Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer
File:                     1E240D6445B519D0AD6DBAB1529023E200344D71.cer (raw, json)
Hash identifier:          Mr2RXeDVhDqEHPuAYHVUTRYMjsn8H5I0NxAYjGWv/5I=
Subject key identifier:   1E:24:0D:64:45:B5:19:D0:AD:6D:BA:B1:52:90:23:E2:00:34:4D:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1BEE76924F326ACBE56C7F3477C7738A1F359D96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Mar 2026 21:18:39 +0000
Certificate not after:    Wed 24 Mar 2027 21:23:39 +0000
Subordinate resources:    AS: 267586
                          IP: 45.70.204.0/22
                          IP: 2804:43b8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 13:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ee:76:92:4f:32:6a:cb:e5:6c:7f:34:77:c7:73:8a:1f:35:9d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 21:18:39 2026 GMT
            Not After : Mar 24 21:23:39 2027 GMT
        Subject: CN=1E240D6445B519D0AD6DBAB1529023E200344D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6f:15:4a:40:98:2c:04:5b:73:37:fa:81:e1:
                    6b:a1:d6:bd:0e:30:3e:d7:c4:87:0a:8d:95:1d:c7:
                    f7:84:09:44:42:98:d9:63:b4:61:90:80:5a:42:14:
                    9d:af:19:6d:80:3d:88:c9:45:78:4d:87:46:22:66:
                    ce:d2:81:cb:da:53:37:b4:ea:2a:8f:2b:84:01:ce:
                    56:a1:f0:dd:9d:b4:82:c2:80:23:27:7c:8f:e4:b6:
                    1a:58:68:16:b8:7d:a3:76:f4:55:08:1e:22:0f:f8:
                    78:97:bf:9a:2f:6a:b0:34:0d:41:e9:bd:e6:e7:3f:
                    f2:e5:e9:dc:84:63:19:40:60:27:50:43:9d:28:dc:
                    64:c8:45:2a:00:ed:a7:b8:ee:cc:dd:dc:ba:43:9b:
                    c3:7a:e1:4a:92:98:48:34:98:df:3c:9a:43:1f:8f:
                    28:c4:b4:13:d6:2e:92:5c:f2:a9:8e:fe:51:03:32:
                    b1:1c:78:f4:33:eb:ee:3b:d1:a5:b7:6c:d2:f0:27:
                    05:cb:03:39:db:6a:af:71:e2:3a:65:79:6f:45:20:
                    f1:6c:5a:e6:6c:89:12:86:b6:63:72:d8:16:db:62:
                    71:6f:76:7b:6a:9d:bc:38:a7:62:a7:74:eb:84:7b:
                    d9:22:2d:7e:88:e5:20:cb:86:0f:16:20:f7:74:4c:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:24:0D:64:45:B5:19:D0:AD:6D:BA:B1:52:90:23:E2:00:34:4D:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.204.0/22
                IPv6:
                  2804:43b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267586

    Signature Algorithm: sha256WithRSAEncryption
         59:90:0e:b1:97:f8:4a:4d:d8:31:1f:58:d1:9a:5c:4a:8e:e2:
         13:1f:95:83:55:2a:c1:c9:5a:e5:eb:be:90:9c:65:7b:03:85:
         ba:ba:85:48:82:36:de:7b:c4:06:a2:6b:92:28:2f:50:ec:c0:
         4c:d2:3f:bc:36:97:a2:75:64:9e:c7:35:a0:b6:91:1e:9b:07:
         42:a3:3b:25:e2:dd:7e:1c:0d:74:24:b1:0a:1e:11:bd:b7:0e:
         b2:96:7d:61:80:84:c2:03:aa:e1:fd:ec:df:bd:86:aa:70:9d:
         b4:59:4a:7f:b0:61:ff:b8:d2:22:54:db:a3:f4:e5:e6:00:b0:
         28:55:ae:ce:ca:bc:87:13:f7:dd:fb:68:2f:7d:43:45:b7:46:
         38:5f:32:44:d4:45:1e:94:9b:8b:c2:f4:0c:33:67:9e:a8:44:
         59:fe:1f:14:0e:80:b4:ad:c1:19:3a:d0:b8:2a:f7:6a:19:e3:
         c6:93:36:98:19:9d:1d:5e:dd:e0:a1:12:66:39:a2:e6:82:19:
         30:3f:58:5c:6c:8f:05:fc:40:c9:89:98:6c:b9:ab:16:cf:7e:
         ce:30:d8:2c:79:f6:64:e5:88:a4:70:7d:ce:5e:16:f3:fc:66:
         a9:3d:28:16:57:0a:2c:58:1d:aa:4b:b6:97:b9:8e:78:a2:6c:
         ca:4d:9e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:10:51 2026 by rpki-client