Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/00689E8D2212FB497B226E0F3C68387FFD2D22B3.cer
File:                     00689E8D2212FB497B226E0F3C68387FFD2D22B3.cer (raw, json)
Hash identifier:          RhYQFM1WCnHBdW62MYYFoECG3UnOFl0YGaYcGxOvFbQ=
Subject key identifier:   00:68:9E:8D:22:12:FB:49:7B:22:6E:0F:3C:68:38:7F:FD:2D:22:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FEE2C96B29E1DFEEFD4BB77FEDB7052BC8F368C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Jul 2026 15:41:58 +0000
Certificate not after:    Tue 06 Jul 2027 15:46:58 +0000
Subordinate resources:    AS: 274772
                          IP: 2804:935c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ee:2c:96:b2:9e:1d:fe:ef:d4:bb:77:fe:db:70:52:bc:8f:36:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  7 15:41:58 2026 GMT
            Not After : Jul  6 15:46:58 2027 GMT
        Subject: CN=00689E8D2212FB497B226E0F3C68387FFD2D22B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:df:a7:d8:b0:4d:ca:30:c7:67:9e:52:4c:
                    bf:cf:db:b4:c2:2d:45:83:8a:b2:49:18:5a:85:10:
                    81:6b:fe:48:3b:06:d7:d1:6c:8e:d8:23:af:0d:d1:
                    8c:7c:28:66:cc:a7:74:f7:eb:c2:d6:a7:7c:92:19:
                    3f:1d:6f:fc:d6:4f:f5:8f:de:4b:4f:08:de:3c:94:
                    95:a5:28:73:05:b1:05:40:d4:6b:2e:2d:f3:bf:c6:
                    4d:18:89:a6:92:31:77:da:38:80:53:bb:04:10:55:
                    7b:be:d2:3b:23:e1:f6:5a:e6:f7:28:92:46:f3:7e:
                    e7:c1:d2:df:6c:4c:fc:2b:a2:bd:62:0f:47:e5:1f:
                    c4:ce:87:d0:df:7c:33:67:63:13:67:60:1b:5e:a5:
                    69:33:42:bc:93:d9:63:42:ec:10:d6:fd:58:fe:40:
                    4b:16:84:fc:36:08:be:79:15:28:19:21:d8:91:45:
                    fd:fc:bc:6c:6b:79:0e:a3:aa:61:e0:f4:e2:8e:79:
                    a4:16:66:ee:38:79:d9:fd:5f:68:2f:dc:0f:4d:de:
                    87:29:ef:42:d9:b3:6d:23:66:ab:04:b5:81:bc:e6:
                    e9:c6:16:c0:88:d6:4c:f9:0e:e9:eb:8b:f7:6f:e9:
                    70:ec:94:d9:cd:b3:d2:f3:b4:cc:24:e7:fa:4c:3a:
                    f8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:68:9E:8D:22:12:FB:49:7B:22:6E:0F:3C:68:38:7F:FD:2D:22:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:935c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274772

    Signature Algorithm: sha256WithRSAEncryption
         1c:69:fa:d3:35:6b:93:4b:cb:2e:cd:c1:a9:a4:43:fe:ad:09:
         78:38:e1:c4:b8:71:8b:33:bb:7b:2d:57:fa:73:2e:e4:8b:5a:
         93:2f:24:ed:29:45:36:bf:28:9e:ab:ca:c9:ab:b4:cc:60:d6:
         e0:01:06:15:5c:77:5a:48:38:d8:c7:1a:31:23:1f:4f:96:d7:
         e8:20:e8:9d:e9:16:f6:6f:ed:2e:3a:aa:1f:85:5c:18:1d:02:
         6c:ca:f7:21:d5:21:71:07:ee:6a:2b:f5:bb:cb:d4:41:c7:ac:
         c7:70:e5:5d:09:f8:1d:6c:d6:0b:bb:6d:be:12:1b:da:8e:f0:
         fa:18:20:8b:6b:13:bd:e1:9d:85:b4:de:1f:d0:23:d2:d6:c5:
         be:a5:ab:a2:0d:73:7b:e4:6c:7f:29:47:34:6d:be:56:31:e2:
         ad:1b:48:4a:3a:63:26:b3:de:32:69:2f:db:2a:1e:45:26:e1:
         89:c3:56:cb:b7:c9:d5:8f:74:eb:f4:ad:e0:50:c1:70:3b:eb:
         28:ac:25:b5:2d:81:de:bc:e6:71:e7:13:04:c4:49:1a:19:be:
         94:6c:dd:36:0a:03:c5:97:ab:74:b5:a4:d3:8c:11:b3:b7:3b:
         c2:40:af:ba:04:c8:30:fc:1a:db:5f:d4:65:69:af:7d:4d:8a:
         ee:27:e0:9d
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUH+4slrKeHf7v1Lt3/ttwUryPNowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA3MDcxNTQxNThaFw0yNzA3MDYxNTQ2NThaMDMxMTAvBgNV
BAMTKDAwNjg5RThEMjIxMkZCNDk3QjIyNkUwRjNDNjgzODdGRkQyRDIyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFt+n2LBNyjDHZ55STL/P27TC
LUWDirJJGFqFEIFr/kg7BtfRbI7YI68N0Yx8KGbMp3T368LWp3ySGT8db/zWT/WP
3ktPCN48lJWlKHMFsQVA1GsuLfO/xk0YiaaSMXfaOIBTuwQQVXu+0jsj4fZa5vco
kkbzfufB0t9sTPwror1iD0flH8TOh9DffDNnYxNnYBtepWkzQryT2WNC7BDW/Vj+
QEsWhPw2CL55FSgZIdiRRf38vGxreQ6jqmHg9OKOeaQWZu44edn9X2gv3A9N3ocp
70LZs20jZqsEtYG85unGFsCI1kz5Dunri/dv6XDslNnNs9LztMwk5/pMOvivAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQAaJ6NIhL7SXsi
bg88aDh//S0iszAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNU1K
Z0JNSEFvVWN0bzJOY2ttVk1YWFNBS3d5a1N6TFMxdTU2dlhWRzJVMngvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVN
SmdCTUhBb1VjdG8yTmNrbVZNWFhTQUt3eWtTekxTMXU1NnZYVkcyVTJ4LzAvMDA2
ODlFOEQyMjEyRkI0OTdCMjI2RTBGM0M2ODM4N0ZGRDJEMjJCMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASTXDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
MVQwDQYJKoZIhvcNAQELBQADggEBABxp+tM1a5NLyy7NwamkQ/6tCXg44cS4cYsz
u3stV/pzLuSLWpMvJO0pRTa/KJ6rysmrtMxg1uABBhVcd1pIONjHGjEjH0+W1+gg
6J3pFvZv7S46qh+FXBgdAmzK9yHVIXEH7mor9bvL1EHHrMdw5V0J+B1s1gu7bb4S
G9qO8PoYIItrE73hnYW03h/QI9LWxb6lq6INc3vkbH8pRzRtvlYx4q0bSEo6Yyaz
3jJpL9sqHkUm4YnDVsu3ydWPdOv0reBQwXA76yisJbUtgd685nHnEwTESRoZvpRs
3TYKA8WXq3S1pNOMEbO3O8JAr7oEyDD8Gttf1GVpr31Niu4n4J0=
-----END CERTIFICATE-----
Generated at Wed Jul 8 15:18:42 2026 by rpki-client