Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/53BEC138BA48B09E02E2418EF43492F43DCC039D.cer
File:                     53BEC138BA48B09E02E2418EF43492F43DCC039D.cer (raw, json)
Hash identifier:          kmZn4FNpxfkMCDyvQp47cmOqpRwpupPbhLe+qo3xCNg=
Subject key identifier:   53:BE:C1:38:BA:48:B0:9E:02:E2:41:8E:F4:34:92:F4:3D:CC:03:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E96CCE9B35FE251288162005F4440B6BA48FE96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Mar 2026 17:47:34 +0000
Certificate not after:    Mon 29 Mar 2027 17:52:34 +0000
Subordinate resources:    AS: 262407
                          IP: 138.0.92.0/22
                          IP: 177.38.144.0/21
                          IP: 189.76.240.0/20
                          IP: 2804:3f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 12:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:96:cc:e9:b3:5f:e2:51:28:81:62:00:5f:44:40:b6:ba:48:fe:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 30 17:47:34 2026 GMT
            Not After : Mar 29 17:52:34 2027 GMT
        Subject: CN=53BEC138BA48B09E02E2418EF43492F43DCC039D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:11:03:b2:50:5e:30:5a:04:e4:48:5e:c2:
                    36:1d:35:3b:16:3e:35:73:89:39:93:5d:07:28:17:
                    87:b5:4a:40:c3:62:b2:ca:56:a1:a6:af:d4:aa:2f:
                    14:dc:6d:0b:96:e3:7c:5a:9f:64:c9:5d:1d:b1:d2:
                    72:8a:d5:c0:29:77:c7:02:c2:dc:ff:2a:cf:51:c3:
                    60:7f:9e:5d:dc:d1:1a:c8:ea:31:49:41:73:0b:73:
                    ba:aa:25:69:91:29:5b:3e:0a:e9:d8:f9:7e:7c:0c:
                    18:07:c7:6e:25:3b:b0:8c:ec:c5:00:3f:ef:f9:9c:
                    b5:d0:d8:ed:93:c1:ca:55:8c:87:e9:04:39:d6:b9:
                    04:d9:9a:b8:8e:1f:83:be:13:a0:c5:a0:af:1a:59:
                    03:45:3a:08:e9:1f:ac:08:b8:f8:c1:09:08:bc:99:
                    b1:cd:a2:3d:06:5a:c5:7c:e2:8c:27:29:28:f2:e2:
                    9c:37:68:0d:d4:73:c9:3b:3e:70:99:d3:f8:c6:75:
                    bb:8e:5a:ba:bc:d2:6c:20:0f:42:61:cc:4f:3a:3d:
                    0f:65:b8:56:3c:86:e2:92:10:f8:e7:c4:47:52:31:
                    49:83:d4:61:b1:01:5e:1b:f0:53:53:f5:08:b1:d6:
                    ee:9f:45:85:d9:15:03:90:59:69:df:cf:18:5d:32:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:BE:C1:38:BA:48:B0:9E:02:E2:41:8E:F4:34:92:F4:3D:CC:03:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.92.0/22
                  177.38.144.0/21
                  189.76.240.0/20
                IPv6:
                  2804:3f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262407

    Signature Algorithm: sha256WithRSAEncryption
         47:c3:16:82:b5:8d:55:ec:d0:2a:d8:c0:73:04:f4:d9:ee:61:
         8f:55:ef:7e:e6:cf:dd:98:bd:59:64:44:ef:61:c0:3e:a5:55:
         3e:f6:a1:59:82:59:b8:4e:a8:cb:51:db:82:5f:ff:a3:2d:a0:
         7e:7c:f3:81:85:13:6c:ad:a2:a7:1c:e1:4e:d2:5a:e8:74:67:
         a7:a1:81:13:67:ea:fd:a7:2d:67:f3:d2:94:d7:76:1c:bc:7b:
         d0:81:0a:3b:88:aa:23:6d:0d:b2:8a:49:a7:0b:93:10:89:ef:
         43:2a:40:c9:22:dc:a0:65:05:18:98:1d:7d:c2:68:d9:09:64:
         af:9f:6b:ae:e7:b4:98:00:64:cf:47:de:9b:b4:8e:6b:30:c1:
         0b:5f:ca:57:31:e4:2f:ae:20:a1:45:3b:96:86:a2:c8:5c:05:
         ed:9e:63:da:f5:f4:ec:fc:fa:3b:ad:b9:d5:44:22:01:6a:66:
         58:ba:79:b2:76:69:80:c9:4d:d4:17:7f:6d:9b:0c:ba:b8:bb:
         1a:dc:15:d8:3b:9f:81:11:f1:5a:6e:ad:ad:fa:28:73:4c:74:
         da:51:dc:bf:c0:6b:c9:33:0c:67:82:49:78:c0:9d:06:20:85:
         61:d7:f2:e7:2a:ae:1a:de:de:20:74:97:47:63:c6:6d:6b:0b:
         bb:25:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:57:44 2026 by rpki-client