Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B3ED7E94B3B7EBE617B35DD9C6B265A3D57C3ACB.cer
File:                     B3ED7E94B3B7EBE617B35DD9C6B265A3D57C3ACB.cer (raw, json)
Hash identifier:          k1n3KqQ+7L23yeM8Q9y9zLTBx9ozPCU6ydUUTMWUjZU=
Subject key identifier:   B3:ED:7E:94:B3:B7:EB:E6:17:B3:5D:D9:C6:B2:65:A3:D5:7C:3A:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       783E85A0C83163796F7FDE9E685CCE02526CA1A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E65iJXNFaMSnwkEAZmt9vq2CszBa9MP4wy4boHdHhg5Y/0/B3ED7E94B3B7EBE617B35DD9C6B265A3D57C3ACB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E65iJXNFaMSnwkEAZmt9vq2CszBa9MP4wy4boHdHhg5Y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Jul 2026 17:59:43 +0000
Certificate not after:    Fri 02 Jul 2027 18:04:43 +0000
Subordinate resources:    AS: 265317
                          IP: 168.121.96.0/22
                          IP: 2804:2e00::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3e:85:a0:c8:31:63:79:6f:7f:de:9e:68:5c:ce:02:52:6c:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  3 17:59:43 2026 GMT
            Not After : Jul  2 18:04:43 2027 GMT
        Subject: CN=B3ED7E94B3B7EBE617B35DD9C6B265A3D57C3ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1a:ee:f8:87:6b:25:4f:fc:a5:31:23:c2:1e:
                    75:ac:a2:47:73:3b:2d:3f:bf:49:85:9b:60:36:ad:
                    88:e3:4a:3e:1f:1c:6f:14:52:77:16:45:69:53:0b:
                    5a:0f:92:55:55:ff:8b:61:93:ad:79:40:f7:7d:19:
                    b7:10:fd:f9:78:d4:7b:61:84:88:c1:8d:ec:3b:34:
                    5c:e7:39:91:6b:36:24:a4:92:c0:f9:05:5d:ba:09:
                    86:f4:9e:12:21:1f:b0:0e:af:59:f2:b9:2c:03:4c:
                    28:78:de:22:db:bb:97:4a:24:5f:9e:3b:68:f7:7d:
                    0e:14:1b:71:72:92:d7:8c:02:6c:ae:00:1e:d0:ca:
                    53:0e:53:35:20:69:02:ed:64:e5:2e:d7:99:76:76:
                    53:07:88:b6:db:cb:6b:fe:76:1a:6a:3c:50:78:d6:
                    c4:60:b5:f2:41:b1:20:69:77:68:93:a6:83:4b:55:
                    b2:4f:6c:45:47:7c:01:77:22:10:12:ca:4e:e2:bc:
                    62:55:3e:c3:7b:3c:0f:52:55:8f:96:ba:ef:b9:17:
                    bd:59:aa:75:cf:4a:ad:ae:12:c0:78:ca:f1:2d:e4:
                    d3:a4:88:08:a2:a7:67:7c:a3:8f:12:37:13:e3:15:
                    fd:92:4f:f1:6f:a3:d3:86:02:cf:d5:47:1f:ba:ff:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:ED:7E:94:B3:B7:EB:E6:17:B3:5D:D9:C6:B2:65:A3:D5:7C:3A:CB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E65iJXNFaMSnwkEAZmt9vq2CszBa9MP4wy4boHdHhg5Y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E65iJXNFaMSnwkEAZmt9vq2CszBa9MP4wy4boHdHhg5Y/0/B3ED7E94B3B7EBE617B35DD9C6B265A3D57C3ACB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.96.0/22
