Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer
File:                     2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer (raw, json)
Hash identifier:          R99ZImT9Mhp3njfbwBQBPoPX68lyg+1eHF6IfXpo/yo=
Subject key identifier:   21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       792ABA8521EA8ADA242E94B268C62E5ED30289BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft
caRepository:             rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 May 2026 14:30:11 +0000
Certificate not after:    Mon 17 May 2027 14:35:11 +0000
Subordinate resources:    AS: 270405
                          IP: 2804:6b84::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2a:ba:85:21:ea:8a:da:24:2e:94:b2:68:c6:2e:5e:d3:02:89:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 18 14:30:11 2026 GMT
            Not After : May 17 14:35:11 2027 GMT
        Subject: CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:be:87:85:6c:ea:d3:3f:8b:05:89:13:51:
                    80:35:51:62:53:c1:63:11:81:a7:ce:c1:8a:bb:52:
                    49:dd:ae:d6:ba:d0:75:a2:c8:37:6d:b3:84:7f:90:
                    bd:e3:3e:91:f0:63:7f:c8:d0:ff:4e:78:b6:a2:50:
                    63:ab:5f:0e:ae:81:4e:97:59:54:7d:28:f7:b1:a2:
                    15:41:7d:dc:1a:a9:13:e2:02:3d:32:23:21:2a:2f:
                    b5:f2:4e:47:d8:39:f2:1c:2e:1a:b3:94:7b:4b:6a:
                    33:ed:37:a9:1a:30:d0:ac:d2:f4:59:1e:00:bb:9e:
                    ed:d5:c7:5a:5d:b5:85:27:f2:d7:4d:bf:94:eb:b8:
                    a7:76:78:b4:79:e6:75:d6:a0:c3:e1:28:d1:43:e0:
                    9a:22:05:66:f2:f4:de:71:3c:ac:86:e0:6c:a4:e1:
                    ed:69:be:30:89:ee:1c:d8:1c:dc:a9:93:dc:7e:2c:
                    ae:6d:bd:9e:25:6a:04:28:68:e4:8f:f0:b0:eb:08:
                    2b:0e:1a:5a:b4:69:bb:55:2d:b6:4c:54:55:f2:51:
                    6a:9f:1a:7a:d2:26:6d:64:bb:b9:50:32:55:e1:5a:
                    8f:aa:75:01:05:a2:95:78:3f:e2:53:c9:a0:a1:d5:
                    bb:db:16:1e:e2:ac:40:49:16:c3:2c:ae:30:68:c0:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270405

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:4c:24:43:cc:b8:36:6a:df:25:7c:49:46:fd:fe:54:18:
         f8:e1:68:fe:20:ac:c0:54:48:7e:75:fd:0f:70:63:4b:20:59:
         7c:30:8c:35:80:af:c5:02:a9:98:03:9a:58:48:2f:0a:08:8b:
         cf:fe:89:a7:6f:08:5c:44:9c:1d:94:2e:d8:76:56:df:c2:22:
         4d:d9:86:82:49:28:81:6d:e6:1f:34:d0:52:c2:28:1d:fe:1d:
         aa:3e:c5:d6:06:25:38:3a:07:2b:5d:99:4f:25:b5:16:13:4d:
         1e:02:ef:02:32:7d:4a:ac:10:2d:c7:e4:06:0a:87:9f:b5:94:
         a6:83:e5:cc:59:dd:ce:49:15:ce:3a:f1:d9:de:9e:3d:aa:6c:
         c5:7d:91:ec:46:d6:50:29:f9:fd:eb:08:15:41:38:4f:36:30:
         ca:4d:64:10:80:db:09:e6:24:67:04:b3:df:27:7c:d4:da:85:
         67:34:83:03:b6:14:a2:84:02:24:48:40:55:4e:a3:c2:0a:3d:
         24:12:21:82:97:71:50:6b:92:be:4f:d4:ab:dc:3e:ef:5b:ba:
         88:3a:c4:bf:ac:7e:34:6e:0b:31:55:90:12:9e:a9:83:b1:b7:
         00:6d:0e:7a:af:2b:4c:93:86:a1:23:88:59:22:0a:22:8f:70:
         bb:dd:00:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:55:47 2026 by rpki-client