Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F976CD824C8D193A1DDC32222B9CE1F619152F24.cer
File:                     F976CD824C8D193A1DDC32222B9CE1F619152F24.cer (raw, json)
Hash identifier:          jK3oPXZL7vjGCh+mh5LOp+qXRKFuZyUvvsPncaMlhNc=
Subject key identifier:   F9:76:CD:82:4C:8D:19:3A:1D:DC:32:22:2B:9C:E1:F6:19:15:2F:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E8C33D2E6E6ED1ED4475EDD986F03861F7D0207
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Apr 2026 01:36:19 +0000
Certificate not after:    Thu 01 Apr 2027 01:41:19 +0000
Subordinate resources:    AS: 264278
                          IP: 138.121.48.0/22
                          IP: 2804:2564::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8c:33:d2:e6:e6:ed:1e:d4:47:5e:dd:98:6f:03:86:1f:7d:02:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  2 01:36:19 2026 GMT
            Not After : Apr  1 01:41:19 2027 GMT
        Subject: CN=F976CD824C8D193A1DDC32222B9CE1F619152F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:48:a0:11:45:c9:e1:5a:3e:68:80:a1:c1:
                    1c:c6:70:5a:fd:d3:ed:6b:d8:da:c6:31:fc:6d:b3:
                    03:46:2f:3d:2b:3c:dc:0a:7d:0a:00:5f:51:d3:36:
                    6e:e2:ac:47:10:45:d2:cd:3e:41:a9:96:11:24:03:
                    ef:9c:ec:77:37:97:6b:9d:fa:5e:43:63:de:b5:1f:
                    cf:64:d0:68:25:19:ea:80:b8:d5:28:34:2e:61:8b:
                    16:40:68:4e:a3:c3:19:ea:90:c2:41:ed:c3:ef:9d:
                    e4:51:6c:47:7a:ef:72:f5:b7:31:7f:fa:30:1a:44:
                    d0:73:f5:a6:12:a2:f1:dd:9a:1b:96:6f:b6:eb:7d:
                    bb:5c:1b:ba:df:e7:43:a2:92:51:94:b0:ec:cb:aa:
                    33:3c:1b:01:6f:29:c2:56:8e:50:2a:bf:b3:d3:7a:
                    70:94:60:1f:13:86:06:ef:c4:32:9a:de:a6:13:d7:
                    c5:0a:d1:81:9e:f0:67:d8:f9:23:7f:b9:b2:3a:85:
                    0f:eb:23:a6:bb:b9:c6:9a:b3:ad:cb:bb:f1:c0:dd:
                    40:83:dc:1a:7d:b5:ae:2c:02:f8:77:7c:11:15:03:
                    e7:65:94:50:a6:54:b0:83:49:a1:5b:3a:54:78:bd:
                    59:54:4a:15:e4:81:4c:b7:00:19:fe:ab:0b:b3:da:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:76:CD:82:4C:8D:19:3A:1D:DC:32:22:2B:9C:E1:F6:19:15:2F:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.48.0/22
                IPv6:
                  2804:2564::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264278

    Signature Algorithm: sha256WithRSAEncryption
         0f:8d:dc:04:db:7e:8f:fa:bf:a4:9f:de:4b:71:83:75:6f:32:
         8f:e5:a9:93:32:b5:8f:70:56:04:f2:0c:6c:7e:7c:0a:a3:bc:
         a0:6c:ae:11:09:36:0c:a0:76:09:c9:db:a7:57:aa:84:0e:00:
         b9:ca:0e:50:0a:85:7a:aa:f3:4f:f0:85:58:a1:33:7c:bb:f5:
         77:d1:f7:72:bf:25:5b:e1:04:5c:6a:f1:4d:87:93:a2:e7:84:
         e3:c0:4d:d5:b2:63:61:f7:f2:3d:d5:06:de:43:ae:10:6e:94:
         88:7a:03:ff:87:dd:bb:97:fb:c9:20:0a:0c:06:83:56:d4:ee:
         20:d5:fe:74:16:0e:87:b6:b3:da:b9:84:45:e9:b2:c0:16:ac:
         e9:70:b6:24:f2:15:a6:69:e3:be:a1:21:bf:52:cc:b2:2c:4f:
         7e:8c:4f:5c:a2:7c:11:de:fd:91:05:21:c6:58:2c:0a:3b:5b:
         fb:c7:d7:f2:e6:0c:16:72:f2:5b:99:a5:9a:2a:4d:6a:65:f2:
         7b:12:24:fc:02:f4:68:a4:f3:a7:ef:97:2a:78:7c:8c:b9:ce:
         cd:57:70:a1:6e:b7:cb:fc:95:43:88:33:eb:9f:2f:bf:47:03:
         96:b8:1a:ba:55:42:0e:35:fa:a9:70:0b:bf:92:09:a2:c2:1e:
         83:15:82:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:39:42 2026 by rpki-client