Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/6693C2DEAC1B9BF5C83986AD195909D70F9074A9.cer
File:                     6693C2DEAC1B9BF5C83986AD195909D70F9074A9.cer (raw, json)
Hash identifier:          iHjRv4FRUOjsUba19FQJWIxIOK9FF1YsOZX+P2zOBqc=
Subject key identifier:   66:93:C2:DE:AC:1B:9B:F5:C8:39:86:AD:19:59:09:D7:0F:90:74:A9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       357E3CA50EE2C5F90CCAFC199BADDA39FBF9DE8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CqxweLovXk6nDULaTwqZ8ByZYpUH3fkFEKZ2rHiBwWi9/0/6693C2DEAC1B9BF5C83986AD195909D70F9074A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CqxweLovXk6nDULaTwqZ8ByZYpUH3fkFEKZ2rHiBwWi9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Aug 2026 22:43:17 +0000
Certificate not after:    Tue 03 Aug 2027 22:48:17 +0000
Subordinate resources:    AS: 28592
                          AS: 61696
                          IP: 138.36.232.0/22
                          IP: 177.128.228.0/22
                          IP: 201.140.248.0/22
                          IP: 2804:1ae0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7e:3c:a5:0e:e2:c5:f9:0c:ca:fc:19:9b:ad:da:39:fb:f9:de:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  4 22:43:17 2026 GMT
            Not After : Aug  3 22:48:17 2027 GMT
        Subject: CN=6693C2DEAC1B9BF5C83986AD195909D70F9074A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:b3:d5:fb:3a:9f:2d:e8:71:6a:88:99:e7:
                    69:7f:5a:53:91:78:78:08:d1:d2:a3:8d:ce:49:18:
                    df:ec:27:2c:6b:02:35:77:ed:dc:98:6f:d9:2c:ba:
                    1f:9b:8f:8b:75:5f:d2:28:4a:bc:5e:c5:09:d4:62:
                    97:30:3c:51:11:07:8a:47:49:bd:17:a8:e1:82:6f:
                    a8:7d:36:0f:a7:6a:9c:21:58:9b:1d:76:9a:3d:af:
                    5d:ed:4e:97:a0:02:c6:8f:c1:5f:ed:fa:e8:0e:d0:
                    26:30:78:5e:e5:24:af:fe:27:f5:78:ef:17:d6:b0:
                    6d:fc:9f:2b:52:7e:d0:d8:2e:58:0a:4e:2c:70:52:
                    19:6a:0c:f4:8f:e9:78:1d:7b:3a:6c:f9:8b:6c:3f:
                    1b:b4:bd:7c:90:76:5e:c1:23:20:4c:b8:26:10:2d:
                    aa:d3:5d:36:2a:fa:b0:54:c3:bd:2b:3e:ad:13:fb:
                    85:d0:c7:fc:5a:c1:83:fb:57:10:1c:ff:66:7a:61:
                    a0:49:60:23:2a:4e:9b:05:6d:c4:b5:4b:a5:1b:6b:
                    6d:a5:8f:da:3f:57:af:47:13:3b:38:48:03:a2:26:
                    db:78:e3:5e:a0:ac:44:23:48:6a:68:8e:a0:55:28:
                    c2:76:55:92:37:84:5c:db:96:40:4b:2f:40:15:62:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:93:C2:DE:AC:1B:9B:F5:C8:39:86:AD:19:59:09:D7:0F:90:74:A9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CqxweLovXk6nDULaTwqZ8ByZYpUH3fkFEKZ2rHiBwWi9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CqxweLovXk6nDULaTwqZ8ByZYpUH3fkFEKZ2rHiBwWi9/0/6693C2DEAC1B9BF5C83986AD195909D70F9074A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.232.0/22
                  177.128.228.0/22
                  201.140.248.0/22
                IPv6:
                  2804:1ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28592
                  61696

    Signature Algorithm: sha256WithRSAEncryption
         5f:a2:be:03:19:06:74:b3:3c:71:3d:72:f5:12:0a:30:4f:5b:
         54:82:3d:85:09:90:cd:b1:10:ce:81:2f:9e:73:b2:16:24:3d:
         9a:67:b8:0f:75:59:22:74:7b:cf:9a:42:23:5f:4c:e1:85:8e:
         06:ca:83:1a:15:7e:8e:c8:92:36:d9:f0:5a:72:d0:0e:c5:5e:
         fc:be:f0:10:b7:bf:64:88:37:e6:bc:2e:17:b9:9e:25:80:85:
         21:38:22:f6:98:a4:a0:fa:d8:18:63:be:a8:4d:26:7b:05:93:
         d6:cf:c4:a5:54:0e:e3:52:1f:fa:51:14:05:fc:48:71:b3:f5:
         b6:6e:24:9c:41:92:7f:2e:72:72:c0:f4:31:7c:bd:d2:d3:2b:
         ca:e4:76:12:27:fe:51:82:88:8a:48:33:86:2e:72:e0:51:f8:
         0d:c9:55:d5:82:7a:4d:5b:9d:b6:25:c4:a3:40:c5:c6:0b:f4:
         46:b8:60:0b:73:13:21:2d:dc:9b:74:6f:5d:bf:b1:cd:f7:11:
         5a:ca:a5:43:ed:d8:12:db:f8:e9:e4:fe:4f:1d:b7:12:5c:c9:
         38:60:48:e3:b4:97:ef:65:8b:45:bd:c9:e6:b9:12:5d:43:db:
         9b:e3:b7:f4:cf:8e:1a:2d:0d:87:b1:46:fd:e0:b0:4e:51:be:
         5f:5f:27:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 03:00:13 2026 by rpki-client