Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
File:                     BA0000290CCA847B173A7D196F03889806E7091A.cer (raw, json)
Hash identifier:          Kob2t0dLRFvYoDvOKIaVVxtYLueWaRAt22prwsIEqyk=
Subject key identifier:   BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0745360A3222314F84B742A29C4F7BDAFB94DFF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 May 2026 16:08:42 +0000
Certificate not after:    Wed 19 May 2027 16:13:42 +0000
Subordinate resources:    AS: 262758
                          IP: 186.224.240.0/20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 11:08:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:45:36:0a:32:22:31:4f:84:b7:42:a2:9c:4f:7b:da:fb:94:df:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 20 16:08:42 2026 GMT
            Not After : May 19 16:13:42 2027 GMT
        Subject: CN=BA0000290CCA847B173A7D196F03889806E7091A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:ae:da:93:a5:ab:02:fe:14:83:16:74:50:
                    e4:e7:72:58:d4:92:9b:b1:d2:ab:51:a6:02:6c:b8:
                    eb:5a:1c:0e:3b:d6:f4:e5:ce:d5:29:e9:e4:38:c7:
                    17:11:f0:88:81:d6:5a:d7:eb:14:f1:7a:d0:b9:f1:
                    e9:ca:80:6b:27:59:32:e2:be:06:13:14:e5:24:f6:
                    9e:6e:66:d9:a0:a9:50:95:95:c2:86:37:27:5e:af:
                    90:8d:9c:c7:77:6f:5b:40:ab:7e:5f:c2:be:77:f0:
                    84:45:11:e7:80:da:61:f7:ba:c0:3e:67:2b:fd:82:
                    62:cc:fb:2f:58:90:fa:1d:5e:c3:7b:6b:db:b5:8d:
                    82:31:fa:0f:a0:92:58:c3:17:e8:d3:6c:c9:9f:ad:
                    c4:26:33:ee:49:75:67:dd:1d:9a:49:c1:3b:d6:0c:
                    5b:15:0d:bb:71:d1:50:36:7d:89:7c:0d:da:71:f1:
                    27:98:70:b1:8f:72:32:5e:cc:f1:d7:a4:b9:f7:06:
                    d4:fe:5b:73:dd:2a:de:27:12:f8:81:0c:be:16:c1:
                    62:4d:75:06:ad:fa:b9:97:0a:ce:3b:8a:37:63:07:
                    39:aa:20:65:e6:9e:fb:fc:3d:83:9b:3a:4f:cd:06:
                    0b:07:df:61:cc:bc:b1:cf:26:32:e5:0b:d2:ab:fa:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.240.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262758

    Signature Algorithm: sha256WithRSAEncryption
         c6:e9:93:87:7c:65:da:49:39:cb:92:70:16:2b:e1:34:c1:2d:
         0f:38:14:d2:be:ba:c7:64:70:c7:61:32:96:6a:a3:e7:0e:f9:
         02:08:a8:8a:c1:5b:93:d0:7b:5c:11:bc:ed:a8:aa:34:8a:0f:
         bb:0d:65:e7:0e:94:a5:97:be:d8:28:de:70:a7:79:22:a0:87:
         a5:43:0b:81:10:78:5e:80:75:83:7f:4a:f0:b2:c5:88:e8:4f:
         59:af:8a:a4:ce:a0:55:ef:40:34:b6:d7:c1:48:d4:a1:83:e3:
         1c:7c:24:a5:68:06:89:90:64:ab:2b:ca:45:b7:14:9a:66:5d:
         fe:9d:c4:bd:0c:b2:37:43:68:a1:b0:13:c9:08:3c:55:e5:7f:
         85:50:d1:f2:c2:36:60:dc:df:48:dd:ec:c3:8c:cb:ac:01:70:
         00:36:d4:eb:24:32:75:cf:8d:e2:e0:46:0f:3b:d2:5e:db:9e:
         81:b6:5e:98:1c:f2:bb:10:bf:20:e5:c7:d0:d2:6c:5a:98:ba:
         36:18:b6:35:a2:57:38:00:92:a7:3d:45:38:44:b4:7c:5c:aa:
         6e:52:e9:d9:66:14:11:00:99:d5:d5:cc:46:6f:b9:43:51:43:
         31:ea:a1:6a:92:dc:5b:1b:5d:e1:84:1b:a3:71:64:0f:ee:9f:
         a3:d6:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:58:31 2026 by rpki-client