Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
File:                     237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer (raw, json)
Hash identifier:          iyZ/oRjs1E8C+DHUVsHK5hozckjgyBBor38s8v9ujfo=
Subject key identifier:   23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1BB17EB78C08F0C0344EC6E4602E832556B6CD69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Oct 2026 21:38:48 +0000
Certificate not after:    Sat 09 Oct 2027 21:43:48 +0000
Subordinate resources:    AS: 271607
                          IP: 190.9.104.0/22
                          IP: 2804:7e2c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 19:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b1:7e:b7:8c:08:f0:c0:34:4e:c6:e4:60:2e:83:25:56:b6:cd:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 10 21:38:48 2026 GMT
            Not After : Oct  9 21:43:48 2027 GMT
        Subject: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:01:25:0f:cf:15:60:93:45:91:9a:4f:87:
                    61:f3:62:9d:b3:00:12:34:d7:55:da:07:2b:70:40:
                    02:af:6a:88:44:57:a8:a5:ba:0d:01:0f:ba:f2:e9:
                    47:31:d7:43:aa:18:e7:8d:80:d1:26:13:4a:24:e3:
                    72:cd:6b:77:80:27:46:29:80:a4:b8:fa:d3:0b:80:
                    12:a2:1e:c7:93:b8:6d:d5:e1:a0:99:99:f2:49:ad:
                    05:a5:04:57:39:94:a7:04:b8:fb:67:ca:8f:02:58:
                    f4:a9:57:ae:e6:20:54:0f:35:7b:19:f1:21:8b:17:
                    f6:d4:8e:68:f3:65:39:1f:92:6f:13:34:7a:01:d6:
                    d9:7e:55:a6:19:cf:d6:2b:35:8a:1a:e9:b8:5d:18:
                    15:dd:d7:1d:b7:68:a3:db:5d:67:04:1c:3a:82:9d:
                    94:41:3e:3f:d4:c8:a5:02:41:51:23:ae:de:9a:cf:
                    62:d8:02:55:cc:67:93:3e:c7:56:53:29:c6:50:b4:
                    b2:6c:22:d8:51:8c:3b:16:2c:e6:56:06:13:eb:ac:
                    c1:6d:05:b7:5e:c7:85:93:e5:05:81:d6:45:11:c3:
                    4a:85:3b:52:c3:26:6f:31:83:86:9c:a9:ea:75:ee:
                    79:f1:ec:56:bc:ed:1a:94:f9:4a:fd:80:10:9f:b8:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.104.0/22
                IPv6:
                  2804:7e2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271607

    Signature Algorithm: sha256WithRSAEncryption
         c4:41:d1:2b:dc:a6:d5:63:9a:9b:a6:be:bb:36:e8:8f:b8:41:
         d4:f5:e8:24:88:d6:98:24:3b:8a:b7:3c:df:89:e1:9d:ae:d1:
         6c:57:f4:c4:c1:23:bb:bf:60:c6:bc:4e:53:96:f1:f3:38:8b:
         be:0e:a8:1a:8b:c6:93:01:4f:bb:17:e0:ae:19:bd:38:29:65:
         70:92:85:bc:f6:0c:32:10:5b:06:36:ee:4f:59:57:84:78:a1:
         54:1a:dd:96:d9:d8:50:f7:97:07:ae:23:49:d1:db:eb:c4:f2:
         0d:b4:22:25:e2:18:2b:64:24:2b:f8:a7:86:b4:4e:28:4b:a1:
         15:3a:22:e3:f4:f8:fb:cc:f4:eb:c3:c4:7e:2a:c2:7e:c3:48:
         78:5f:25:28:7b:6a:74:9c:0b:2b:93:99:4b:5b:98:24:b4:19:
         be:c7:de:40:2b:4b:0d:10:ca:fa:94:62:71:74:10:38:63:cd:
         13:2b:29:6f:c0:63:53:67:8e:7b:9c:66:67:ca:c6:28:d7:7b:
         95:8c:f1:0b:88:27:43:c2:6b:28:24:26:77:2b:7d:f2:f0:52:
         1f:ad:ff:13:f5:d0:b3:b0:43:ff:15:e8:9d:28:df:01:05:0e:
         12:5a:73:64:26:d1:00:01:74:cf:ca:73:d1:a4:96:ba:cf:36:
         d4:77:57:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:24:53 2026 by rpki-client