Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0AEC26295A21DF55C14EF28131233747E60E500B.cer
File:                     0AEC26295A21DF55C14EF28131233747E60E500B.cer (raw, json)
Hash identifier:          g5Jf799cQgToK2Iwfug+2AiuyA/tMbPV8bPtUaComFk=
Subject key identifier:   0A:EC:26:29:5A:21:DF:55:C1:4E:F2:81:31:23:37:47:E6:0E:50:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E9AECB7EA219F0CEF2130F21C56A0C9B01F45D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/0AEC26295A21DF55C14EF28131233747E60E500B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jun 2026 11:43:41 +0000
Certificate not after:    Fri 18 Jun 2027 11:48:41 +0000
Subordinate resources:    AS: 268983
                          IP: 45.177.136.0/22
                          IP: 2804:5da0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Jun 2026 08:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9a:ec:b7:ea:21:9f:0c:ef:21:30:f2:1c:56:a0:c9:b0:1f:45:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 19 11:43:41 2026 GMT
            Not After : Jun 18 11:48:41 2027 GMT
        Subject: CN=0AEC26295A21DF55C14EF28131233747E60E500B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:27:32:d0:ab:13:e4:24:f0:a1:40:41:10:c0:
                    5c:bf:2e:b2:17:7e:c8:9d:bf:88:e3:c1:8f:69:86:
                    ea:9f:fc:f2:dd:17:40:18:e6:3d:55:cb:69:05:2d:
                    9d:b4:40:6b:58:63:ea:5a:72:80:4c:be:be:a0:4e:
                    da:4c:de:cd:6c:1d:a3:7e:08:bb:a5:9a:69:19:71:
                    79:71:1b:22:08:12:a1:86:51:20:31:6a:db:67:41:
                    85:9f:e7:ff:ad:b8:49:90:40:06:d4:15:95:11:3a:
                    be:da:ba:08:e3:0b:f2:bc:05:1f:22:99:34:2e:cf:
                    35:d8:13:c7:ab:8b:e7:58:fb:83:59:cc:7a:4d:36:
                    d2:12:06:78:03:29:d5:c4:81:ba:ba:57:70:51:af:
                    6c:c6:0c:1f:8d:e3:fa:96:5a:d0:4a:19:31:cb:2c:
                    d8:3f:a6:4f:45:03:fa:04:1d:59:3a:6f:9d:e7:05:
                    9f:b1:81:91:10:8f:c7:88:d0:f1:45:c9:c3:79:ac:
                    db:91:99:ef:c1:7e:a9:e9:61:74:2f:7a:3d:14:64:
                    17:58:0c:ad:3e:44:94:a5:d0:3f:a0:cd:f8:51:9d:
                    78:53:cd:01:05:d2:5a:9d:ef:1e:c3:0a:5a:f6:1e:
                    c1:e1:95:56:7f:1d:45:f9:e6:eb:dc:f6:3b:b6:25:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:EC:26:29:5A:21:DF:55:C1:4E:F2:81:31:23:37:47:E6:0E:50:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/0AEC26295A21DF55C14EF28131233747E60E500B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.136.0/22
                IPv6:
                  2804:5da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268983

    Signature Algorithm: sha256WithRSAEncryption
         54:2d:9e:4f:8a:24:17:76:00:48:33:f3:63:6e:28:fa:17:55:
         1e:0e:fa:c3:d8:5b:55:c3:c1:f2:67:15:69:91:c2:bd:ae:56:
         b5:07:a6:50:7a:63:92:32:88:0b:ac:d8:8d:41:cd:88:d2:ea:
         51:f9:28:7a:54:51:a3:b1:41:4c:cf:ce:51:7d:96:e3:10:77:
         3b:04:0f:f2:29:f6:a3:c3:12:a4:0e:64:af:bc:c7:a6:6e:e9:
         00:2c:b5:c7:7b:13:29:4a:8b:f0:80:fa:bd:92:db:4d:78:e9:
         0d:95:9c:20:15:d6:ee:d2:86:e7:b0:90:cb:9e:fb:a1:c4:18:
         6f:5f:9f:85:72:09:4b:ee:68:7f:16:b3:93:62:73:a4:3d:8e:
         03:98:b1:69:b0:66:02:ac:b9:97:f5:bb:3e:f0:a3:46:27:fc:
         8c:b0:1d:47:67:9e:e7:50:19:4e:cc:4d:92:0b:73:2c:cb:e4:
         3a:34:70:0b:54:02:d1:3d:5c:4f:35:b5:8a:4a:be:7b:ea:7b:
         40:39:df:04:cc:27:4d:5d:17:f7:6e:57:6c:d5:92:0f:d9:ce:
         06:44:51:c0:47:0d:bc:93:8e:43:a7:49:ec:d4:04:54:c4:ee:
         e5:39:b3:9b:3d:70:57:90:2d:2a:56:80:cf:30:d3:b8:25:df:
         c4:dc:fa:1b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUPprst+ohnwzvITDyHFagybAfRdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA2MTkxMTQzNDFaFw0yNzA2MTgxMTQ4NDFaMDMxMTAvBgNV
BAMTKDBBRUMyNjI5NUEyMURGNTVDMTRFRjI4MTMxMjMzNzQ3RTYwRTUwMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdJzLQqxPkJPChQEEQwFy/LrIX
fsidv4jjwY9phuqf/PLdF0AY5j1Vy2kFLZ20QGtYY+pacoBMvr6gTtpM3s1sHaN+
CLulmmkZcXlxGyIIEqGGUSAxattnQYWf5/+tuEmQQAbUFZUROr7augjjC/K8BR8i
mTQuzzXYE8eri+dY+4NZzHpNNtISBngDKdXEgbq6V3BRr2zGDB+N4/qWWtBKGTHL
LNg/pk9FA/oEHVk6b53nBZ+xgZEQj8eI0PFFycN5rNuRme/BfqnpYXQvej0UZBdY
DK0+RJSl0D+gzfhRnXhTzQEF0lqd7x7DClr2HsHhlVZ/HUX55uvc9ju2JQgZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQK7CYpWiHfVcFO
8oExIzdH5g5QCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMTNG
WjhhVnE1QUVUb1IzbnNDejRaVWIxMlRQYlc1a2hWQXE5Rk5HRHU0N3IvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzEz
Rlo4YVZxNUFFVG9SM25zQ3o0WlViMTJUUGJXNWtoVkFxOUZOR0R1NDdyLzAvMEFF
QzI2Mjk1QTIxREY1NUMxNEVGMjgxMzEyMzM3NDdFNjBFNTAwQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbGIMA0EAgACMAcDBQAoBF2gMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQatzANBgkqhkiG9w0BAQsFAAOCAQEAVC2eT4okF3YASDPz
Y24o+hdVHg76w9hbVcPB8mcVaZHCva5WtQemUHpjkjKIC6zYjUHNiNLqUfkoelRR
o7FBTM/OUX2W4xB3OwQP8in2o8MSpA5kr7zHpm7pACy1x3sTKUqL8ID6vZLbTXjp
DZWcIBXW7tKG57CQy577ocQYb1+fhXIJS+5ofxazk2JzpD2OA5ixabBmAqy5l/W7
PvCjRif8jLAdR2ee51AZTsxNkgtzLMvkOjRwC1QC0T1cTzW1ikq+e+p7QDnfBMwn
TV0X925XbNWSD9nOBkRRwEcNvJOOQ6dJ7NQEVMTu5Tmzmz1wV5AtKlaAzzDTuCXf
xNz6Gw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 09:51:08 2026 by rpki-client