Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
File:                     601AB4C2CB27698A7EF0684324D416B8646A9B75.cer (raw, json)
Hash identifier:          /+jG3tLCpAVQcmUwCoNNvXCZwTckFgE8eWpfohoTaAk=
Subject key identifier:   60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04B2FC3298BF12E14244195606284400AD7713DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Aug 2026 18:04:24 +0000
Certificate not after:    Mon 09 Aug 2027 18:09:24 +0000
Subordinate resources:    AS: 273443
                          IP: 186.196.68.0/22
                          IP: 186.226.216.0 -- 186.226.218.255
                          IP: 187.86.20.0/22
                          IP: 2804:8eb4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b2:fc:32:98:bf:12:e1:42:44:19:56:06:28:44:00:ad:77:13:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 10 18:04:24 2026 GMT
            Not After : Aug  9 18:09:24 2027 GMT
        Subject: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:25:85:6c:02:c6:21:ae:65:03:5d:46:09:
                    78:bf:45:e0:99:76:fc:ec:e0:12:7b:c0:61:4e:9c:
                    2e:7b:16:27:cc:f0:e1:18:3a:84:c8:b3:b5:d9:d9:
                    df:db:67:74:ba:4d:6c:ae:e1:4b:91:f5:f2:b0:04:
                    b0:79:af:0a:86:2d:63:02:b2:eb:0d:5d:8c:ba:9d:
                    dd:e9:e7:26:16:c7:96:9e:dd:d6:f3:e3:67:f4:bd:
                    3f:17:f7:43:80:6f:c5:8f:7f:5d:92:40:d9:4a:95:
                    34:80:17:b5:7e:93:b9:25:bc:3c:54:6e:24:0a:7d:
                    1e:52:87:f8:32:e4:35:87:55:1e:89:16:6a:98:39:
                    96:6e:26:a3:09:dc:e4:cb:e4:ac:9f:a9:e6:aa:ea:
                    c7:79:8d:41:67:1a:33:7c:58:e3:42:77:cc:86:e6:
                    82:73:e9:36:65:06:60:5d:bb:fe:3e:b9:f2:4f:2d:
                    52:47:ac:77:3f:88:a8:65:b3:ef:f1:5f:31:2b:ca:
                    ba:77:5f:a5:ca:60:f8:7d:86:c9:c8:b8:0c:1d:13:
                    8f:da:3f:65:93:97:27:37:2a:35:1c:5a:13:96:94:
                    40:15:ad:3b:97:5c:10:ed:da:fa:28:60:53:71:da:
                    2f:0a:65:11:5b:69:6e:3d:ef:c8:c5:c3:1c:38:6c:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.68.0/22
                  186.226.216.0-186.226.218.255
                  187.86.20.0/22
                IPv6:
                  2804:8eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273443

    Signature Algorithm: sha256WithRSAEncryption
         89:77:50:bd:40:54:0d:55:d7:8c:85:d6:9c:37:f9:41:3d:88:
         b4:61:63:64:ed:66:56:ec:91:80:1d:16:2b:89:17:f3:0a:e6:
         ad:d7:d1:3a:a5:6b:86:70:e4:fa:ba:0e:5e:92:6f:16:db:a8:
         ed:b9:48:81:4f:2f:34:51:83:38:77:3c:4e:1c:b3:84:aa:99:
         f1:2c:bd:b9:1a:4b:a3:66:1a:16:ee:b1:a1:2c:18:ea:ff:f4:
         28:54:e2:fc:36:60:81:d0:32:36:68:cb:92:f0:a3:4a:fc:5a:
         7b:fe:2f:fa:fd:2e:5f:bc:f3:99:c8:c6:88:3d:46:57:1a:e6:
         ab:91:23:d9:51:6e:e5:30:4b:db:79:04:ec:12:a8:f3:46:89:
         9d:80:ad:23:9c:7a:04:a7:f2:91:7a:62:0e:81:c9:bc:73:14:
         34:df:c9:b4:64:48:45:80:07:02:3c:2c:7e:c5:ec:87:b9:fb:
         9e:21:45:f9:80:f1:39:ac:cb:c6:f6:7f:a8:f5:49:b1:92:61:
         85:05:fe:21:93:27:4a:5b:8d:cf:c3:45:1b:f7:8e:80:e0:32:
         05:f0:84:5a:b1:b9:1a:d2:71:0e:9c:60:6b:00:10:97:c8:0d:
         ba:ba:29:63:06:06:f8:cd:40:bc:c0:28:2b:0c:ee:ec:33:d0:
         d2:30:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:28:03 2026 by rpki-client