Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.cer
File:                     ECB433183132CC4AB44E4E77CB4AD589FFC36B64.cer (raw, json)
Hash identifier:          MrHiK+9bq0TsFXjOOiluf3cn9b5G+8UpLgtv6INXk5s=
Subject key identifier:   EC:B4:33:18:31:32:CC:4A:B4:4E:4E:77:CB:4A:D5:89:FF:C3:6B:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F5432690F0F91DA5DD1C2CA54B00601ADA1D788
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Mar 2026 19:39:38 +0000
Certificate not after:    Wed 24 Mar 2027 19:44:38 +0000
Subordinate resources:    AS: 267512
                          IP: 201.182.116.0/22
                          IP: 2804:429c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:54:32:69:0f:0f:91:da:5d:d1:c2:ca:54:b0:06:01:ad:a1:d7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 19:39:38 2026 GMT
            Not After : Mar 24 19:44:38 2027 GMT
        Subject: CN=ECB433183132CC4AB44E4E77CB4AD589FFC36B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:4e:a1:03:82:12:18:7d:3d:7c:cd:ef:23:
                    77:12:1e:65:71:fb:49:8e:1f:03:82:54:b0:40:35:
                    e5:37:a3:c1:60:0b:12:ce:6b:73:02:66:1c:1d:d0:
                    38:f4:2f:30:58:9e:d2:62:c7:5d:b2:66:49:c2:99:
                    d1:56:cb:64:b3:bc:53:2d:5f:f7:da:a6:03:a3:7c:
                    6b:86:14:42:bd:c0:92:05:8c:19:25:b3:05:f7:72:
                    40:b3:4d:fc:d3:c0:fd:5a:e0:51:8d:2e:c6:1c:40:
                    4d:64:e3:22:7e:19:54:c9:6e:ef:23:c0:7b:ff:b8:
                    ac:6f:24:98:78:45:06:67:5b:15:c6:38:a9:d9:37:
                    50:3f:b9:ab:88:89:be:5d:21:35:a8:f0:f6:a4:d3:
                    e2:45:c3:05:31:a6:32:2c:31:d2:c1:00:93:33:c9:
                    e7:6e:2d:42:d8:b8:c8:96:1e:fa:91:40:e3:7a:0e:
                    67:a7:12:0a:74:7d:07:06:ab:27:3c:25:16:0f:d7:
                    96:1c:f8:6a:a1:ba:ca:15:e4:bf:56:d7:0f:07:ac:
                    74:18:20:0c:25:dc:6c:f5:1b:e2:81:35:e5:b8:dd:
                    e7:eb:16:51:bc:05:00:50:d6:0a:76:89:cf:b4:df:
                    d0:2e:d4:7b:68:cf:e3:76:d1:88:68:dd:30:37:9e:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:B4:33:18:31:32:CC:4A:B4:4E:4E:77:CB:4A:D5:89:FF:C3:6B:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.116.0/22
                IPv6:
                  2804:429c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267512

    Signature Algorithm: sha256WithRSAEncryption
         3d:22:81:f9:47:11:14:94:6d:78:69:e3:50:30:c0:8e:d6:85:
         5e:4f:07:a2:cc:99:a0:5c:ca:be:b8:64:a1:db:55:6c:6e:01:
         5a:4b:17:79:36:36:9f:11:84:62:09:8e:28:19:cc:de:5b:0b:
         c4:f0:39:6d:af:5b:45:28:cb:3a:49:8d:ad:a8:70:b0:a8:64:
         47:e8:60:43:1b:41:c4:eb:63:8c:97:d8:28:f1:26:a1:f1:61:
         d6:ad:bf:cd:4b:9e:69:44:7c:76:24:d0:32:23:31:a9:77:e1:
         9f:a3:21:92:84:b8:fe:d7:eb:c4:be:e2:3b:7c:b3:6d:90:0c:
         79:a9:7f:4d:c7:43:ea:35:a5:22:84:c1:2f:eb:15:f4:71:54:
         5f:88:c1:49:d1:42:f5:0a:8c:de:32:8f:1b:d8:c3:4f:af:e6:
         12:e8:d2:21:a2:39:16:4c:09:d0:4b:1c:2f:a8:a7:b3:53:ec:
         84:84:7a:8e:9d:3b:d7:5f:63:4f:a1:05:ae:b9:be:94:92:3a:
         d0:0e:dd:e2:c8:a3:5c:fb:ad:26:01:2e:40:49:c2:b9:91:6e:
         a0:ff:76:33:0e:10:33:fa:f6:6b:68:1e:1f:13:68:09:94:5e:
         01:9b:85:f2:50:15:b2:3d:e5:19:eb:4f:24:5f:a1:43:a5:0d:
         5b:86:8e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:56:14 2026 by rpki-client