Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer
File:                     0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer (raw, json)
Hash identifier:          Ia7xz/h5DouS9SCQyehPQpV5rd0qYAlD+XRw5n6rFFU=
Subject key identifier:   0D:67:9A:6C:82:FC:83:BC:11:15:37:0A:0D:EC:B3:86:53:E0:4B:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6AE39595A11D828457DC9D2DF7D46EFC5434F6E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jun 2026 11:31:14 +0000
Certificate not after:    Tue 29 Jun 2027 11:36:14 +0000
Subordinate resources:    AS: 264009
                          IP: 143.0.140.0/22
                          IP: 168.227.132.0/22
                          IP: 170.78.120.0/22
                          IP: 2804:2954::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e3:95:95:a1:1d:82:84:57:dc:9d:2d:f7:d4:6e:fc:54:34:f6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 30 11:31:14 2026 GMT
            Not After : Jun 29 11:36:14 2027 GMT
        Subject: CN=0D679A6C82FC83BC1115370A0DECB38653E04BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:ba:91:78:6c:a0:ae:80:f5:cd:41:bf:28:
                    6f:04:12:5a:28:0c:81:34:7e:12:25:bf:84:c6:9f:
                    22:77:e1:4c:0f:dc:9a:ed:c6:d9:e1:fc:e4:09:74:
                    92:2f:c2:da:10:f9:72:69:26:16:4d:b3:ba:bd:49:
                    f4:12:97:69:99:6d:af:78:a3:aa:a8:2d:bb:84:10:
                    3a:20:29:2d:ac:f9:b4:ff:f0:67:c1:4d:be:2d:c8:
                    3d:91:4d:da:1c:99:d8:ae:42:c3:9b:07:87:e7:2d:
                    e8:4b:ab:5f:43:d7:53:c6:50:12:87:09:1a:f8:13:
                    19:c1:bd:6c:f0:2c:5d:88:ec:88:29:19:ef:50:28:
                    28:ff:5f:b4:bc:43:cf:56:29:f8:19:61:fd:46:3c:
                    bf:3b:07:95:07:0c:cf:fa:15:b3:37:6e:3e:b8:0f:
                    32:b5:d1:fa:72:c8:4c:81:16:fe:61:95:88:68:f9:
                    d3:5b:f8:44:74:a4:7e:cd:61:e1:d1:aa:bf:d2:64:
                    51:aa:e2:af:e9:7c:53:67:b9:14:a7:d1:f5:50:fb:
                    8e:f6:04:90:f0:0b:11:18:e0:81:bc:94:af:9b:27:
                    5d:f5:4d:11:a1:24:07:2a:51:25:87:43:ff:65:8d:
                    33:9b:78:b6:b4:fe:d8:5b:55:6e:8b:54:e1:20:9f:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:67:9A:6C:82:FC:83:BC:11:15:37:0A:0D:EC:B3:86:53:E0:4B:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.140.0/22
                  168.227.132.0/22
                  170.78.120.0/22
                IPv6:
                  2804:2954::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264009

    Signature Algorithm: sha256WithRSAEncryption
         d8:e8:73:46:de:0a:6e:42:e5:28:9e:04:e7:5e:c6:30:31:67:
         1c:aa:26:f9:db:d2:53:d3:f1:7d:6c:ca:20:76:fa:0c:8e:24:
         47:8e:30:67:de:35:0e:ca:f8:48:2d:84:3a:1e:31:7f:f6:e6:
         9f:f7:b8:a3:23:46:c4:64:37:01:ae:99:89:b3:cc:5a:39:e8:
         13:5d:87:f0:13:cd:4b:b4:ed:20:85:ba:77:bf:de:11:4d:e5:
         86:ca:1f:c5:b9:26:38:34:61:ce:9f:fe:74:01:8e:5c:2e:c2:
         b7:26:26:20:05:c5:9a:cc:bb:df:e5:01:ca:86:23:d6:7c:c2:
         28:21:a3:0f:c0:c9:9b:6f:6f:f7:20:c0:2a:5a:1a:e8:f3:0b:
         06:ee:a5:58:9d:b6:eb:0b:c6:8f:ba:70:84:5a:3a:93:80:51:
         59:3c:1d:59:bb:22:e3:dc:8c:e6:56:79:c2:64:94:c5:0a:2b:
         e4:78:4b:7c:7d:f0:a6:2d:99:06:2f:eb:42:ce:f1:b7:0d:de:
         d6:34:54:32:18:aa:b4:c0:87:20:88:5f:9b:b0:43:aa:1e:b8:
         bc:87:e3:69:f2:09:2d:a2:bf:64:5c:79:98:7f:b9:8b:94:f2:
         a1:39:3d:a5:5c:8d:bd:94:f3:a3:3e:77:2f:2b:18:ac:ac:f8:
         d4:e3:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:20:51 2026 by rpki-client