Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer
File:                     C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer (raw, json)
Hash identifier:          ij32noV/C+5T83APORjZr5urOrTFS9PDaJ7EvMGzIdg=
Subject key identifier:   C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30E06B6DA3D6471CD70AABA5C9DA64BEBC458640
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Aug 2026 06:47:54 +0000
Certificate not after:    Thu 12 Aug 2027 06:52:54 +0000
Subordinate resources:    AS: 268047
                          IP: 45.168.4.0/22
                          IP: 2804:5724::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 07:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e0:6b:6d:a3:d6:47:1c:d7:0a:ab:a5:c9:da:64:be:bc:45:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 13 06:47:54 2026 GMT
            Not After : Aug 12 06:52:54 2027 GMT
        Subject: CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:47:8c:c8:64:f0:74:96:8b:80:a3:10:9d:
                    37:bd:e7:d7:06:cf:a9:80:cb:80:db:50:57:95:c4:
                    fe:ff:2d:1b:8b:5b:50:56:d2:ac:ec:cd:ac:11:88:
                    5f:4a:cf:1f:8a:4d:2b:8c:05:5f:7e:2b:f8:b3:8f:
                    5d:22:02:56:0a:a4:56:1f:44:72:f3:fe:fc:fc:19:
                    b0:a7:e3:78:15:55:ce:8f:7a:56:46:af:de:2f:32:
                    c6:da:7a:55:ea:83:8e:1e:c3:8e:6f:a1:0e:6c:d7:
                    bd:5c:bb:b8:e6:bf:01:0a:63:33:51:f5:e9:db:13:
                    60:3f:40:f2:fb:49:be:27:17:09:ae:d0:c7:e3:4d:
                    b9:c3:31:1e:0e:ee:b1:a6:8e:c2:ef:04:d2:91:b6:
                    ab:21:59:48:7c:29:75:07:ff:39:dc:f3:e4:a6:0e:
                    77:8f:fb:c7:30:d4:2a:8f:b7:a3:64:7d:3b:f8:e6:
                    c9:93:a0:73:af:2f:19:ca:cc:90:b0:c3:35:0a:bf:
                    95:60:ad:55:66:b3:8f:8d:a2:d1:4f:87:66:6b:98:
                    05:22:04:e9:9f:97:6d:91:ec:2d:42:fa:a7:11:9a:
                    13:ad:67:3f:3f:eb:d2:a7:ed:81:a6:18:c2:71:a5:
                    d3:a2:61:75:87:ae:cd:21:5c:7f:3d:87:06:43:43:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.4.0/22
                IPv6:
                  2804:5724::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268047

    Signature Algorithm: sha256WithRSAEncryption
         cd:f8:aa:74:33:a9:7e:77:af:26:64:c9:31:d6:e7:f9:cf:2d:
         57:8e:7d:0d:aa:a9:da:72:43:7c:bf:40:2d:68:07:1e:7a:8d:
         0a:30:66:ff:9c:a5:54:4f:68:4f:ef:6c:9a:01:45:11:d6:8e:
         32:6a:df:57:79:7c:65:bf:59:c6:17:1d:d1:9d:15:81:26:d8:
         a4:d4:01:98:28:97:1d:4b:a9:83:3d:b8:14:fc:b2:a5:37:e8:
         9d:f5:13:03:21:e1:d1:87:31:79:da:46:ad:1e:b1:90:24:72:
         14:25:05:09:72:b5:7b:d1:78:9d:fa:a3:ce:db:9a:62:41:d3:
         c2:2b:83:15:b5:d2:f5:a8:e6:f6:48:f2:71:91:da:7d:58:ce:
         6e:9f:b0:0f:75:c1:f5:d1:a2:b6:23:a8:1f:4e:a6:f7:ed:d3:
         27:e5:ce:4f:00:99:e0:8e:5d:9f:55:23:a8:53:ab:90:c2:ec:
         42:55:bd:e3:58:b2:b4:22:89:76:dc:c1:f6:ba:0c:65:a0:53:
         62:01:55:47:31:e6:9b:62:4b:f8:4f:58:3e:a8:1f:16:2d:95:
         be:2a:12:a8:3f:90:f5:58:c0:70:09:03:9a:2c:cd:53:a3:17:
         73:54:3b:64:01:7c:d6:17:b5:02:ae:a2:cc:6c:3c:3b:db:37:
         04:db:cf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:45 2026 by rpki-client