Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
File:                     91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer (raw, json)
Hash identifier:          K2lyGXfaMeFvYUhcPqvBlbpqMa+KViCruAP7eSoIq4k=
Subject key identifier:   91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F4FFF4ACC5AC325958D97E833A5479BA02BB7D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jun 2026 15:30:55 +0000
Certificate not after:    Mon 28 Jun 2027 15:35:55 +0000
Subordinate resources:    AS: 273490
                          IP: 131.255.100.0/22
                          IP: 138.59.148.0/23
                          IP: 138.204.92.0/22
                          IP: 170.81.170.0/23
                          IP: 177.184.196.0 -- 177.184.203.255
                          IP: 177.222.16.0/21
                          IP: 177.222.28.0/22
                          IP: 187.62.208.0/20
                          IP: 191.240.144.0 -- 191.240.157.255
                          IP: 200.229.228.0 -- 200.229.239.255
                          IP: 2804:8f6c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4f:ff:4a:cc:5a:c3:25:95:8d:97:e8:33:a5:47:9b:a0:2b:b7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 29 15:30:55 2026 GMT
            Not After : Jun 28 15:35:55 2027 GMT
        Subject: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:db:ee:45:f3:cc:4a:64:5f:22:8d:4d:f3:
                    af:3d:6c:e7:92:4c:85:28:ff:f2:e6:f4:99:91:94:
                    03:c1:54:a8:51:fb:09:f6:e1:70:13:dc:2a:87:5d:
                    52:c1:e8:32:8a:2b:11:db:ea:22:a1:14:b7:91:78:
                    49:6c:e2:2a:59:f5:0a:4b:fc:8e:7e:27:df:fc:17:
                    a1:21:84:aa:5a:7d:c7:05:dd:0f:1b:93:18:5d:3d:
                    44:30:d2:f7:97:5e:70:41:f3:f8:b3:02:b4:63:f8:
                    4a:23:ee:91:c3:f2:89:42:e5:96:90:6b:9a:7c:36:
                    4c:53:8d:c1:89:12:89:4a:f6:94:72:ba:34:39:8e:
                    00:29:02:2a:46:9c:7b:33:9a:19:55:12:df:13:21:
                    36:e6:da:6a:32:8e:69:62:a7:42:3c:ab:eb:86:bd:
                    1d:7f:ae:8f:e1:c6:14:df:9d:ac:5c:d6:e5:2f:33:
                    be:dd:f6:b6:00:10:5b:72:e2:d6:14:33:d0:e4:3b:
                    05:b1:ed:dd:f2:92:5f:67:b2:fd:50:4d:e2:54:54:
                    0f:91:6a:53:cb:90:60:cd:95:1a:f1:bc:57:15:f7:
                    67:12:f6:05:5c:ad:cd:4e:7b:d9:bd:91:c2:9c:48:
                    b4:e1:02:e8:60:7a:46:90:7b:eb:41:01:9e:84:93:
                    87:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.100.0/22
                  138.59.148.0/23
                  138.204.92.0/22
                  170.81.170.0/23
                  177.184.196.0-177.184.203.255
                  177.222.16.0/21
                  177.222.28.0/22
                  187.62.208.0/20
                  191.240.144.0-191.240.157.255
                  200.229.228.0-200.229.239.255
                IPv6:
                  2804:8f6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273490

    Signature Algorithm: sha256WithRSAEncryption
         72:03:68:1c:9d:d2:01:69:30:ca:d7:84:3a:40:25:e8:e1:55:
         07:41:ef:cb:03:74:16:a9:ec:d5:dd:c9:e3:24:34:6b:af:b7:
         87:b9:55:ef:6d:f3:5d:19:56:f3:a2:95:58:aa:f1:e2:58:c5:
         e7:1b:05:05:b3:af:80:9b:d1:9f:54:f4:aa:33:b2:bd:f1:5f:
         29:d6:48:d1:0e:e5:66:ab:ff:53:e2:68:09:75:57:19:0d:85:
         9c:36:9d:bc:53:d6:13:a4:a3:5c:f4:5b:d8:23:b5:8f:40:21:
         f3:98:65:e3:42:9d:f3:43:1a:f9:e3:03:e9:09:53:0a:73:cf:
         35:e4:3a:9d:fb:90:70:35:09:34:d6:f0:cd:30:ea:75:24:1d:
         3f:73:10:2d:20:7f:46:22:db:e2:50:33:f0:61:34:37:2f:90:
         97:60:f9:2d:fc:bf:b6:13:21:a8:6c:f1:48:3a:8a:42:61:4f:
         bd:31:39:92:19:6a:4f:9f:05:6d:b5:57:e5:a4:3f:25:f7:79:
         d7:ed:a8:fe:6e:0e:dc:a5:15:07:c0:2f:da:da:ba:b7:87:95:
         9b:8d:eb:78:09:7f:b7:8f:81:98:f4:88:59:e5:41:6f:e2:23:
         e7:4f:22:ef:7c:e7:91:af:4b:b2:68:98:02:02:fa:c9:b3:cf:
         7e:2a:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:21:41 2026 by rpki-client