Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F962DD578111D378F08A3E9399E25F341B4EA747.cer
File:                     F962DD578111D378F08A3E9399E25F341B4EA747.cer (raw, json)
Hash identifier:          6KTKAzf+pJ0YqQmJDGExdl45S6dn25Yt9mLBkucHu5w=
Subject key identifier:   F9:62:DD:57:81:11:D3:78:F0:8A:3E:93:99:E2:5F:34:1B:4E:A7:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       718604DD54E2AE1F5CDCEE796228B10CF534CAE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/F962DD578111D378F08A3E9399E25F341B4EA747.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Mar 2026 20:16:30 +0000
Certificate not after:    Thu 11 Mar 2027 20:21:30 +0000
Subordinate resources:    AS: 266021
                          IP: 170.245.36.0/22
                          IP: 2804:3940::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:86:04:dd:54:e2:ae:1f:5c:dc:ee:79:62:28:b1:0c:f5:34:ca:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 12 20:16:30 2026 GMT
            Not After : Mar 11 20:21:30 2027 GMT
        Subject: CN=F962DD578111D378F08A3E9399E25F341B4EA747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:a0:cb:bb:6d:d7:67:0d:5e:18:0f:cf:20:
                    14:d5:48:4f:69:9e:64:a4:8a:cd:fd:26:b0:74:6c:
                    29:59:42:06:ca:a4:15:e5:7a:ab:fc:f1:11:c9:74:
                    ed:8f:9e:0a:4d:82:9d:5e:ff:ac:33:f9:61:d5:fb:
                    7f:89:b8:1a:36:58:01:26:eb:a6:a6:44:14:18:9a:
                    d3:8d:0c:73:cd:d8:42:53:3b:47:6c:70:b6:a5:e5:
                    96:5c:fa:76:08:f9:00:19:e4:45:cf:6c:97:79:e6:
                    1f:17:68:0a:58:b6:8e:73:fc:bb:d9:b4:25:cd:11:
                    80:42:11:51:09:95:79:88:40:cc:45:bf:20:45:2e:
                    10:d8:b8:24:5c:90:9f:10:a0:77:aa:33:9e:ac:27:
                    2c:6e:8b:84:ab:b5:ad:58:9b:62:cc:2c:0f:bd:65:
                    a6:d2:a2:a6:a8:97:52:59:1c:71:bb:7c:3d:db:8f:
                    bd:b6:5c:d4:5a:55:94:c6:91:1b:12:09:78:cc:7b:
                    2f:33:3a:3e:03:6f:cc:69:f2:fb:62:50:3c:65:7b:
                    af:c4:a2:2f:c8:5e:64:76:89:86:50:52:a3:11:c3:
                    2b:a6:57:b8:70:0e:39:a9:ac:14:54:65:b6:b5:5a:
                    23:c3:fd:0f:14:54:ea:03:64:d3:df:e9:30:8d:23:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:62:DD:57:81:11:D3:78:F0:8A:3E:93:99:E2:5F:34:1B:4E:A7:47
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/F962DD578111D378F08A3E9399E25F341B4EA747.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/22
                IPv6:
                  2804:3940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266021

    Signature Algorithm: sha256WithRSAEncryption
         67:0a:c7:7d:37:55:f7:d4:46:94:8b:7d:71:1c:b1:0a:9c:ac:
         87:15:ff:f5:76:a1:f4:2b:f2:64:8c:f2:46:f1:00:22:36:84:
         38:b3:08:b6:6a:49:e5:85:8f:c4:c4:cf:f9:15:a3:8e:6b:4f:
         10:d8:08:78:3b:9e:1f:93:d7:b8:d4:27:bb:52:07:27:5e:3e:
         ca:b3:e4:f8:c4:09:64:02:30:ed:a0:5d:59:6f:62:e6:b9:9a:
         e6:a1:30:56:52:7a:f0:45:f9:61:cd:d6:4d:9d:ca:95:0d:b2:
         03:a2:b1:d9:82:05:8b:f6:47:27:42:23:8b:12:e1:5f:91:ed:
         9f:d0:f2:92:55:df:73:b1:34:72:ec:49:cc:55:ad:26:6f:e0:
         50:45:9e:5b:85:fd:75:a5:28:f1:8a:87:e0:49:e1:97:bf:5f:
         6f:be:8d:d9:59:a0:75:20:93:3f:9a:c0:0b:c2:39:b7:13:6d:
         68:c0:58:4b:a0:3d:cc:63:55:c4:32:1e:80:9e:f6:2c:1b:4b:
         dc:f1:f2:e3:d0:17:05:65:e2:37:66:fb:f5:e3:58:f7:55:22:
         4a:d1:0a:33:0b:4c:70:51:9c:a0:e3:21:9d:03:46:29:56:8e:
         2a:ca:94:b1:3e:ac:a0:e2:98:d8:ba:43:bf:40:1e:3f:de:72:
         24:f5:97:fb
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUcYYE3VTirh9c3O55YiixDPU0yuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAzMTIyMDE2MzBaFw0yNzAzMTEyMDIxMzBaMDMxMTAvBgNV
BAMTKEY5NjJERDU3ODExMUQzNzhGMDhBM0U5Mzk5RTI1RjM0MUI0RUE3NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sKDLu23XZw1eGA/PIBTVSE9p
nmSkis39JrB0bClZQgbKpBXleqv88RHJdO2PngpNgp1e/6wz+WHV+3+JuBo2WAEm
66amRBQYmtONDHPN2EJTO0dscLal5ZZc+nYI+QAZ5EXPbJd55h8XaApYto5z/LvZ
tCXNEYBCEVEJlXmIQMxFvyBFLhDYuCRckJ8QoHeqM56sJyxui4Srta1Ym2LMLA+9
ZabSoqaol1JZHHG7fD3bj722XNRaVZTGkRsSCXjMey8zOj4Db8xp8vtiUDxle6/E
oi/IXmR2iYZQUqMRwyumV7hwDjmprBRUZba1WiPD/Q8UVOoDZNPf6TCNIzo/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5Yt1XgRHTePCK
PpOZ4l80G06nRzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUFD
WTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXlaNWEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FB
Q1k2MlhxajRIbk5YdHZHMndmVzRxWk0zQU5zbzdTVmo5TVJMWTV5WjVhLzAvRjk2
MkRENTc4MTExRDM3OEYwOEEzRTkzOTlFMjVGMzQxQjRFQTc0Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqvUkMA0EAgACMAcDBQAoBDlAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPJTANBgkqhkiG9w0BAQsFAAOCAQEAZwrHfTdV99RGlIt9
cRyxCpyshxX/9Xah9CvyZIzyRvEAIjaEOLMItmpJ5YWPxMTP+RWjjmtPENgIeDue
H5PXuNQnu1IHJ14+yrPk+MQJZAIw7aBdWW9i5rma5qEwVlJ68EX5Yc3WTZ3KlQ2y
A6Kx2YIFi/ZHJ0IjixLhX5Htn9DyklXfc7E0cuxJzFWtJm/gUEWeW4X9daUo8YqH
4Enhl79fb76N2VmgdSCTP5rAC8I5txNtaMBYS6A9zGNVxDIegJ72LBtL3PHy49AX
BWXiN2b79eNY91UiStEKMwtMcFGcoOMhnQNGKVaOKsqUsT6soOKY2LpDv0AeP95y
JPWX+w==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:54:36 2026 by rpki-client