Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
File:                     1A706BB72455093A32D1C60201116349B90D2EC7.cer (raw, json)
Hash identifier:          Gd2uiUXg5uvnQmnFmkXUaQwMiyNHTfpPdNGMMEJauPM=
Subject key identifier:   1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       45753D90C718201E3C7E7D4E9E74C6695ADDAA3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Mar 2026 22:57:23 +0000
Certificate not after:    Thu 25 Mar 2027 23:02:23 +0000
Subordinate resources:    AS: 266444
                          IP: 170.82.172.0/22
                          IP: 2804:37ec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:75:3d:90:c7:18:20:1e:3c:7e:7d:4e:9e:74:c6:69:5a:dd:aa:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 22:57:23 2026 GMT
            Not After : Mar 25 23:02:23 2027 GMT
        Subject: CN=1A706BB72455093A32D1C60201116349B90D2EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:83:7c:7a:0b:c2:04:02:13:3b:87:0c:36:ab:
                    0d:82:c6:e8:dc:8b:ba:be:ef:46:7f:92:9a:5c:44:
                    11:c6:f2:a3:3f:c5:fb:1a:14:4a:47:03:fe:0f:68:
                    76:0c:3d:b6:9d:6f:47:17:e6:7c:5f:ed:a5:a7:a4:
                    62:26:16:38:e5:cd:0c:a4:4a:0b:cb:37:f9:6d:db:
                    73:24:d3:ee:cc:58:6b:ac:95:36:40:99:bf:55:db:
                    1f:7e:54:1e:01:a8:12:6b:14:f8:c4:ee:a2:94:8e:
                    27:bf:76:c0:71:57:9a:ca:2d:64:1a:7e:b6:3e:a4:
                    d7:b4:0e:86:a0:e9:37:6b:76:33:f9:ab:eb:59:fa:
                    80:3d:ba:07:63:82:82:99:7d:6f:40:32:fb:aa:3c:
                    8b:cf:7d:c2:d3:75:49:bd:65:ba:3e:68:82:95:a1:
                    92:00:b4:bf:2b:a1:96:7c:83:ba:0d:98:dc:d1:77:
                    d6:24:07:7f:7c:1a:6f:7c:d7:fb:16:8d:99:9c:30:
                    f5:79:6a:e8:ef:35:f4:6d:2a:61:3e:c4:3d:9f:57:
                    04:43:08:5d:0f:ad:45:75:df:76:42:17:68:31:1d:
                    79:a0:87:ff:87:16:e8:13:01:e4:43:3b:33:d2:35:
                    3f:b1:32:96:c8:e2:c9:5f:2e:4d:46:56:97:f1:cb:
                    1a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.172.0/22
                IPv6:
                  2804:37ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266444

    Signature Algorithm: sha256WithRSAEncryption
         69:9a:b9:26:d3:79:f5:0f:8f:b1:86:12:59:d9:3d:d4:80:e6:
         5d:34:e9:58:9f:a2:02:1b:ee:5b:93:f9:ae:48:73:cd:0b:df:
         6d:43:5d:8f:29:35:a6:d0:eb:68:9f:e0:c8:a6:8b:c6:06:86:
         08:8e:f5:e3:7a:ed:17:d1:df:1f:d2:8d:0e:53:b5:d0:40:af:
         9b:f2:2d:83:58:1b:0a:00:00:f7:a4:a4:98:8d:75:09:9a:4e:
         03:f0:e0:0a:87:82:4c:7c:0f:b5:44:cc:01:f5:61:dc:91:09:
         e5:ff:27:ef:16:d8:e6:bf:b3:f3:ef:9a:75:63:76:9e:0c:da:
         10:6f:04:0f:fc:b0:8c:20:14:97:f1:fe:df:e3:e8:13:6f:ca:
         11:5e:10:28:20:d9:08:2d:ee:5d:4c:d8:4d:a6:2a:23:52:8f:
         2a:48:50:cc:26:d1:45:55:e6:5e:c5:19:d4:c0:81:36:53:d6:
         5f:b5:b3:4d:84:e9:81:a6:93:63:c6:9e:00:76:67:ec:e0:77:
         83:5d:db:1b:1d:68:21:61:96:4e:f2:24:84:26:6b:e5:29:b2:
         24:cd:a1:07:cb:33:da:e3:f3:0e:b3:ba:75:b2:83:f0:47:a2:
         99:fb:a1:62:7a:22:93:bd:cf:c2:ca:64:b1:d7:25:03:e3:b5:
         37:24:5c:f5
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIURXU9kMcYIB48fn1OnnTGaVrdqjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAzMjYyMjU3MjNaFw0yNzAzMjUyMzAyMjNaMDMxMTAvBgNV
BAMTKDFBNzA2QkI3MjQ1NTA5M0EzMkQxQzYwMjAxMTE2MzQ5QjkwRDJFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKg3x6C8IEAhM7hww2qw2Cxujc
i7q+70Z/kppcRBHG8qM/xfsaFEpHA/4PaHYMPbadb0cX5nxf7aWnpGImFjjlzQyk
SgvLN/lt23Mk0+7MWGuslTZAmb9V2x9+VB4BqBJrFPjE7qKUjie/dsBxV5rKLWQa
frY+pNe0Doag6TdrdjP5q+tZ+oA9ugdjgoKZfW9AMvuqPIvPfcLTdUm9Zbo+aIKV
oZIAtL8roZZ8g7oNmNzRd9YkB398Gm981/sWjZmcMPV5aujvNfRtKmE+xD2fVwRD
CF0PrUV133ZCF2gxHXmgh/+HFugTAeRDOzPSNT+xMpbI4slfLk1GVpfxyxrrAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQacGu3JFUJOjLR
xgIBEWNJuQ0uxzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWlN
TTYzQzZhUVVTVk13ZFpGMzNZN05xMzVNMkZrdnZrdFY2aUNWUU5oUEEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fp
TU02M0M2YVFVU1ZNd2RaRjMzWTdOcTM1TTJGa3Z2a3RWNmlDVlFOaFBBLzAvMUE3
MDZCQjcyNDU1MDkzQTMyRDFDNjAyMDExMTYzNDlCOTBEMkVDNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqlKsMA0EAgACMAcDBQAoBDfsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQQzDANBgkqhkiG9w0BAQsFAAOCAQEAaZq5JtN59Q+PsYYS
Wdk91IDmXTTpWJ+iAhvuW5P5rkhzzQvfbUNdjyk1ptDraJ/gyKaLxgaGCI7143rt
F9HfH9KNDlO10ECvm/Itg1gbCgAA96SkmI11CZpOA/DgCoeCTHwPtUTMAfVh3JEJ
5f8n7xbY5r+z8++adWN2ngzaEG8ED/ywjCAUl/H+3+PoE2/KEV4QKCDZCC3uXUzY
TaYqI1KPKkhQzCbRRVXmXsUZ1MCBNlPWX7WzTYTpgaaTY8aeAHZn7OB3g13bGx1o
IWGWTvIkhCZr5SmyJM2hB8sz2uPzDrO6dbKD8EeimfuhYnoik73PwspksdclA+O1
NyRc9Q==
-----END CERTIFICATE-----
Generated at Thu Apr 9 09:48:31 2026 by rpki-client