Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A9061DAE4F9D53D61D68F94D57460E43FB3C39D6.cer
File:                     A9061DAE4F9D53D61D68F94D57460E43FB3C39D6.cer (raw, json)
Hash identifier:          UTSz5o/dTqFBOq3HZaL2ovQj0K9fcjFHQYLrRJH0Vek=
Subject key identifier:   A9:06:1D:AE:4F:9D:53:D6:1D:68:F9:4D:57:46:0E:43:FB:3C:39:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7EEB32E8D2407609C7C65E5124A8F08E298A971F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/A9061DAE4F9D53D61D68F94D57460E43FB3C39D6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Jul 2026 13:04:58 +0000
Certificate not after:    Wed 30 Jun 2027 13:09:58 +0000
Subordinate resources:    AS: 263270
                          IP: 181.233.164.0/22
                          IP: 186.235.60.0/22
                          IP: 2804:1624::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:eb:32:e8:d2:40:76:09:c7:c6:5e:51:24:a8:f0:8e:29:8a:97:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 13:04:58 2026 GMT
            Not After : Jun 30 13:09:58 2027 GMT
        Subject: CN=A9061DAE4F9D53D61D68F94D57460E43FB3C39D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:57:3e:5f:3a:02:cd:db:2c:60:56:e8:77:
                    4b:44:52:87:9b:d1:52:7c:59:72:88:b3:03:2b:8a:
                    b3:53:9c:3c:52:69:ca:9d:09:6b:db:13:5d:7b:c6:
                    51:85:62:a2:0b:e6:26:a9:2a:29:38:59:1a:33:fc:
                    d4:35:19:84:74:cb:83:e9:b2:50:9e:7c:9e:38:6c:
                    15:83:93:5f:fd:af:0b:bb:64:d1:03:82:fd:98:d2:
                    ad:52:bf:ff:1a:ea:04:cf:9c:69:6e:a0:61:4d:2c:
                    34:28:9f:18:6b:f2:94:d8:44:e5:fc:45:eb:4c:b6:
                    64:61:38:5b:11:41:70:c8:31:14:c2:7b:12:85:31:
                    01:3a:49:b8:d7:e4:4a:fb:cc:cb:18:19:5c:ff:66:
                    30:1d:90:3d:19:90:60:81:56:b8:68:94:8d:bf:d0:
                    d5:59:e5:27:5f:80:02:75:2f:8a:b8:d0:41:04:d7:
                    5e:a9:50:b8:2a:50:5b:6c:3d:39:eb:54:27:53:4d:
                    3c:0d:23:8e:12:08:99:82:79:3d:65:68:9b:20:2e:
                    d2:49:7f:93:2e:93:1e:74:23:d4:ee:ed:88:86:0b:
                    6d:66:a2:5f:18:ef:29:1c:a9:5f:cf:c5:af:c6:77:
                    f2:e2:36:ed:19:f0:aa:a5:75:bb:11:07:ea:e1:fb:
                    33:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:06:1D:AE:4F:9D:53:D6:1D:68:F9:4D:57:46:0E:43:FB:3C:39:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/A9061DAE4F9D53D61D68F94D57460E43FB3C39D6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.164.0/22
                  186.235.60.0/22
                IPv6:
                  2804:1624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263270

    Signature Algorithm: sha256WithRSAEncryption
         25:b7:0b:b8:17:0d:ae:30:7b:f0:86:27:fb:0e:f5:e6:39:49:
         22:2e:7b:96:7f:cb:8d:ca:55:6b:50:ff:72:aa:86:76:89:02:
         48:d4:4f:7a:12:cd:f0:d0:2e:bb:16:8f:26:74:72:a9:9a:ee:
         67:7f:78:a9:1e:07:a4:3b:83:49:d8:7b:99:b1:46:97:40:5e:
         92:4c:2b:a0:f1:fa:32:e0:99:b1:a1:a5:12:e4:a5:89:2d:4a:
         a8:10:6e:f5:3e:4d:9c:95:a9:19:46:dd:2d:07:c3:2d:cc:a6:
         d2:1b:1b:7a:e7:3d:60:07:ec:6a:cc:8b:98:25:c4:f2:23:52:
         ae:7c:54:86:d8:db:26:45:ff:de:86:2f:58:ef:6a:a2:59:fb:
         2b:b6:4a:e8:9d:8d:8f:1b:d0:6a:45:91:dd:25:5d:6e:9e:e4:
         f0:a0:97:c0:e4:d0:02:d5:3f:ea:46:5c:50:40:6b:f5:da:08:
         61:a1:c8:18:e3:b6:5d:90:4e:6d:1a:b7:8b:6a:65:31:87:0a:
         82:b4:79:08:2e:29:cd:c1:ca:71:d5:62:32:bb:99:fd:fa:a3:
         35:d5:20:a6:7f:78:12:6f:39:e7:e6:75:c5:3d:2c:4a:b3:22:
         42:14:f2:68:6a:1e:fa:49:1e:28:d3:e0:04:de:7f:dd:bb:c0:
         ba:b1:2e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:20:56 2026 by rpki-client