Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0122E3CEC278C0C5D67E43DBA6B93C255751DB6F.cer
File:                     0122E3CEC278C0C5D67E43DBA6B93C255751DB6F.cer (raw, json)
Hash identifier:          alRgIN2JIxMox0i3gOpDVEOPwu7W4GLyMRHuDq+wX9Q=
Subject key identifier:   01:22:E3:CE:C2:78:C0:C5:D6:7E:43:DB:A6:B9:3C:25:57:51:DB:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2528F00CB28D314E9D5CC5F40727ACA61CD644F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2UJa8Do1P17XEBQUtp98ANLjv5rwvpSGd4r8ManMerPp/0/0122E3CEC278C0C5D67E43DBA6B93C255751DB6F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2UJa8Do1P17XEBQUtp98ANLjv5rwvpSGd4r8ManMerPp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Mar 2026 23:56:15 +0000
Certificate not after:    Tue 30 Mar 2027 00:01:15 +0000
Subordinate resources:    AS: 268733
                          IP: 45.171.240.0/22
                          IP: 2804:59e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 14:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:28:f0:0c:b2:8d:31:4e:9d:5c:c5:f4:07:27:ac:a6:1c:d6:44:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 30 23:56:15 2026 GMT
            Not After : Mar 30 00:01:15 2027 GMT
        Subject: CN=0122E3CEC278C0C5D67E43DBA6B93C255751DB6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d6:a9:e1:d4:7b:a9:fe:a9:e6:ef:4d:4f:c0:
                    eb:0f:87:fc:bb:5a:8c:19:e0:9b:cf:8f:7c:45:29:
                    c4:b7:67:4e:7e:1e:46:1f:a4:a6:c4:64:99:47:b1:
                    bd:c5:92:91:4d:b1:eb:61:61:ac:a5:f1:b5:6b:b1:
                    9e:62:0c:1c:4d:81:7e:20:45:a3:9f:e6:ee:5f:c7:
                    6c:6b:f8:c5:de:9c:7f:11:74:44:41:2d:f7:e6:5b:
                    a7:1a:dd:23:43:e2:c9:60:c1:dc:85:9e:da:1a:06:
                    8a:b8:5f:e0:97:31:2c:c4:b9:5d:7a:fa:61:03:39:
                    c9:3d:17:b0:83:0a:94:47:d0:91:e1:e5:28:a4:27:
                    b9:59:76:19:55:75:9a:4e:73:64:37:31:b6:01:aa:
                    fb:ba:db:85:6a:29:b6:59:a6:3a:e4:b2:a1:19:8a:
                    01:65:2b:92:91:f0:13:1e:97:fd:c0:f3:bc:43:e4:
                    f8:35:d7:f0:ed:3d:15:a8:77:5b:95:b9:ca:34:48:
                    d6:a7:61:80:f5:f5:46:6a:40:fb:42:04:d5:3f:57:
                    c0:c0:a6:2f:bb:05:80:77:25:ae:f9:9e:66:8d:75:
                    1c:b0:5a:da:ce:ce:d6:0b:29:79:7c:51:0b:e1:a0:
                    11:4a:99:67:15:04:46:46:7e:62:54:a4:da:dd:15:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:22:E3:CE:C2:78:C0:C5:D6:7E:43:DB:A6:B9:3C:25:57:51:DB:6F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2UJa8Do1P17XEBQUtp98ANLjv5rwvpSGd4r8ManMerPp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2UJa8Do1P17XEBQUtp98ANLjv5rwvpSGd4r8ManMerPp/0/0122E3CEC278C0C5D67E43DBA6B93C255751DB6F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.240.0/22
