Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3991C6E7FA0E47C517B93E578AC7488F46E2294F.cer
File:                     3991C6E7FA0E47C517B93E578AC7488F46E2294F.cer (raw, json)
Hash identifier:          BTVPcjFRZlb48iDlDFcEyGe5+Ktk1at3Khb/sv4jjiU=
Subject key identifier:   39:91:C6:E7:FA:0E:47:C5:17:B9:3E:57:8A:C7:48:8F:46:E2:29:4F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       60DBB878EA3C2B77F5ADE03F8966DFE1F7495450
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GJARgXnsuwRo9S93J9aPpfwM4fz11ZQ2YATcUYXVn3zE/0/3991C6E7FA0E47C517B93E578AC7488F46E2294F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GJARgXnsuwRo9S93J9aPpfwM4fz11ZQ2YATcUYXVn3zE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Sep 2026 17:25:49 +0000
Certificate not after:    Mon 20 Sep 2027 17:30:49 +0000
Subordinate resources:    AS: 267939
                          IP: 45.165.212.0/22
                          IP: 2804:5584::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 12:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:db:b8:78:ea:3c:2b:77:f5:ad:e0:3f:89:66:df:e1:f7:49:54:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 21 17:25:49 2026 GMT
            Not After : Sep 20 17:30:49 2027 GMT
        Subject: CN=3991C6E7FA0E47C517B93E578AC7488F46E2294F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:2b:7e:8c:fe:e7:47:9e:e9:81:c0:ee:3c:
                    1f:5f:92:16:04:f0:ab:46:bc:8d:96:64:2f:c2:8d:
                    34:16:3d:60:b0:cc:ed:4c:dc:52:2f:63:90:ae:71:
                    c4:e9:68:93:5d:a5:54:35:5d:29:47:78:b3:6c:d1:
                    09:8a:57:1a:8f:98:9f:88:00:99:0a:08:d2:2b:19:
                    36:cd:ad:2c:81:38:a1:80:03:b1:ac:d1:a0:1c:17:
                    85:aa:d0:08:15:e4:76:c0:0c:ad:6f:bb:b6:b7:69:
                    b1:2d:5e:ed:f4:dc:0f:85:3b:89:a2:08:50:b8:dc:
                    ec:35:f7:dc:41:12:20:46:be:eb:f7:c4:2d:60:d0:
                    fc:21:8f:4b:45:57:08:b8:57:c0:75:5b:88:bc:17:
                    49:32:1d:67:70:56:61:d9:3c:e1:4a:1f:32:f0:41:
                    55:b8:a0:1a:9a:5d:f0:b1:8f:87:53:72:cb:38:d8:
                    4c:59:7c:0d:72:7a:75:40:73:ef:52:5d:3b:df:fb:
                    17:aa:59:0d:d2:c9:73:c5:13:c7:52:73:cd:5b:09:
                    db:bc:98:0d:2c:c2:11:58:55:a9:9f:60:5f:fa:9d:
                    92:30:40:d8:e0:3c:e2:92:d0:f3:b4:25:7f:3a:6e:
                    6c:4d:35:92:5c:6b:1d:6f:7b:17:86:26:45:96:b2:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:91:C6:E7:FA:0E:47:C5:17:B9:3E:57:8A:C7:48:8F:46:E2:29:4F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GJARgXnsuwRo9S93J9aPpfwM4fz11ZQ2YATcUYXVn3zE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GJARgXnsuwRo9S93J9aPpfwM4fz11ZQ2YATcUYXVn3zE/0/3991C6E7FA0E47C517B93E578AC7488F46E2294F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.212.0/22
