Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F941A54E9C2DEE49C72D90951902E8AD2E877566.cer
File:                     F941A54E9C2DEE49C72D90951902E8AD2E877566.cer (raw, json)
Hash identifier:          fVz3Em7Ly06ccVAQ1ZOgjRDEbY0lFW9SDvdd06UuFpY=
Subject key identifier:   F9:41:A5:4E:9C:2D:EE:49:C7:2D:90:95:19:02:E8:AD:2E:87:75:66
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2325422154B51176E5562FBAB91D68790E9674BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/F941A54E9C2DEE49C72D90951902E8AD2E877566.mft
caRepository:             rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Apr 2026 18:12:18 +0000
Certificate not after:    Thu 01 Apr 2027 18:17:18 +0000
Subordinate resources:    AS: 262675
                          IP: 131.255.52.0/22
                          IP: 186.233.228.0/22
                          IP: 190.111.128.0/22
                          IP: 2804:a44::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:25:42:21:54:b5:11:76:e5:56:2f:ba:b9:1d:68:79:0e:96:74:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  2 18:12:18 2026 GMT
            Not After : Apr  1 18:17:18 2027 GMT
        Subject: CN=F941A54E9C2DEE49C72D90951902E8AD2E877566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:30:00:b6:e3:30:ea:ad:f7:e9:e1:3f:f3:
                    de:a8:61:a1:66:b1:94:5f:d7:81:e7:fd:d2:10:51:
                    ee:81:bc:22:68:df:85:02:8c:9f:d8:5c:bc:96:a0:
                    87:39:b0:87:b9:9d:81:88:6d:a1:dd:74:ab:ac:a5:
                    52:f3:4c:98:38:b2:b3:1b:1f:6a:71:97:db:67:ce:
                    e6:0c:9f:dc:bb:cc:4d:b8:b2:f1:67:87:17:69:da:
                    32:29:ab:a0:d0:33:e0:9a:37:81:1b:4b:7b:2b:3e:
                    1b:45:bc:40:67:4e:6e:bc:ba:43:ff:c5:e0:6a:32:
                    a7:d3:75:38:cd:5f:a1:50:50:14:20:02:5e:f2:1d:
                    92:83:7d:ca:98:6d:ba:45:e1:b3:bd:af:22:a4:e5:
                    79:65:b7:6e:e0:2b:d4:ae:aa:8b:7e:eb:c5:a8:52:
                    ed:4f:95:1a:0a:93:2d:63:21:4e:3c:ac:8e:44:5a:
                    8c:dc:3c:44:51:34:b9:6a:e1:d2:e7:9e:b4:fe:8e:
                    16:ee:56:1a:be:8b:66:6e:91:57:e5:f2:23:4d:a6:
                    aa:aa:b2:c7:fe:6d:ad:c2:16:55:12:6f:c0:6b:eb:
                    11:3f:30:02:13:28:7a:8a:90:1c:ec:91:90:8c:9f:
                    17:f3:1a:cf:19:9b:5e:8b:ab:e6:e0:41:7b:6f:a5:
                    1a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:41:A5:4E:9C:2D:EE:49:C7:2D:90:95:19:02:E8:AD:2E:87:75:66
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/F941A54E9C2DEE49C72D90951902E8AD2E877566.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.52.0/22
                  186.233.228.0/22
                  190.111.128.0/22
                IPv6:
                  2804:a44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262675

    Signature Algorithm: sha256WithRSAEncryption
         5e:87:ae:83:79:ff:d7:f8:f3:4e:0b:71:74:6a:7f:f1:52:b6:
         5f:a4:88:c9:5c:f2:cd:11:83:2b:b5:c4:ec:06:9c:9b:3e:9a:
         27:4b:e3:1d:d9:b5:66:02:40:cb:c1:fd:03:21:35:e2:bb:d1:
         e9:6d:37:12:75:e5:0d:d5:01:45:ca:a6:97:13:48:8a:49:56:
         b9:96:45:ed:ac:f4:2b:b0:ca:2a:e2:6c:4d:11:4c:a3:81:9c:
         38:ba:23:13:d0:b9:8a:44:21:78:d4:30:70:ba:13:87:14:2a:
         8d:ba:bc:71:7e:49:9b:48:cd:11:02:d4:9e:ef:a5:e0:0c:ab:
         82:9f:c1:31:ab:36:6d:f3:55:e5:c2:9c:f1:90:c0:8f:e5:ea:
         9c:79:6b:dc:bd:74:0a:76:6f:76:3a:83:c9:d1:8b:85:72:e4:
         7f:c3:ae:0c:75:af:b4:30:26:b6:f4:f0:7f:a4:3f:dd:8a:05:
         d4:cb:e7:d2:13:b9:bc:13:46:ba:88:04:c1:e0:6a:0f:87:f0:
         48:2d:66:a4:12:5e:f6:cf:a2:05:11:44:35:98:1e:da:f6:8e:
         d7:37:f9:18:05:54:32:e8:63:70:ca:d5:b2:2a:53:f4:51:13:
         de:6a:f5:2b:09:3e:3d:41:bc:d6:a1:c4:ea:ad:c8:f8:c3:19:
         82:f3:db:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 11:00:21 2026 by rpki-client