c:d8:68:f3:6a:28:1e:6b:7f:3f:8c:80:
                    b6:78:d5:a1:e4:5b:35:b9:22:f0:0b:59:cd:8a:b7:
                    da:e0:fb:4a:2f:4c:db:0b:bd:b1:e2:57:11:8a:81:
                    1e:f4:68:67:d8:6b:6b:00:63:9f:93:3d:9d:c3:85:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:84:29:D3:AB:E3:02:90:9D:F4:02:CE:9F:F3:4A:BB:4C:C8:83:F3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.164.0/22
                IPv6:
                  2804:9564::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274520

    Signature Algorithm: sha256WithRSAEncryption
         28:29:a9:1c:36:2a:2f:59:c5:15:ed:6e:6a:69:56:48:19:50:
         62:61:09:f9:ff:7a:8a:51:b5:d5:da:4b:43:2f:94:d6:7c:30:
         8f:52:6f:64:f7:16:db:0e:5d:30:a4:77:63:1b:6d:41:17:e1:
         d7:77:2d:91:be:b4:2a:da:83:7e:ac:d4:ca:61:1a:cd:d5:03:
         89:64:7e:49:83:e4:f2:9c:ff:28:20:31:eb:e5:a7:10:d9:82:
         83:62:bc:9f:fc:a8:29:1b:6b:92:e4:63:ad:5a:17:c9:6f:8f:
         aa:47:ed:dc:86:4f:c3:07:2f:74:cf:9c:cf:ca:8a:6e:b3:94:
         fd:65:c9:cd:29:d9:4e:7c:64:b6:d4:7a:25:bb:98:b3:92:5a:
         72:96:33:bc:c9:d2:ef:1b:11:01:6e:38:9d:1c:ef:39:3b:81:
         c0:a0:30:bc:70:45:36:9b:af:c1:b3:fc:55:7a:a0:8d:c7:91:
         d3:9f:b0:7f:63:f0:b2:6a:91:06:00:b1:2c:a9:cc:b2:67:1d:
         6a:cc:df:0c:43:cf:7f:95:e4:9b:af:69:24:d0:a8:f2:c6:5f:
         07:53:4f:f2:b6:74:81:e5:d7:dc:9e:88:31:9e:a7:f8:c2:c6:
         22:89:e1:cb:a4:73:6d:df:dc:fb:71:97:f7:2d:de:3a:95:44:
         25:c6:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:28:54 2026 by rpki-client