Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6.cer
File:                     23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6.cer (raw, json)
Hash identifier:          Rk7SL++P/W6nlYR78FsIFh1Fk0bES+BLVcA2smIJoek=
Subject key identifier:   23:C6:8B:B3:AD:F6:D8:AC:EC:AB:EF:4E:FA:21:03:50:4B:B3:B4:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14AB2C81F640349D6E04016C03C494E449254F41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2LJ5xa4gu4enJSVuPLJbd9S5DkiJzSGJZCKyd5zVa6nH/0/23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2LJ5xa4gu4enJSVuPLJbd9S5DkiJzSGJZCKyd5zVa6nH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jun 2026 15:12:22 +0000
Certificate not after:    Thu 17 Jun 2027 15:17:22 +0000
Subordinate resources:    AS: 274841
                          IP: 201.216.76.0/22
                          IP: 2804:946c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Jun 2026 09:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ab:2c:81:f6:40:34:9d:6e:04:01:6c:03:c4:94:e4:49:25:4f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 18 15:12:22 2026 GMT
            Not After : Jun 17 15:17:22 2027 GMT
        Subject: CN=23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:96:69:35:bd:83:3f:24:02:c0:b4:cb:3f:
                    d8:5f:95:6e:4a:6c:f1:2a:80:3f:bc:4d:ea:68:80:
                    c4:84:86:f0:a8:4a:5d:bd:78:ab:d3:bb:59:34:51:
                    78:7b:06:11:40:bf:4b:65:fc:8a:af:fa:b2:5a:15:
                    f8:b5:e1:fd:e2:c9:6d:f0:27:3f:af:78:ef:c6:e1:
                    25:ec:9d:c8:cb:d2:fd:8a:77:63:77:b5:55:ec:20:
                    a1:74:53:2b:69:13:7d:3d:80:4a:02:28:00:f6:b5:
                    d4:54:2c:4e:77:49:27:f1:4a:b6:69:43:d0:a6:53:
                    4a:cd:6b:77:ba:77:6f:2c:4c:09:b3:17:0c:69:63:
                    f5:c8:cc:a5:3b:c3:c8:b4:f3:81:ce:82:f1:82:5f:
                    36:c8:3f:5c:a5:14:be:8c:94:57:54:cc:cd:8f:77:
                    8a:71:3e:c8:ab:e6:62:d2:6e:fb:b6:44:5e:c1:f8:
                    6e:1b:81:ef:fa:02:94:d6:20:87:d4:1e:85:e7:68:
                    c4:09:a6:99:bc:16:bf:f7:2f:e9:20:aa:d8:85:42:
                    bc:cc:e6:4d:c8:02:50:3f:c9:01:5d:99:76:7c:f4:
                    0d:f3:8f:ac:73:08:c8:b1:d8:b5:cf:32:ba:95:14:
                    9b:21:1d:ee:e4:15:e4:c0:cd:de:ce:40:68:bf:8a:
                    35:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:C6:8B:B3:AD:F6:D8:AC:EC:AB:EF:4E:FA:21:03:50:4B:B3:B4:C6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2LJ5xa4gu4enJSVuPLJbd9S5DkiJzSGJZCKyd5zVa6nH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2LJ5xa4gu4enJSVuPLJbd9S5DkiJzSGJZCKyd5zVa6nH/0/23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.76.0/22
