Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer
File:                     24433D21977FD690D9A22FE9B7A0D866F38A662D.cer (raw, json)
Hash identifier:          w8njK6IRgY4I0Wzzxfgeyw/pI4mFGDszuZjzB74rniQ=
Subject key identifier:   24:43:3D:21:97:7F:D6:90:D9:A2:2F:E9:B7:A0:D8:66:F3:8A:66:2D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44AA6FF0D33D3F5520C19D90FC8A490D3B1A14E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Mar 2026 13:08:04 +0000
Certificate not after:    Thu 25 Mar 2027 13:13:04 +0000
Subordinate resources:    AS: 270915
                          IP: 201.140.216.0/22
                          IP: 2804:7370::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:aa:6f:f0:d3:3d:3f:55:20:c1:9d:90:fc:8a:49:0d:3b:1a:14:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 13:08:04 2026 GMT
            Not After : Mar 25 13:13:04 2027 GMT
        Subject: CN=24433D21977FD690D9A22FE9B7A0D866F38A662D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:14:73:7d:bd:29:1d:7b:e4:f2:59:fd:5c:3e:
                    ca:bf:9e:a8:b1:0f:41:4e:9d:18:67:2b:c0:d5:50:
                    ad:d6:77:fd:9c:7b:f1:e2:d1:7e:ce:05:85:3a:89:
                    96:e8:41:0a:90:a0:eb:19:21:23:80:2c:2e:e3:d7:
                    ca:da:b8:d9:23:2f:3d:9e:fc:76:8b:f4:66:47:80:
                    68:8e:22:91:36:06:3b:59:b4:92:df:a9:4f:60:05:
                    24:0e:d9:6e:8e:62:21:02:7b:b4:19:e1:01:06:ad:
                    7d:b0:f9:1b:dc:fe:a5:6d:10:fe:7f:26:60:88:8d:
                    ea:16:af:c3:50:93:cc:ec:52:1e:4d:ea:87:59:8f:
                    22:36:09:86:ba:28:f9:39:63:81:f0:11:ef:82:42:
                    e6:4c:1f:56:b9:55:70:31:3b:fe:a2:54:2e:25:2b:
                    59:dc:29:35:36:ab:38:72:0a:97:c1:e8:f2:58:1b:
                    71:24:83:cf:fd:94:b6:7d:23:08:2d:d5:d9:13:bf:
                    40:b4:65:bc:0f:f2:b4:fc:0c:a3:77:91:b2:0a:6e:
                    47:19:c3:2f:c6:47:f3:b0:0d:24:03:14:21:4d:93:
                    c1:2e:63:ca:9f:32:f6:f1:d5:bc:34:0e:ac:52:9d:
                    21:a3:c1:4a:1d:62:1d:5b:2c:a3:23:20:5c:b5:70:
                    77:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:43:3D:21:97:7F:D6:90:D9:A2:2F:E9:B7:A0:D8:66:F3:8A:66:2D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.216.0/22
                IPv6:
                  2804:7370::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270915

    Signature Algorithm: sha256WithRSAEncryption
         4b:5b:bc:fb:0e:8a:cd:6e:8b:06:a7:50:f7:69:61:b9:70:43:
         b6:79:b9:1e:6d:8e:9d:de:0f:3f:8d:bf:98:02:2e:4a:ab:80:
         9e:4a:56:eb:41:d9:68:a2:f1:47:3c:81:7d:77:1a:7c:3a:4f:
         4a:dc:32:00:f4:b0:fa:ae:94:b5:d1:42:2b:0c:42:2b:49:72:
         29:41:fb:56:c0:f2:06:a5:78:c2:b7:7d:95:4c:4e:49:cc:8d:
         14:92:da:a2:86:0f:7e:48:08:3f:42:04:08:05:d7:58:39:69:
         f4:ee:e0:95:5b:8d:a0:9f:6a:c8:fd:c2:20:e8:5a:b4:ac:7d:
         84:e8:9b:27:4b:95:44:de:a8:b4:fe:f2:66:0d:ed:d2:5b:d0:
         5d:aa:fb:e0:21:08:65:64:20:51:2b:57:25:19:8c:08:59:97:
         41:c6:92:17:14:fe:f5:9c:59:0b:af:9d:9c:e0:f9:48:c9:40:
         02:82:a2:f6:b1:14:5e:12:31:8f:c1:44:1c:f9:ee:69:c3:42:
         97:73:f1:a5:50:d8:33:34:85:40:11:e8:b7:52:39:9b:14:95:
         44:8d:29:70:f8:32:50:e9:5e:72:69:31:6c:43:d7:13:11:89:
         ed:ce:77:3c:69:bb:8c:f4:e6:c6:61:41:7f:25:80:50:95:8d:
         7b:22:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:07:38 2026 by rpki-client