Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.cer
File:                     ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.cer (raw, json)
Hash identifier:          3Ta5BdQYxJekKeiVNAdG+kjwGPKOnWHnkPZDiQm0teE=
Subject key identifier:   EC:D4:72:53:24:FB:C5:7D:FE:50:54:66:2B:CC:9E:3F:A9:BA:D6:60
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D62E9916A751A30EEC52EC297111EBC0D4B874E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Apr 2026 01:13:07 +0000
Certificate not after:    Wed 28 Apr 2027 01:18:07 +0000
Subordinate resources:    AS: 52772
                          IP: 177.39.156.0/22
                          IP: 2804:259c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:62:e9:91:6a:75:1a:30:ee:c5:2e:c2:97:11:1e:bc:0d:4b:87:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 29 01:13:07 2026 GMT
            Not After : Apr 28 01:18:07 2027 GMT
        Subject: CN=ECD4725324FBC57DFE5054662BCC9E3FA9BAD660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:45:f0:a5:45:cd:8b:3e:5c:cb:55:2c:05:
                    18:74:8d:ee:38:cf:a7:a6:35:61:a7:0a:54:67:f0:
                    44:ac:07:d2:98:1a:65:39:28:43:94:f4:8c:9b:e2:
                    4b:5c:f6:2c:51:62:e8:36:8b:8a:22:7d:a2:ae:71:
                    8a:fa:0c:5c:cb:82:ff:42:d8:28:60:fc:c8:9e:ad:
                    46:60:4e:75:ce:9e:5f:1a:e1:ba:2a:74:94:30:1e:
                    ab:bc:9b:16:72:8f:a4:20:76:50:58:48:65:a3:e0:
                    c5:69:92:b4:e3:a7:87:b9:62:c7:af:76:d0:1c:9b:
                    13:59:bd:66:38:84:ac:4f:14:b2:4d:63:39:c7:60:
                    16:aa:44:2c:3c:33:ca:4c:72:a9:7c:94:c0:32:46:
                    e5:34:0a:b7:34:1b:a2:ea:20:57:53:c3:3e:0f:93:
                    a3:0a:ee:d3:6d:d7:5b:07:c1:9c:f0:69:a1:0e:ca:
                    fb:1b:91:39:a1:79:f6:3e:b0:8e:3f:bb:d4:cd:a9:
                    2e:64:e9:36:3e:1e:3a:54:fc:44:bf:4a:bf:3f:e0:
                    25:2f:4c:7c:ac:3a:18:bb:72:65:2a:72:83:1c:e6:
                    41:77:32:cf:f5:f2:66:d3:fd:9f:4c:89:6a:26:0f:
                    94:b1:67:c6:dc:a5:5c:50:be:3d:7d:04:74:09:dd:
                    a6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:D4:72:53:24:FB:C5:7D:FE:50:54:66:2B:CC:9E:3F:A9:BA:D6:60
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22
                IPv6:
                  2804:259c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52772

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:f0:b0:d7:fc:d7:ab:73:e5:1c:d8:11:b3:94:14:59:ee:
         b4:9d:e9:ab:49:8e:fb:d6:f5:66:8f:85:5f:ee:7e:4a:c1:c0:
         60:d0:f2:01:d3:5c:81:d4:26:20:1e:b5:cb:7a:99:48:7a:00:
         5b:50:8c:63:80:f9:a4:77:14:12:18:3f:ea:7a:15:f1:48:36:
         2d:cc:ed:fb:58:c1:f4:f1:32:49:d7:ae:45:4d:16:a7:9b:bf:
         d7:32:ba:eb:ca:73:f6:89:95:32:bf:02:6e:33:66:d3:4f:f1:
         b9:93:22:10:bf:25:1a:3f:98:2f:bc:f8:f3:18:76:15:ce:f6:
         79:c8:e1:db:af:08:ff:83:ec:72:57:90:74:e5:b7:66:bf:58:
         ab:49:6d:bc:9c:74:e6:bd:24:08:55:fa:61:70:a0:26:1e:aa:
         3b:25:f1:9a:f0:09:20:d0:4a:08:22:dc:ff:c4:32:2f:d7:42:
         27:4a:dd:4e:89:43:b7:0b:77:e6:aa:0c:bd:c2:28:26:73:23:
         b0:ed:5d:0d:05:68:d2:7c:15:9d:b7:72:c5:5f:88:67:a2:6b:
         aa:cf:73:14:2f:6b:d9:40:05:41:9b:a3:00:17:44:e4:92:57:
         16:5e:aa:31:42:e7:af:1b:6a:b2:30:d6:a0:4a:3c:97:36:0e:
         33:c4:47:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:41:41 2026 by rpki-client