Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer
File:                     F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer (raw, json)
Hash identifier:          BIMbhcQpjz5HCyOa0l6RfZerEQ4hDimG4lOEah9J/7E=
Subject key identifier:   F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       23FF4999EA64B0B0C4B0FCFDC62B550D7455766F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Apr 2026 22:36:33 +0000
Certificate not after:    Sat 03 Apr 2027 22:41:33 +0000
Subordinate resources:    AS: 264591
                          IP: 138.36.200.0/22
                          IP: 2804:2218::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 10:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ff:49:99:ea:64:b0:b0:c4:b0:fc:fd:c6:2b:55:0d:74:55:76:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:36:33 2026 GMT
            Not After : Apr  3 22:41:33 2027 GMT
        Subject: CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:85:eb:bb:90:39:ee:0f:09:ff:bc:2a:2f:
                    52:a9:31:be:e1:06:ca:33:c5:b1:1a:ef:90:73:94:
                    c3:ee:64:9f:01:f6:c3:36:c5:98:87:e3:41:89:33:
                    2a:fe:a6:5e:4d:dd:13:54:5f:16:d2:99:bd:28:a4:
                    05:a5:cb:48:70:be:14:ce:c5:f7:38:cc:c5:24:73:
                    fd:8e:e7:37:55:97:01:1b:5f:28:15:de:3b:14:dc:
                    86:b2:2b:3a:ed:67:13:15:df:1e:76:58:de:2a:fe:
                    7a:3a:11:32:c4:c0:fe:f0:7a:96:84:19:9d:e8:ca:
                    da:d5:17:df:c6:4f:29:8d:4b:a4:9c:4e:1f:07:ad:
                    5b:0b:8c:63:78:2e:64:fe:a0:e4:57:d4:38:12:06:
                    6e:03:aa:08:3e:3a:f0:db:a7:23:0d:4a:bc:86:a4:
                    1b:c0:80:50:4c:9a:c4:ee:ca:61:85:f5:5f:d6:9a:
                    da:83:ec:ae:98:71:57:0c:11:86:22:0c:00:4a:67:
                    8f:96:ad:35:ee:4c:8a:62:f2:85:0c:56:37:93:8c:
                    a0:62:97:46:f5:0b:4d:fa:21:1a:56:62:ab:59:34:
                    9d:78:ff:c1:ba:0f:ae:08:b1:c2:12:82:30:35:d1:
                    12:18:9a:4e:c6:86:ef:14:4c:ca:22:7a:42:b0:37:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.200.0/22
                IPv6:
                  2804:2218::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264591

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:15:2e:8b:e9:4b:77:b8:b9:94:f0:6a:fa:bd:03:36:ef:
         5a:a2:6f:c0:7a:cb:10:f6:99:f7:c0:6e:8a:fe:a2:ca:ad:7d:
         a4:84:c8:2b:e4:86:c0:e1:5c:4f:b3:15:6f:1a:1a:25:f6:3d:
         22:5b:67:a0:71:f4:d5:be:ce:73:ef:97:25:7d:6a:4d:20:04:
         13:5a:25:fa:79:0c:ec:7f:de:ef:30:16:10:6a:9a:bc:d9:46:
         ae:36:07:02:39:5c:7d:85:00:f7:ac:3c:ab:40:d3:d1:85:94:
         12:2d:a4:3a:4c:98:26:d2:4d:f6:d5:85:b8:55:7e:a1:8c:6b:
         42:13:69:22:94:2b:0d:1f:cd:f9:34:ce:ce:59:ae:e9:1d:65:
         48:b7:29:ab:d6:98:10:74:b2:70:1e:36:56:6a:cc:0f:e9:49:
         50:f3:1a:bf:40:2b:4e:23:f0:88:65:16:ce:40:07:6d:ec:2f:
         1c:3a:aa:65:b1:14:a0:4d:e9:06:0c:9e:bc:de:f5:56:f1:e9:
         37:e5:a3:81:05:21:af:5f:4f:3b:98:03:e5:ad:0a:ec:fb:89:
         b1:ae:02:ba:e2:55:4a:52:2f:68:7f:33:a1:95:19:7d:8e:ae:
         90:a6:be:92:f4:c5:7e:e2:8c:b4:5d:5f:18:ca:c3:49:ef:88:
         4c:f0:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:10:54 2026 by rpki-client