Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
File:                     126CBB2E01C90415CAD8020379862F937CB88B35.cer (raw, json)
Hash identifier:          wCAkx0+8VjOoEC65Gg4IH3JQui3UAnUdztIqIkrrpNY=
Subject key identifier:   12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A2E98E6A2172F3D0B0AD36CF223F6D8F4F09B8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Jul 2025 14:16:00 +0000
Certificate not after:    Thu 23 Jul 2026 14:21:00 +0000
Subordinate resources:    AS: 266028
                          IP: 170.245.220.0/22
                          IP: 2804:3964::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2e:98:e6:a2:17:2f:3d:0b:0a:d3:6c:f2:23:f6:d8:f4:f0:9b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 24 14:16:00 2025 GMT
            Not After : Jul 23 14:21:00 2026 GMT
        Subject: CN=126CBB2E01C90415CAD8020379862F937CB88B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:76:ba:a3:a8:77:ec:ae:c8:c5:27:16:6b:
                    e3:81:24:62:0a:ac:80:78:f8:45:87:22:bc:2f:fb:
                    7f:c5:13:7d:54:1f:b5:31:ba:ab:1c:14:96:ca:82:
                    6a:1f:4f:ba:2f:7d:20:25:65:b2:f0:28:60:b8:e9:
                    88:dc:9a:31:72:c3:45:7a:f8:12:ce:0f:63:60:4d:
                    67:46:1b:79:95:15:e5:b9:b2:0e:ff:50:b5:e2:86:
                    01:79:1e:f6:ed:a5:eb:a9:f3:77:61:7d:b0:e5:85:
                    78:dd:b8:6e:79:99:13:91:11:e9:fd:7d:5c:d9:be:
                    05:d9:e1:42:d9:5c:b5:58:88:64:63:88:b2:fe:46:
                    00:70:9f:56:5c:45:e6:e4:40:a4:58:d4:b5:ee:95:
                    86:82:4e:2c:e5:e6:3b:d9:cd:e6:4a:09:c1:74:08:
                    2a:d6:5d:9e:ac:b9:09:e4:10:ce:45:9f:69:32:f0:
                    28:10:8c:80:89:35:ab:02:55:01:3f:4e:33:c7:38:
                    cf:26:3c:b0:a4:41:32:c8:89:cd:83:51:14:54:45:
                    76:4f:53:30:98:0d:84:eb:6c:3e:06:27:5b:81:ee:
                    ed:8d:63:2f:76:2e:8e:e9:b3:54:33:77:31:6b:ee:
                    e0:d6:88:f1:21:4b:99:c3:33:df:b2:7a:61:2f:4b:
                    e3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.220.0/22
                IPv6:
                  2804:3964::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266028

    Signature Algorithm: sha256WithRSAEncryption
         6f:66:7c:70:18:97:8c:58:5e:15:1b:32:40:95:81:7e:44:18:
         ba:d8:d2:ea:2e:b3:9c:64:86:35:b9:47:d7:e7:b0:28:c9:65:
         67:ca:fe:43:08:7d:f5:83:dd:22:db:79:0f:27:8b:20:8a:0a:
         e6:85:f5:72:eb:7a:3d:1a:61:3d:d5:47:85:c2:14:63:4e:64:
         22:cb:aa:08:82:36:ee:aa:e8:8e:ae:47:58:1a:10:7f:95:0c:
         b0:1e:ad:da:f7:c6:b1:87:fa:69:be:b7:a6:a1:d9:a2:44:07:
         fb:63:84:24:d2:55:8f:bf:0f:ef:59:57:a3:a1:de:06:0f:0f:
         6d:3b:a9:a2:1d:64:01:18:36:4a:3e:60:d9:b6:86:91:67:4b:
         fc:35:a9:74:d6:26:0e:42:9c:80:7f:13:9c:cf:88:85:d3:8d:
         af:ef:c2:86:4f:90:0b:b4:38:bf:2f:f6:03:06:65:10:0b:3e:
         89:56:8b:ec:c9:f6:2d:aa:3b:09:67:57:cf:30:58:70:a0:03:
         21:93:d4:b3:b9:36:57:f5:6f:2e:b7:0c:6d:66:8e:18:af:6a:
         3a:71:51:b4:0b:09:85:88:75:a2:a7:99:13:fb:29:e6:71:6e:
         1a:1c:92:00:a0:5a:2f:8e:f5:78:a7:98:5a:30:0d:f6:e6:cc:
         d1:32:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:40:34 2025 by rpki-client