Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer
File:                     624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer (raw, json)
Hash identifier:          RUtHhNv07K9fqGON0oqsmYDyVApypihe/hp74VuqC9c=
Subject key identifier:   62:4F:04:68:FC:71:4C:C3:7A:D7:B5:31:FC:42:ED:69:C2:5A:DF:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1250B6FD0F1ACC98B3DCC23AE86C4066194C7401
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Apr 2026 15:40:42 +0000
Certificate not after:    Mon 05 Apr 2027 15:45:42 +0000
Subordinate resources:    AS: 11432
                          IP: 200.155.128.0/18
                          IP: 200.170.192.0/18
                          IP: 200.194.248.0/21
                          IP: 200.201.128.0/19
                          IP: 2804:138::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 13:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:50:b6:fd:0f:1a:cc:98:b3:dc:c2:3a:e8:6c:40:66:19:4c:74:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  6 15:40:42 2026 GMT
            Not After : Apr  5 15:45:42 2027 GMT
        Subject: CN=624F0468FC714CC37AD7B531FC42ED69C25ADF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:80:41:8e:cf:1a:3f:bc:19:0c:1a:e2:7f:
                    bd:00:81:57:03:0c:0c:87:68:20:0a:df:fc:0b:21:
                    18:c7:22:39:21:14:6a:3e:c9:80:06:35:25:a9:24:
                    e0:4c:d2:71:f0:93:dc:f8:eb:77:4d:e6:24:b9:70:
                    38:f7:60:13:0c:26:6d:15:6b:ff:4d:35:02:e2:79:
                    3c:46:45:51:90:45:fd:88:37:52:ad:7f:97:36:f6:
                    e6:5e:f3:b8:24:48:95:32:e7:19:7d:fd:13:0c:57:
                    79:57:df:f5:c2:ab:7c:6e:21:34:5b:4a:80:9d:64:
                    3a:8d:68:4a:c4:d6:a1:e2:29:db:73:fa:3e:df:b4:
                    f0:e6:ee:16:ad:63:3c:d9:a8:8c:b0:c8:07:f2:02:
                    b7:2b:32:a8:51:ff:7c:e8:73:0c:11:82:99:87:8d:
                    78:8a:ce:46:52:56:39:b1:04:1d:7d:d4:c3:b6:fe:
                    46:be:c9:ed:31:43:83:78:ab:7c:b1:5b:68:bc:10:
                    6d:b7:36:17:13:cb:42:48:be:d1:7d:f4:0f:ed:d6:
                    49:cc:63:b3:06:87:27:c3:e5:cf:8d:22:c2:60:e0:
                    8c:13:28:cf:66:87:ca:fb:17:82:bf:ae:1d:be:26:
                    d3:68:e8:53:52:d5:ee:02:55:f9:82:6e:17:c2:2a:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:4F:04:68:FC:71:4C:C3:7A:D7:B5:31:FC:42:ED:69:C2:5A:DF:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18
                  200.170.192.0/18
                  200.194.248.0/21
                  200.201.128.0/19
                IPv6:
                  2804:138::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11432

    Signature Algorithm: sha256WithRSAEncryption
         d4:96:ba:71:3e:2f:c6:12:19:48:44:47:38:e8:60:cc:9c:b6:
         e9:1c:af:11:85:8c:a3:0c:1a:a6:5f:94:2e:d0:49:d1:f4:e3:
         63:31:85:80:aa:63:bc:c0:38:d0:9f:d9:65:e1:e2:00:96:bb:
         58:b4:76:7f:bf:d9:02:bb:82:f6:e8:fd:88:20:13:51:0c:fc:
         81:8b:6a:cd:21:29:3f:8b:74:f9:fd:8e:96:15:ba:d4:87:ef:
         d2:d3:19:c5:1e:b7:f6:85:87:10:88:59:b7:b8:db:a3:79:b6:
         bd:f8:0f:73:f9:c1:31:52:f2:3a:e6:6b:9f:6d:9c:39:61:39:
         44:76:6f:40:c1:a4:68:8f:dd:a1:6d:67:62:f8:db:da:c4:db:
         7f:3e:cf:f6:35:aa:a6:94:6f:fb:72:ea:d9:e7:71:2c:91:53:
         b3:97:78:20:b1:7a:15:24:94:8a:5a:25:58:26:7c:dd:70:20:
         0c:16:8b:09:2a:22:f1:72:fd:7c:d5:d4:5a:96:0c:a0:7d:86:
         c6:3a:94:6b:44:91:8c:11:dd:89:8a:d4:88:37:82:1f:f6:d6:
         bf:5b:97:ef:3a:0e:0d:27:9d:2d:31:7b:eb:65:58:33:0e:0d:
         e0:38:a2:e0:95:06:e3:2d:1f:ce:5a:1e:e6:43:a0:99:e3:6c:
         f4:1e:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:16 2026 by rpki-client