Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
File:                     601AB4C2CB27698A7EF0684324D416B8646A9B75.cer (raw, json)
Hash identifier:          6dWUAzUcesDQok7IBEhlPzh2elJuLoC10Hg5/DbnHsM=
Subject key identifier:   60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1B0B5FEAF9E9A13945002F6C6FB3F8A21B935D0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Sep 2026 19:07:29 +0000
Certificate not after:    Mon 20 Sep 2027 19:12:29 +0000
Subordinate resources:    AS: 273443
                          IP: 177.21.208.0/20
                          IP: 186.196.68.0/22
                          IP: 186.196.100.0/22
                          IP: 186.226.216.0 -- 186.226.218.255
                          IP: 187.86.20.0/22
                          IP: 2804:8eb4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 04:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0b:5f:ea:f9:e9:a1:39:45:00:2f:6c:6f:b3:f8:a2:1b:93:5d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 21 19:07:29 2026 GMT
            Not After : Sep 20 19:12:29 2027 GMT
        Subject: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:25:85:6c:02:c6:21:ae:65:03:5d:46:09:
                    78:bf:45:e0:99:76:fc:ec:e0:12:7b:c0:61:4e:9c:
                    2e:7b:16:27:cc:f0:e1:18:3a:84:c8:b3:b5:d9:d9:
                    df:db:67:74:ba:4d:6c:ae:e1:4b:91:f5:f2:b0:04:
                    b0:79:af:0a:86:2d:63:02:b2:eb:0d:5d:8c:ba:9d:
                    dd:e9:e7:26:16:c7:96:9e:dd:d6:f3:e3:67:f4:bd:
                    3f:17:f7:43:80:6f:c5:8f:7f:5d:92:40:d9:4a:95:
                    34:80:17:b5:7e:93:b9:25:bc:3c:54:6e:24:0a:7d:
                    1e:52:87:f8:32:e4:35:87:55:1e:89:16:6a:98:39:
                    96:6e:26:a3:09:dc:e4:cb:e4:ac:9f:a9:e6:aa:ea:
                    c7:79:8d:41:67:1a:33:7c:58:e3:42:77:cc:86:e6:
                    82:73:e9:36:65:06:60:5d:bb:fe:3e:b9:f2:4f:2d:
                    52:47:ac:77:3f:88:a8:65:b3:ef:f1:5f:31:2b:ca:
                    ba:77:5f:a5:ca:60:f8:7d:86:c9:c8:b8:0c:1d:13:
                    8f:da:3f:65:93:97:27:37:2a:35:1c:5a:13:96:94:
                    40:15:ad:3b:97:5c:10:ed:da:fa:28:60:53:71:da:
                    2f:0a:65:11:5b:69:6e:3d:ef:c8:c5:c3:1c:38:6c:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.208.0/20
                  186.196.68.0/22
                  186.196.100.0/22
                  186.226.216.0-186.226.218.255
                  187.86.20.0/22
                IPv6:
                  2804:8eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273443

    Signature Algorithm: sha256WithRSAEncryption
         11:fa:b1:13:91:53:d2:b6:eb:80:6e:f4:e8:19:70:09:d4:2b:
         0c:75:06:22:45:73:0d:ec:cc:2d:2e:c8:6d:a5:1e:f9:d6:dc:
         47:9c:7f:94:4e:c0:5d:dc:d3:eb:61:35:c0:07:27:93:77:d1:
         09:84:8b:20:f9:d6:9a:18:c7:32:60:50:c5:08:c9:8a:80:16:
         f7:b3:4b:fb:3f:ce:19:8e:4a:69:cf:0c:d3:ff:4c:34:d0:d9:
         fb:52:74:42:aa:84:f9:0d:27:79:28:07:c5:9f:4d:2a:73:e8:
         25:22:21:23:93:61:f6:86:f0:f1:65:d1:4e:32:f7:fd:5f:a3:
         73:3a:a6:af:62:78:d0:90:07:c5:ca:60:44:53:3e:9b:37:53:
         4a:32:c2:48:ac:c1:b2:5e:54:08:db:cf:8a:45:1f:06:09:d0:
         ad:22:c2:c6:4a:07:2a:5d:5f:b0:a1:23:3a:32:4a:bb:6c:bb:
         4c:91:14:ee:13:fd:c4:3e:72:cd:25:2f:3c:5e:de:c6:42:28:
         0c:41:75:83:7f:1c:07:b1:71:b7:33:a5:c4:f1:e8:70:96:55:
         3b:3b:22:9c:97:a4:d3:0f:d0:6c:95:69:ba:1f:d3:cc:48:7e:
         2b:a1:98:4a:e5:f0:09:d9:a2:85:f4:3f:6a:e0:de:18:eb:e5:
         50:3f:2f:df
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUGwtf6vnpoTlFAC9sb7P4ohuTXQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA5MjExOTA3MjlaFw0yNzA5MjAxOTEyMjlaMDMxMTAvBgNV
BAMTKDYwMUFCNEMyQ0IyNzY5OEE3RUYwNjg0MzI0RDQxNkI4NjQ2QTlCNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQSWFbALGIa5lA11GCXi/ReCZ
dvzs4BJ7wGFOnC57FifM8OEYOoTIs7XZ2d/bZ3S6TWyu4UuR9fKwBLB5rwqGLWMC
susNXYy6nd3p5yYWx5ae3dbz42f0vT8X90OAb8WPf12SQNlKlTSAF7V+k7klvDxU
biQKfR5Sh/gy5DWHVR6JFmqYOZZuJqMJ3OTL5Kyfqeaq6sd5jUFnGjN8WONCd8yG
5oJz6TZlBmBdu/4+ufJPLVJHrHc/iKhls+/xXzEryrp3X6XKYPh9hsnIuAwdE4/a
P2WTlyc3KjUcWhOWlEAVrTuXXBDt2vooYFNx2i8KZRFbaW4978jFwxw4bDPVAgMB
AAGjggNaMIIDVjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRgGrTCyydpin7w
aEMk1Ba4ZGqbdTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDh3
VDJWcFJMeTdHUWVxRFdyWVh4aG04cndDQ2dhYWNaNmZ6Q2RpaUNmRzUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g4
d1QyVnBSTHk3R1FlcURXcllYeGhtOHJ3Q0NnYWFjWjZmekNkaWlDZkc1LzAvNjAx
QUI0QzJDQjI3Njk4QTdFRjA2ODQzMjRENDE2Qjg2NDZBOUI3NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUFBwEH
AQH/BD8wPTAsBAIAATAmAwQEsRXQAwQCusREAwQCusRkMAwDBAO64tgDBAC64toD
BAK7VhQwDQQCAAIwBwMFACgEjrQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCwj
MA0GCSqGSIb3DQEBCwUAA4IBAQAR+rETkVPStuuAbvToGXAJ1CsMdQYiRXMN7Mwt
LshtpR751txHnH+UTsBd3NPrYTXAByeTd9EJhIsg+daaGMcyYFDFCMmKgBb3s0v7
P84ZjkppzwzT/0w00Nn7UnRCqoT5DSd5KAfFn00qc+glIiEjk2H2hvDxZdFOMvf9
X6NzOqavYnjQkAfFymBEUz6bN1NKMsJIrMGyXlQI28+KRR8GCdCtIsLGSgcqXV+w
oSM6Mkq7bLtMkRTuE/3EPnLNJS88Xt7GQigMQXWDfxwHsXG3M6XE8ehwllU7OyKc
l6TTD9BslWm6H9PMSH4roZhK5fAJ2aKF9D9q4N4Y6+VQPy/f
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:29:02 2026 by rpki-client