Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.cer
File:                     4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.cer (raw, json)
Hash identifier:          pPQp2S5FQa/6YepliBz8A0Fs7/O6BXAHRWgtWltTotY=
Subject key identifier:   40:23:BE:6A:DD:87:83:F9:16:0B:49:34:CD:4E:0C:5D:F5:F8:F3:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       679B19B6CD7ED08F812DBCE7ABE69B594DA3DB75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jun 2026 18:00:37 +0000
Certificate not after:    Thu 10 Jun 2027 18:05:37 +0000
Subordinate resources:    AS: 268418
                          IP: 45.160.120.0/22
                          IP: 2804:50e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 11:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9b:19:b6:cd:7e:d0:8f:81:2d:bc:e7:ab:e6:9b:59:4d:a3:db:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 11 18:00:37 2026 GMT
            Not After : Jun 10 18:05:37 2027 GMT
        Subject: CN=4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:47:12:19:2d:7b:d2:8a:94:0e:ca:76:9e:
                    22:98:ed:74:8e:8b:5f:12:81:17:ab:72:fd:43:4e:
                    bc:ca:76:69:8d:27:28:38:4f:1f:81:eb:a7:c4:b5:
                    63:da:07:a6:ff:4c:12:9f:a8:f0:26:71:d1:e9:8e:
                    09:26:bd:83:ac:95:6a:88:0f:05:75:bb:73:2b:04:
                    87:2a:29:29:bb:cc:e3:b9:ed:5f:c1:52:80:8b:a4:
                    25:2b:ff:90:89:e6:b5:c5:e7:e1:83:5c:0d:5a:eb:
                    7a:ff:35:96:10:51:46:96:ee:a5:d0:0b:9f:6f:4c:
                    7b:17:ce:3c:f9:4d:28:f7:4d:5f:d7:96:b0:a1:3b:
                    83:2b:fd:61:52:63:f0:67:75:52:ae:8e:58:e8:0c:
                    4b:3e:71:51:28:81:70:fe:77:d1:87:fe:08:cb:3f:
                    66:dc:ae:d0:3d:2f:85:99:47:1b:b3:a9:ce:3a:a3:
                    c5:e0:f0:25:ac:ce:c6:9d:6d:0f:2d:74:d9:1a:c3:
                    fb:d3:db:7f:de:ac:96:43:48:9d:0b:a2:11:7f:6a:
                    c7:1a:43:29:1a:54:e3:8d:89:96:36:a1:49:59:82:
                    cd:f4:0f:bc:70:14:f8:f6:e1:ae:dd:eb:7d:b1:4b:
                    d7:b8:42:2b:43:67:d8:d8:49:b6:39:38:b4:a3:a8:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:23:BE:6A:DD:87:83:F9:16:0B:49:34:CD:4E:0C:5D:F5:F8:F3:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/4023BE6ADD8783F9160B4934CD4E0C5DF5F8F3B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.120.0/22
                IPv6:
                  2804:50e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268418

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:47:61:21:17:f8:de:39:da:6d:f0:2c:7e:6d:f7:be:8c:
         0a:5f:2c:e9:da:60:98:bc:4b:a7:4d:51:42:9b:40:01:7f:eb:
         eb:fe:3c:8e:b0:3a:a8:61:8a:65:40:05:31:20:f2:d0:fa:47:
         3f:52:67:8b:45:d4:0b:aa:39:b5:06:a6:c7:42:e8:03:8c:8c:
         d7:b2:3d:c4:7f:91:6b:9d:0b:4c:74:f8:62:1a:4b:bc:e5:3f:
         19:76:47:6f:f8:cf:30:16:e9:07:20:8d:5d:85:11:5c:89:c1:
         fa:3d:cb:12:c4:c3:92:bc:fb:d9:91:30:a9:1b:51:7e:cf:fd:
         32:61:c2:f5:65:f3:36:1f:bc:3b:5f:56:b6:c2:32:51:64:62:
         df:aa:e3:98:44:9f:f9:7d:9d:9d:b3:e5:90:79:91:18:8d:6a:
         89:f0:3e:4b:e0:7c:bf:31:11:bc:ff:60:39:9f:7d:9c:0a:ce:
         24:3e:e7:4e:22:0e:7f:e6:17:5c:c0:67:f9:c6:a4:89:6f:02:
         33:12:42:7d:1b:89:43:68:56:d8:54:2e:5e:68:d2:1b:df:d8:
         27:44:24:47:2c:34:43:20:cd:1c:a8:0b:73:40:5c:96:bd:b7:
         3b:16:e3:ac:e7:e0:2c:b0:17:e0:f9:35:c6:7b:07:da:d7:d9:
         cd:66:50:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:42:43 2026 by rpki-client