Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.cer
File:                     420B4421486D4B3F3FDDA78BEFDCD04B114FA391.cer (raw, json)
Hash identifier:          EYKVHZ5Q9XyaMRQtoagLTWOAE3S90ZuaQfV0NgZEwq8=
Subject key identifier:   42:0B:44:21:48:6D:4B:3F:3F:DD:A7:8B:EF:DC:D0:4B:11:4F:A3:91
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18A77AE32BCA1A6CE1B98F5ED3113B71E9AC09FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 May 2026 18:48:36 +0000
Certificate not after:    Thu 13 May 2027 18:53:36 +0000
Subordinate resources:    AS: 264526
                          IP: 132.255.204.0/22
                          IP: 2804:2100::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 18:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a7:7a:e3:2b:ca:1a:6c:e1:b9:8f:5e:d3:11:3b:71:e9:ac:09:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 14 18:48:36 2026 GMT
            Not After : May 13 18:53:36 2027 GMT
        Subject: CN=420B4421486D4B3F3FDDA78BEFDCD04B114FA391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:ee:33:7c:10:00:2c:67:ab:09:3d:5c:22:
                    df:07:97:21:94:7e:e7:bd:0e:32:3d:77:56:8c:32:
                    25:ee:87:ab:1c:58:48:b3:17:f1:37:a6:b9:76:db:
                    5d:f5:d4:3f:cb:0d:3a:18:e8:28:44:bc:30:66:b7:
                    7a:91:b6:36:d4:9a:90:cc:b0:90:75:79:e8:bf:08:
                    57:97:ef:ff:d6:e3:e2:6f:63:75:1c:c9:76:0a:1a:
                    e2:98:26:51:c1:bc:19:0d:a8:73:36:95:43:94:0f:
                    72:99:7e:da:ca:fc:39:52:23:51:53:9a:3a:29:e5:
                    e7:25:c8:75:91:be:f5:b2:8d:52:bd:9e:43:bc:f8:
                    41:44:93:69:8a:ae:f1:62:07:4d:8b:13:a3:21:e3:
                    b5:2b:cc:f7:c9:57:f5:37:bc:54:dc:b6:4f:cc:35:
                    94:81:f0:02:0b:45:b6:03:49:a0:86:a8:32:3f:c2:
                    24:36:c6:07:5b:98:87:6f:05:de:57:45:0c:de:a5:
                    7d:a8:4b:a0:c9:ee:f8:9a:c4:0f:f1:a6:8a:9b:d9:
                    68:48:16:ff:f4:34:48:cb:a4:1a:04:f4:e8:a7:5d:
                    6e:7a:19:cb:e0:68:ee:de:33:53:7d:e2:5b:49:51:
                    69:04:b8:95:85:7d:5c:aa:0a:b5:dc:17:36:20:53:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:0B:44:21:48:6D:4B:3F:3F:DD:A7:8B:EF:DC:D0:4B:11:4F:A3:91
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.204.0/22
                IPv6:
                  2804:2100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264526

    Signature Algorithm: sha256WithRSAEncryption
         4c:98:ed:85:69:20:48:25:c5:a3:ea:8a:53:a8:46:1e:af:87:
         48:f0:0e:ff:a4:26:3f:c3:86:61:3d:f7:0d:aa:e8:7a:7f:94:
         66:10:3e:f6:41:5b:c8:a7:11:a4:d0:6e:7e:b8:23:a3:8d:88:
         60:f4:8e:85:e6:29:b8:82:47:07:fd:f5:23:c2:ea:99:b8:c8:
         fc:72:ad:77:d2:a6:a5:28:21:c0:93:0a:7e:c3:2f:38:35:ec:
         48:8c:f4:00:87:4f:e2:2a:87:b9:fd:10:3c:c5:50:91:da:7e:
         1d:ae:23:82:74:b4:5e:ad:c4:73:90:1a:5a:1c:82:31:bf:d6:
         56:81:53:20:97:bd:a1:f1:ca:5d:ac:bb:d8:d5:a2:c6:0c:93:
         73:a3:6e:f3:01:d4:d1:11:f7:a4:82:1c:d8:ae:2a:b1:44:1c:
         95:33:f6:7e:07:cd:80:be:77:f2:87:a8:5d:16:f5:3c:1d:17:
         d8:b7:72:70:b9:0c:f9:a4:90:7a:33:4b:b4:0a:48:75:3d:12:
         85:ca:e9:ac:51:4e:07:1f:88:4c:9a:8f:5b:48:e5:18:e3:c2:
         54:87:ba:7a:59:28:7d:47:fc:b4:42:0b:6b:64:13:35:04:2f:
         a9:5f:83:bd:de:1c:81:8f:c5:bf:5b:16:68:3f:5d:fb:5f:7d:
         ed:62:fe:46
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUGKd64yvKGmzhuY9e0xE7cemsCfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA1MTQxODQ4MzZaFw0yNzA1MTMxODUzMzZaMDMxMTAvBgNV
BAMTKDQyMEI0NDIxNDg2RDRCM0YzRkREQTc4QkVGRENEMDRCMTE0RkEzOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIve4zfBAALGerCT1cIt8HlyGU
fue9DjI9d1aMMiXuh6scWEizF/E3prl221311D/LDToY6ChEvDBmt3qRtjbUmpDM
sJB1eei/CFeX7//W4+JvY3UcyXYKGuKYJlHBvBkNqHM2lUOUD3KZftrK/DlSI1FT
mjop5eclyHWRvvWyjVK9nkO8+EFEk2mKrvFiB02LE6Mh47UrzPfJV/U3vFTctk/M
NZSB8AILRbYDSaCGqDI/wiQ2xgdbmIdvBd5XRQzepX2oS6DJ7viaxA/xpoqb2WhI
Fv/0NEjLpBoE9OinXW56GcvgaO7eM1N94ltJUWkEuJWFfVyqCrXcFzYgU6zbAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCC0QhSG1LPz/d
p4vv3NBLEU+jkTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHU2
UGoyM2ljRExjQ1M2aXZBc2JYZWthV3c1dHVoY3JHM1ZUYVptczRZb0MvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h1
NlBqMjNpY0RMY0NTNml2QXNiWGVrYVd3NXR1aGNyRzNWVGFabXM0WW9DLzAvNDIw
QjQ0MjE0ODZENEIzRjNGRERBNzhCRUZEQ0QwNEIxMTRGQTM5MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQChP/MMA0EAgACMAcDBQAoBCEAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQJTjANBgkqhkiG9w0BAQsFAAOCAQEATJjthWkgSCXFo+qK
U6hGHq+HSPAO/6QmP8OGYT33Daroen+UZhA+9kFbyKcRpNBufrgjo42IYPSOheYp
uIJHB/31I8LqmbjI/HKtd9KmpSghwJMKfsMvODXsSIz0AIdP4iqHuf0QPMVQkdp+
Ha4jgnS0Xq3Ec5AaWhyCMb/WVoFTIJe9ofHKXay72NWixgyTc6Nu8wHU0RH3pIIc
2K4qsUQclTP2fgfNgL538oeoXRb1PB0X2LdycLkM+aSQejNLtApIdT0ShcrprFFO
Bx+ITJqPW0jlGOPCVIe6elkofUf8tEILa2QTNQQvqV+Dvd4cgY/Fv1sWaD9d+199
7WL+Rg==
-----END CERTIFICATE-----
Generated at Sun May 24 17:57:35 2026 by rpki-client