                IPv6:
                  2804:946c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274841

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:b6:25:70:14:ba:ae:cf:57:3c:c1:cb:8e:07:8f:c1:47:
         10:01:53:af:bc:5c:5f:86:64:10:0b:f9:67:59:68:5c:23:67:
         88:c3:1c:85:64:45:20:fd:33:bd:08:a8:bb:c8:88:2d:8e:f2:
         b6:54:a0:7c:0f:65:25:d4:5c:1b:e0:0c:71:11:c9:b3:c9:83:
         e1:b6:a9:1e:5d:0b:4f:84:52:55:09:11:58:aa:a6:21:e6:89:
         57:93:5f:1b:a9:30:f5:c0:1a:86:93:ae:9d:a4:cf:17:bb:1a:
         c2:a9:aa:1e:80:d3:a8:49:09:20:d2:c2:75:30:66:d6:72:c9:
         9b:f4:88:42:4d:67:e4:b0:2a:33:fe:f3:3e:74:26:a7:4c:44:
         31:d9:f6:c5:f8:8f:d1:de:15:05:ca:f5:21:de:f2:03:b5:20:
         08:b4:a4:81:32:2b:3b:e2:50:02:75:72:a7:ff:b7:26:9f:91:
         4c:9e:cd:41:7e:4c:f6:06:6d:6f:c0:80:52:0a:50:61:89:0d:
         e9:bb:f6:f1:11:3b:09:ca:ff:ac:cf:98:9d:c8:93:a6:6c:5a:
         6d:0c:a0:37:dc:20:3f:00:05:f9:e2:7e:b0:82:8d:b7:03:d1:
         69:15:43:27:4b:0f:9c:f6:8c:c3:26:a3:d8:2b:00:53:28:97:
         75:e6:9f:54
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUFKssgfZANJ1uBAFsA8SU5EklT0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA2MTgxNTEyMjJaFw0yNzA2MTcxNTE3MjJaMDMxMTAvBgNV
BAMTKDIzQzY4QkIzQURGNkQ4QUNFQ0FCRUY0RUZBMjEwMzUwNEJCM0I0QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjpZpNb2DPyQCwLTLP9hflW5K
bPEqgD+8TepogMSEhvCoSl29eKvTu1k0UXh7BhFAv0tl/Iqv+rJaFfi14f3iyW3w
Jz+veO/G4SXsncjL0v2Kd2N3tVXsIKF0UytpE309gEoCKAD2tdRULE53SSfxSrZp
Q9CmU0rNa3e6d28sTAmzFwxpY/XIzKU7w8i084HOgvGCXzbIP1ylFL6MlFdUzM2P
d4pxPsir5mLSbvu2RF7B+G4bge/6ApTWIIfUHoXnaMQJppm8Fr/3L+kgqtiFQrzM
5k3IAlA/yQFdmXZ89A3zj6xzCMix2LXPMrqVFJshHe7kFeTAzd7OQGi/ijWHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjxouzrfbYrOyr
7076IQNQS7O0xjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkxK
NXhhNGd1NGVuSlNWdVBMSmJkOVM1RGtpSnpTR0paQ0t5ZDV6VmE2bkgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJM
SjV4YTRndTRlbkpTVnVQTEpiZDlTNURraUp6U0dKWkNLeWQ1elZhNm5ILzAvMjND
NjhCQjNBREY2RDhBQ0VDQUJFRjRFRkEyMTAzNTA0QkIzQjRDNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCydhMMA0EAgACMAcDBQAoBJRsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQxmTANBgkqhkiG9w0BAQsFAAOCAQEAYiu2JXAUuq7PVzzB
y44Hj8FHEAFTr7xcX4ZkEAv5Z1loXCNniMMchWRFIP0zvQiou8iILY7ytlSgfA9l
JdRcG+AMcRHJs8mD4bapHl0LT4RSVQkRWKqmIeaJV5NfG6kw9cAahpOunaTPF7sa
wqmqHoDTqEkJINLCdTBm1nLJm/SIQk1n5LAqM/7zPnQmp0xEMdn2xfiP0d4VBcr1
Id7yA7UgCLSkgTIrO+JQAnVyp/+3Jp+RTJ7NQX5M9gZtb8CAUgpQYYkN6bv28RE7
Ccr/rM+YnciTpmxabQygN9wgPwAF+eJ+sIKNtwPRaRVDJ0sPnPaMwyaj2CsAUyiX
deafVA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:33:36 2026 by rpki-client