                IPv6:
                  2804:5584::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267939

    Signature Algorithm: sha256WithRSAEncryption
         3b:51:8b:51:c2:90:b3:a2:e8:82:20:57:68:f7:26:5e:5a:60:
         6a:00:90:9d:2a:1d:c2:99:71:20:b2:d2:2a:fa:8f:8c:db:bb:
         78:73:4f:1e:93:c8:db:75:fe:b9:51:9a:4b:41:2e:14:ae:f5:
         49:86:8f:4f:c1:90:d4:6c:56:01:80:7b:3a:e3:5e:53:46:57:
         c6:ad:8e:07:66:67:85:85:2b:52:9f:aa:5c:99:35:c0:f1:e1:
         d5:25:93:b7:73:41:51:f0:5a:e1:fe:e9:7e:4e:6b:16:53:aa:
         9c:32:d6:59:2c:70:46:72:8e:f4:20:2e:6a:83:83:b9:7b:0d:
         f2:ac:7b:0a:40:0e:f4:60:50:3b:4b:a8:e3:b5:e1:2c:35:33:
         d3:6c:16:22:69:d3:e5:df:ea:bf:49:d4:c6:31:98:0a:e6:06:
         ab:35:05:c7:59:a8:13:8b:97:e7:b2:7a:d2:db:60:ab:31:a7:
         14:fd:b3:df:ce:9d:ed:67:a6:86:b4:45:af:f7:24:2f:df:60:
         4b:ed:22:a5:dc:dd:ec:2a:26:cf:dd:a0:53:c6:3c:42:7e:6c:
         e4:12:03:90:58:83:43:f6:37:d8:07:da:4c:99:c0:f7:a2:e9:
         cc:f4:c8:7b:40:f0:05:3d:0f:a3:fb:96:03:1f:02:47:d3:9c:
         e4:35:88:c0
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYNu4eOo8K3f1reA/iWbf4fdJVFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA5MjExNzI1NDlaFw0yNzA5MjAxNzMwNDlaMDMxMTAvBgNV
BAMTKDM5OTFDNkU3RkEwRTQ3QzUxN0I5M0U1NzhBQzc0ODhGNDZFMjI5NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62yt+jP7nR57pgcDuPB9fkhYE
8KtGvI2WZC/CjTQWPWCwzO1M3FIvY5CuccTpaJNdpVQ1XSlHeLNs0QmKVxqPmJ+I
AJkKCNIrGTbNrSyBOKGAA7Gs0aAcF4Wq0AgV5HbADK1vu7a3abEtXu303A+FO4mi
CFC43Ow199xBEiBGvuv3xC1g0Pwhj0tFVwi4V8B1W4i8F0kyHWdwVmHZPOFKHzLw
QVW4oBqaXfCxj4dTcss42ExZfA1yenVAc+9SXTvf+xeqWQ3SyXPFE8dSc81bCdu8
mA0swhFYVamfYF/6nZIwQNjgPOKS0PO0JX86bmxNNZJcax1vexeGJkWWsqKlAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5kcbn+g5HxRe5
PleKx0iPRuIpTzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0pB
UmdYbnN1d1JvOVM5M0o5YVBwZndNNGZ6MTFaUTJZQVRjVVlYVm4zekUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dK
QVJnWG5zdXdSbzlTOTNKOWFQcGZ3TTRmejExWlEyWUFUY1VZWFZuM3pFLzAvMzk5
MUM2RTdGQTBFNDdDNTE3QjkzRTU3OEFDNzQ4OEY0NkUyMjk0Ri5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaXUMA0EAgACMAcDBQAoBFWEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQWozANBgkqhkiG9w0BAQsFAAOCAQEAO1GLUcKQs6LogiBX
aPcmXlpgagCQnSodwplxILLSKvqPjNu7eHNPHpPI23X+uVGaS0EuFK71SYaPT8GQ
1GxWAYB7OuNeU0ZXxq2OB2ZnhYUrUp+qXJk1wPHh1SWTt3NBUfBa4f7pfk5rFlOq
nDLWWSxwRnKO9CAuaoODuXsN8qx7CkAO9GBQO0uo47XhLDUz02wWImnT5d/qv0nU
xjGYCuYGqzUFx1moE4uX57J60ttgqzGnFP2z386d7WemhrRFr/ckL99gS+0ipdzd
7Comz92gU8Y8Qn5s5BIDkFiDQ/Y32AfaTJnA96LpzPTIe0DwBT0Po/uWAx8CR9Oc
5DWIwA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:37:13 2026 by rpki-client