                IPv6:
                  2804:2e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265317

    Signature Algorithm: sha256WithRSAEncryption
         85:ab:d7:1b:78:0d:c0:b5:69:6f:41:85:3c:ed:77:13:b6:f6:
         f6:05:5b:21:b9:2a:25:7b:63:3b:51:8f:17:c1:b9:a8:3c:87:
         fa:45:78:7d:57:6e:2b:b8:21:d0:50:f2:aa:89:70:a4:5a:bf:
         ff:f3:78:f5:23:42:5b:aa:3c:45:e2:3e:4d:da:76:59:3f:1a:
         b1:c7:28:19:e5:b5:c3:e5:68:1d:0b:ab:6e:b7:73:b7:f6:5b:
         58:a8:f5:57:d0:5b:00:01:7a:78:15:3e:fb:ae:e0:1e:7e:ad:
         90:ee:d3:b3:95:1c:c2:ae:e4:7b:99:76:6e:4d:1d:b9:85:11:
         f7:12:b0:86:d4:ab:be:88:c4:99:20:6d:5f:79:91:bf:2d:e8:
         c0:be:c3:09:41:79:fa:66:f1:cb:c0:b2:19:52:ed:5c:ff:f5:
         81:01:ad:da:34:06:cc:2c:99:7e:58:0a:6b:d6:b7:4e:a4:f6:
         31:15:81:1c:18:8f:23:0b:04:3e:05:5d:06:ad:5b:f5:b1:39:
         55:c1:ac:6f:ac:f3:d3:1e:67:27:93:05:94:76:df:fd:0b:74:
         0b:bf:7f:23:66:ba:2e:21:25:90:9c:86:b2:36:67:42:ed:f3:
         23:16:89:cf:d8:06:5d:08:97:88:7d:a6:37:df:92:d4:22:46:
         3b:92:6a:9c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUeD6FoMgxY3lvf96eaFzOAlJsoaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA3MDMxNzU5NDNaFw0yNzA3MDIxODA0NDNaMDMxMTAvBgNV
BAMTKEIzRUQ3RTk0QjNCN0VCRTYxN0IzNUREOUM2QjI2NUEzRDU3QzNBQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdGu74h2slT/ylMSPCHnWsokdz
Oy0/v0mFm2A2rYjjSj4fHG8UUncWRWlTC1oPklVV/4thk615QPd9GbcQ/fl41Hth
hIjBjew7NFznOZFrNiSkksD5BV26CYb0nhIhH7AOr1nyuSwDTCh43iLbu5dKJF+e
O2j3fQ4UG3FykteMAmyuAB7QylMOUzUgaQLtZOUu15l2dlMHiLbby2v+dhpqPFB4
1sRgtfJBsSBpd2iTpoNLVbJPbEVHfAF3IhASyk7ivGJVPsN7PA9SVY+Wuu+5F71Z
qnXPSq2uEsB4yvEt5NOkiAiip2d8o48SNxPjFf2ST/Fvo9OGAs/VRx+6/zylAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSz7X6Us7fr5hez
XdnGsmWj1Xw6yzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTY1
aUpYTkZhTVNud2tFQVptdDl2cTJDc3pCYTlNUDR3eTRib0hkSGhnNVkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U2
NWlKWE5GYU1TbndrRUFabXQ5dnEyQ3N6QmE5TVA0d3k0Ym9IZEhoZzVZLzAvQjNF
RDdFOTRCM0I3RUJFNjE3QjM1REQ5QzZCMjY1QTNENTdDM0FDQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqHlgMA0EAgACMAcDBQAoBC4AMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQMZTANBgkqhkiG9w0BAQsFAAOCAQEAhavXG3gNwLVpb0GF
PO13E7b29gVbIbkqJXtjO1GPF8G5qDyH+kV4fVduK7gh0FDyqolwpFq///N49SNC
W6o8ReI+Tdp2WT8asccoGeW1w+VoHQurbrdzt/ZbWKj1V9BbAAF6eBU++67gHn6t
kO7Ts5Ucwq7ke5l2bk0duYUR9xKwhtSrvojEmSBtX3mRvy3owL7DCUF5+mbxy8Cy
GVLtXP/1gQGt2jQGzCyZflgKa9a3TqT2MRWBHBiPIwsEPgVdBq1b9bE5VcGsb6zz
0x5nJ5MFlHbf/Qt0C79/I2a6LiElkJyGsjZnQu3zIxaJz9gGXQiXiH2mN9+S1CJG
O5JqnA==
-----END CERTIFICATE-----
Generated at Wed Jul 8 14:20:48 2026 by rpki-client