Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.cer
File:                     BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.cer (raw, json)
Hash identifier:          qPkym4eKidCgMxD/xbsU5+PcnZLhKwMGUdWqtHMU7vk=
Subject key identifier:   BE:D7:B3:BC:A3:F9:19:55:C6:BC:27:7E:6A:5B:F0:9E:2D:C7:EC:4D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       27153F0AD97250AAB1992C0609D6F5DD16B64944
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jun 2026 14:35:09 +0000
Certificate not after:    Thu 24 Jun 2027 14:40:09 +0000
Subordinate resources:    AS: 264967
                          IP: 170.0.100.0/22
                          IP: 2804:30a8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:15:3f:0a:d9:72:50:aa:b1:99:2c:06:09:d6:f5:dd:16:b6:49:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 25 14:35:09 2026 GMT
            Not After : Jun 24 14:40:09 2027 GMT
        Subject: CN=BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:37:37:60:08:a6:ac:af:ec:93:7e:89:c9:
                    15:df:d7:5b:fa:82:e5:cb:e9:f4:44:7b:b2:5a:f2:
                    07:3f:d7:3f:22:c8:4c:e1:83:e0:7b:aa:be:b5:bd:
                    17:7d:7e:67:5c:6e:f0:fa:5d:ea:b5:73:a9:fe:69:
                    bb:99:50:ca:cf:25:56:fd:99:e8:b6:c6:b2:6d:e8:
                    76:e9:4c:a4:8b:88:8f:e9:3d:dc:31:5a:e2:e4:05:
                    c3:80:3b:11:d3:5c:38:5f:0d:20:80:27:89:1b:86:
                    c3:e8:e7:61:28:ca:52:b2:85:63:63:62:49:de:5c:
                    a1:08:55:7a:22:7a:a6:7b:e3:79:9e:84:46:7d:4d:
                    11:e5:37:6b:4f:4c:81:bd:b7:26:59:cc:aa:e8:5e:
                    a1:c5:24:14:5d:8e:73:d3:3d:72:b5:fa:ea:a7:73:
                    07:3e:20:3d:23:be:24:a4:d3:33:4c:e5:93:19:1b:
                    d2:36:dd:95:4d:ad:ea:d0:56:39:c9:92:42:ea:36:
                    14:19:63:93:84:f0:18:fd:b3:89:f2:81:82:c1:94:
                    a0:05:cd:22:6d:8f:82:75:81:a2:35:0a:34:e0:30:
                    9c:8c:5a:64:d0:ef:36:6a:41:7d:4f:06:71:62:b9:
                    f6:c0:ea:f5:ab:bc:ef:62:0e:4b:68:ba:ad:8b:3e:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:D7:B3:BC:A3:F9:19:55:C6:BC:27:7E:6A:5B:F0:9E:2D:C7:EC:4D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.100.0/22
                IPv6:
                  2804:30a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264967

    Signature Algorithm: sha256WithRSAEncryption
         48:b5:8e:90:b0:1b:fb:78:0c:4a:44:e6:e0:87:da:10:f1:84:
         ad:bc:9d:bd:b9:49:e5:e5:77:0e:36:ee:91:3a:66:37:c8:65:
         45:ad:de:47:e7:6a:0d:50:fb:c5:bb:8b:17:87:a5:67:2c:c3:
         d0:60:e1:87:24:6c:d3:41:39:c4:b2:55:0f:78:6b:cc:95:5f:
         73:c2:4e:c7:a8:8e:02:fd:e3:59:7b:df:fb:ab:b7:f3:b1:b2:
         e4:d3:91:59:a0:1a:43:09:22:be:24:0a:55:fb:ac:38:66:b0:
         b0:2c:5b:2f:f9:a5:c1:cb:41:5c:eb:f9:ef:5a:34:6e:05:68:
         4f:22:40:66:b0:d8:b6:e5:d1:8f:72:85:80:19:9b:cb:a1:c8:
         d9:a3:17:04:40:fe:9e:a2:51:a7:40:10:e6:e8:27:56:d4:84:
         6b:03:4f:bb:85:60:a5:9c:ca:48:48:97:1f:a8:22:75:60:68:
         89:0a:53:fe:cc:07:8b:8e:52:98:8b:fb:bb:97:d8:65:ee:97:
         d7:30:c7:b2:50:a1:0b:9b:bf:d3:ef:72:44:c6:36:c0:8d:1f:
         71:d2:0b:35:b6:c0:79:30:9b:5f:91:e2:a0:cf:ed:3c:c2:3c:
         c4:e8:d6:a8:d9:c6:51:ab:9c:74:84:c4:92:0b:19:56:e2:39:
         df:89:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:21:03 2026 by rpki-client