                IPv6:
                  2804:59e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268733

    Signature Algorithm: sha256WithRSAEncryption
         a9:d4:41:ac:27:ba:0a:2f:65:89:ea:34:38:f2:d6:ef:cc:57:
         a8:07:ef:72:0a:a8:2a:38:db:07:ed:7d:19:3f:4e:a8:40:79:
         ee:b0:cf:44:4f:70:76:0a:7b:64:bf:c3:5a:18:39:71:e2:a3:
         4e:39:65:9b:7c:a1:2b:ea:05:d8:92:e4:ac:de:52:59:bb:f4:
         d3:8d:9e:ec:aa:1b:f7:8e:ea:09:04:bd:8c:a4:01:51:04:3d:
         57:3a:58:5e:b4:80:82:f8:9f:22:e6:1e:db:b2:fa:4d:0e:15:
         81:30:a8:0a:53:8a:74:aa:f9:8d:92:32:11:5e:7f:a3:1d:fd:
         d4:80:b1:b4:c7:f6:ac:a8:11:4c:0f:ce:12:51:8f:2e:64:77:
         8f:a4:9c:49:b1:65:f1:f6:40:c9:d4:d5:46:5d:3b:72:3b:55:
         51:dc:f2:a5:a1:ee:5c:c1:d7:94:9c:08:4e:51:89:cf:db:ea:
         ab:6f:77:21:e9:23:1e:18:3a:2b:75:0e:ef:ae:99:69:77:27:
         3d:db:cc:eb:b6:a5:85:9c:29:99:03:a0:dd:23:62:01:4f:ea:
         4a:c4:70:27:af:84:0b:a0:17:d0:0b:3a:58:57:bf:b3:ac:93:
         f7:9e:ca:ca:d6:6f:46:02:02:82:14:46:70:6c:c0:f4:06:e9:
         b1:08:1f:c4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJSjwDLKNMU6dXMX0ByesphzWRPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAzMzAyMzU2MTVaFw0yNzAzMzAwMDAxMTVaMDMxMTAvBgNV
BAMTKDAxMjJFM0NFQzI3OEMwQzVENjdFNDNEQkE2QjkzQzI1NTc1MURCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY1qnh1Hup/qnm701PwOsPh/y7
WowZ4JvPj3xFKcS3Z05+HkYfpKbEZJlHsb3FkpFNsethYayl8bVrsZ5iDBxNgX4g
RaOf5u5fx2xr+MXenH8RdERBLffmW6ca3SND4slgwdyFntoaBoq4X+CXMSzEuV16
+mEDOck9F7CDCpRH0JHh5SikJ7lZdhlVdZpOc2Q3MbYBqvu624VqKbZZpjrksqEZ
igFlK5KR8BMel/3A87xD5Pg11/DtPRWod1uVuco0SNanYYD19UZqQPtCBNU/V8DA
pi+7BYB3Ja75nmaNdRywWtrOztYLKXl8UQvhoBFKmWcVBEZGfmJUpNrdFZRTAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBIuPOwnjAxdZ+
Q9umuTwlV1HbbzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlVK
YThEbzFQMTdYRUJRVXRwOThBTkxqdjVyd3ZwU0dkNHI4TWFuTWVyUHAvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJV
SmE4RG8xUDE3WEVCUVV0cDk4QU5ManY1cnd2cFNHZDRyOE1hbk1lclBwLzAvMDEy
MkUzQ0VDMjc4QzBDNUQ2N0U0M0RCQTZCOTNDMjU1NzUxREI2Ri5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLavwMA0EAgACMAcDBQAoBFnoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZvTANBgkqhkiG9w0BAQsFAAOCAQEAqdRBrCe6Ci9lieo0
OPLW78xXqAfvcgqoKjjbB+19GT9OqEB57rDPRE9wdgp7ZL/DWhg5ceKjTjllm3yh
K+oF2JLkrN5SWbv0042e7Kob947qCQS9jKQBUQQ9VzpYXrSAgvifIuYe27L6TQ4V
gTCoClOKdKr5jZIyEV5/ox391ICxtMf2rKgRTA/OElGPLmR3j6ScSbFl8fZAydTV
Rl07cjtVUdzypaHuXMHXlJwITlGJz9vqq293IekjHhg6K3UO766ZaXcnPdvM67al
hZwpmQOg3SNiAU/qSsRwJ6+EC6AX0As6WFe/s6yT957KytZvRgICghRGcGzA9Abp
sQgfxA==
-----END CERTIFICATE-----
Generated at Thu Apr 9 12:40:11 2026 by rpki-client