Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3.cer
File:                     6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3.cer (raw, json)
Hash identifier:          Fp2pI8y7SYQgJ1dsjcVVc0QS9IcKOGanDf2nba5iBoQ=
Subject key identifier:   6E:9A:03:15:72:EE:E6:64:CB:FF:8D:2B:95:6E:FE:DC:6F:50:38:C3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65D7BE6F6EE7E86F96C83B84C1C8E2DE6F537544
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Apr 2026 20:52:45 +0000
Certificate not after:    Wed 07 Apr 2027 20:57:45 +0000
Subordinate resources:    AS: 268955
                          IP: 45.176.224.0/22
                          IP: 131.108.248.0/22
                          IP: 143.208.0.0/22
                          IP: 2804:5d2c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 10:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d7:be:6f:6e:e7:e8:6f:96:c8:3b:84:c1:c8:e2:de:6f:53:75:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  8 20:52:45 2026 GMT
            Not After : Apr  7 20:57:45 2027 GMT
        Subject: CN=6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:42:4f:09:1c:39:be:3d:c5:83:d8:7c:9c:
                    ec:d5:3f:13:75:f2:05:de:0d:ee:83:db:e8:17:9b:
                    36:42:c8:55:a6:d2:8e:e5:db:23:51:e8:55:32:a9:
                    a5:ba:44:89:77:a3:aa:48:7c:3f:b0:2f:40:dc:78:
                    8b:8f:d6:2f:c2:e3:b7:bc:b7:e9:db:d4:45:8a:a0:
                    24:f9:f9:dd:28:69:06:1a:16:be:6e:53:92:ec:e1:
                    a7:d1:2c:f7:ca:c0:82:c7:80:19:43:bd:03:fd:ac:
                    01:fe:dd:fa:96:f4:7a:9c:d2:4c:4c:d3:4a:d5:11:
                    12:6b:c2:90:09:ab:db:bc:16:ea:58:67:8e:e1:09:
                    7d:e6:4e:24:b0:ee:7b:db:a7:d6:fc:cb:14:bc:ae:
                    57:54:2b:18:a2:ec:45:eb:8b:5b:e9:90:0f:87:14:
                    d4:00:a5:62:7c:df:46:ff:25:bb:7c:35:e6:f3:5b:
                    a4:77:99:6a:37:ae:85:65:95:d6:83:39:50:d2:6a:
                    cc:a7:d8:91:16:1d:30:71:de:5e:32:35:9a:36:85:
                    a3:f7:92:f5:30:99:12:68:5a:81:61:59:85:32:94:
                    f3:48:8a:2d:7d:fd:3b:2e:31:a1:4d:8b:c2:ec:8b:
                    1c:3c:71:d4:0f:a1:fc:ea:d9:d6:2c:79:01:7c:5c:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:9A:03:15:72:EE:E6:64:CB:FF:8D:2B:95:6E:FE:DC:6F:50:38:C3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.224.0/22
                  131.108.248.0/22
                  143.208.0.0/22
                IPv6:
                  2804:5d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268955

    Signature Algorithm: sha256WithRSAEncryption
         72:dd:2f:1b:52:18:83:0a:fe:ab:97:c7:37:fe:f4:e8:84:d8:
         42:70:c4:0e:2a:54:24:18:e3:bb:9c:9c:11:d9:f7:e4:26:42:
         83:f3:9a:cf:22:33:b7:32:9c:a1:f1:4b:7b:7f:44:3d:20:50:
         81:85:e4:79:d9:1c:ec:2d:fe:a4:c3:46:31:89:f4:66:d6:a3:
         aa:98:a4:c6:6c:f1:58:37:45:de:95:bf:58:0e:5b:a3:cb:c7:
         1c:bc:38:3b:22:04:af:49:4b:d9:2d:5e:4c:27:ec:5a:9b:c8:
         7b:b2:df:4a:5d:ed:d1:01:9e:28:5b:0d:80:a6:52:f9:00:b4:
         6d:95:32:e5:86:df:b2:dc:89:3a:81:8b:1d:4e:f9:af:19:67:
         ad:df:54:25:9a:30:68:d7:83:30:05:00:24:f0:80:b7:b4:6d:
         de:8e:d0:ff:06:a6:03:1f:f9:97:fe:54:95:b6:dc:e8:03:74:
         45:a7:04:46:b9:6b:20:ac:f7:ac:63:72:25:f1:8d:ff:d6:88:
         fe:96:4e:51:ee:4e:68:ef:fb:2c:2c:f7:cf:d9:fd:7c:c1:09:
         e9:ca:c0:72:01:ac:ec:c3:c2:75:51:e8:c3:ae:8d:7f:31:d0:
         b5:3e:03:15:84:e3:9b:76:26:68:7c:38:0d:d9:f9:39:50:3e:
         8c:f5:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:07:20 2026 by rpki-client