Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
File:                     9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer (raw, json)
Hash identifier:          6p82sR/L/mrqHsK/KBpsORjt51blrTzoKfLhpsfYh4c=
Subject key identifier:   9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3CFE339BE629E00DA611C07F2785AEE057740102
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Apr 2026 13:36:26 +0000
Certificate not after:    Wed 07 Apr 2027 13:41:26 +0000
Subordinate resources:    AS: 266140
                          IP: 45.6.164.0/22
                          IP: 2804:3b4c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fe:33:9b:e6:29:e0:0d:a6:11:c0:7f:27:85:ae:e0:57:74:01:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  8 13:36:26 2026 GMT
            Not After : Apr  7 13:41:26 2027 GMT
        Subject: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:bc:31:f9:44:5b:c5:6a:17:e7:0d:9d:0f:
                    ab:13:c6:b6:ad:ac:aa:c3:fe:ed:57:94:d8:ed:1e:
                    05:8d:5d:37:b3:03:6b:ae:eb:9c:96:ae:c9:31:e4:
                    9b:e6:53:08:d4:bb:ed:50:fa:a1:12:51:a4:0f:77:
                    d8:48:6f:be:a6:5f:42:cb:21:08:0d:37:92:82:98:
                    38:b2:25:86:35:d9:f2:5c:95:b6:01:16:95:9d:b0:
                    03:7a:0c:77:8d:c6:62:e2:b1:22:99:d8:9e:32:64:
                    d2:06:bf:0f:9f:ba:d0:ca:2f:c8:44:93:ef:a8:87:
                    2f:af:90:d9:f7:5d:24:29:6b:75:fd:fe:7e:ae:79:
                    b6:d9:39:f2:cc:83:58:61:62:f6:a2:80:8a:41:7e:
                    50:db:0c:7d:13:4b:09:a3:f2:dc:1a:57:76:02:13:
                    c7:ab:87:f7:94:62:0a:0a:37:5f:d8:d6:f4:30:ee:
                    a0:bd:9f:f3:07:46:63:8a:89:44:17:7c:c9:84:93:
                    42:9d:20:a3:9e:0b:ed:64:a0:5c:2d:48:9a:94:a6:
                    c3:32:d8:35:b3:bc:1c:2f:8e:e2:09:f9:11:22:af:
                    c0:9f:ce:f5:27:8b:9c:30:d3:7e:a4:1e:cd:13:5d:
                    c3:68:2f:60:5c:56:62:fc:66:95:91:83:55:95:4a:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.164.0/22
                IPv6:
                  2804:3b4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266140

    Signature Algorithm: sha256WithRSAEncryption
         37:bf:ce:fb:14:45:4f:d6:f1:7f:59:53:71:8b:e1:28:2b:bd:
         0e:4b:38:e9:0d:fa:60:41:74:70:bd:dd:ba:af:fa:70:d1:12:
         de:78:74:6d:5d:7a:62:60:85:35:0a:62:c9:35:5e:85:f7:35:
         98:0e:e2:5e:46:1c:bc:c9:a4:97:f8:b6:d7:43:38:9d:99:73:
         cf:c8:2d:ee:52:e4:85:5a:ed:71:52:d1:b4:8e:48:e7:bd:19:
         38:0b:d0:1a:22:00:8d:74:2b:c7:a2:cd:a6:c6:ab:49:9f:84:
         c9:cd:52:d1:45:d6:83:87:5d:4e:71:64:d5:65:ed:06:28:54:
         7d:34:22:d6:d1:3d:6a:c4:60:f5:41:3a:3b:0b:ac:88:bd:be:
         e1:e7:93:0c:10:ab:95:e9:ae:e7:39:dd:fc:d5:12:3a:09:4d:
         a1:fb:e7:63:10:60:84:03:51:08:92:e4:20:de:00:4e:6b:e6:
         5f:e4:54:65:b9:91:be:e1:14:5e:6c:c2:ee:27:be:d8:6e:91:
         63:d7:59:54:8e:b5:b3:02:ec:56:25:57:79:bd:04:34:8a:59:
         54:9a:fd:ff:b4:cf:18:91:b5:cf:bf:83:55:f5:90:fd:2b:f6:
         58:b5:8a:99:17:62:02:39:55:ac:57:67:93:a0:b9:7b:f5:0d:
         31:4d:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:28:19 2026 by rpki-client