Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.cer
File:                     331A5DDD5E7A3EE354C08E8A7D87875342BC753F.cer (raw, json)
Hash identifier:          Nt60H+r4upqZ5bW2xl0QoS1LBWlnCm2VJ9zkKuZ3TTQ=
Subject key identifier:   33:1A:5D:DD:5E:7A:3E:E3:54:C0:8E:8A:7D:87:87:53:42:BC:75:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7AC8A8F718C3C94AF996644FE4C3E39190143F78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Oct 2026 02:54:42 +0000
Certificate not after:    Thu 14 Oct 2027 02:59:42 +0000
Subordinate resources:    AS: 270724
                          IP: 45.160.228.0/22
                          IP: 189.51.32.0/22
                          IP: 2804:7064::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c8:a8:f7:18:c3:c9:4a:f9:96:64:4f:e4:c3:e3:91:90:14:3f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 15 02:54:42 2026 GMT
            Not After : Oct 14 02:59:42 2027 GMT
        Subject: CN=331A5DDD5E7A3EE354C08E8A7D87875342BC753F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3a:5f:62:de:b2:c9:95:e8:95:65:de:2c:43:
                    9a:cb:ce:7f:a5:48:86:93:56:5d:93:38:a3:33:a6:
                    bd:c5:3f:5f:7d:55:1a:7b:f1:76:ca:fe:08:32:94:
                    d1:ed:58:52:ac:72:38:2f:d3:b9:7e:f5:86:68:44:
                    8a:23:e2:e0:f0:33:06:de:da:41:e4:73:4a:53:41:
                    80:8d:95:e5:a4:5c:37:d0:fc:5f:14:cc:7e:bf:00:
                    6c:f5:93:e2:a6:cb:eb:e1:9f:df:88:dd:87:96:d5:
                    f1:2f:68:78:8b:64:c9:10:7e:65:f2:ec:db:0a:9c:
                    26:b4:dc:2d:68:7f:00:db:60:39:a9:10:04:4c:d4:
                    ab:94:56:af:97:e8:03:5b:6d:db:6a:fa:75:9b:3c:
                    05:8a:40:a3:11:06:c1:f5:de:03:0f:59:e4:51:7d:
                    07:1f:9d:06:60:54:94:aa:39:e2:3d:3a:da:c2:7c:
                    c4:72:e1:8d:48:42:91:05:88:54:d2:d5:dd:df:fe:
                    b8:dd:b0:99:13:9f:f0:ca:53:ab:a2:14:dd:e8:c4:
                    b2:9c:38:df:44:0e:ec:0c:2e:43:2b:4f:df:93:1d:
                    b1:30:08:04:26:5d:d5:14:9f:9b:5e:cd:dd:35:86:
                    f4:0f:b5:71:41:6d:d0:c5:eb:61:e1:8d:e0:2f:fe:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:1A:5D:DD:5E:7A:3E:E3:54:C0:8E:8A:7D:87:87:53:42:BC:75:3F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.228.0/22
                  189.51.32.0/22
                IPv6:
                  2804:7064::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270724

    Signature Algorithm: sha256WithRSAEncryption
         7c:ca:6e:97:74:cc:c2:f1:22:33:bf:3f:0f:ca:dd:14:16:0c:
         2a:ae:49:90:91:56:af:da:1d:0e:cd:06:5a:d5:a7:99:db:7e:
         94:4a:00:61:bb:e2:90:4c:03:44:8e:1f:ef:3a:c3:d4:da:ca:
         ec:b2:36:ca:87:1f:e4:7d:c1:ce:be:67:f7:de:a7:20:1e:75:
         2a:2c:a2:c6:d2:56:55:f1:50:9f:2b:30:25:84:6a:07:47:8c:
         6f:5f:98:e0:06:d6:f0:98:92:01:a4:0b:aa:fb:cb:f7:a2:22:
         e3:d0:e9:33:9d:f3:96:48:9f:d1:97:ce:a5:40:fc:aa:c5:c1:
         68:88:0e:9c:d8:e1:d0:62:83:26:cc:5d:f6:e6:57:bd:4f:3a:
         bb:25:9d:da:63:f5:56:22:24:2f:fc:56:16:07:94:19:c3:8f:
         d6:78:55:7f:9b:3e:44:e3:f8:06:05:61:8a:0b:fa:7c:e3:55:
         aa:22:f8:e4:e8:44:14:21:ac:2c:12:74:1a:c2:0d:49:37:5f:
         21:ec:a2:86:c2:97:3f:e4:83:2d:4e:a4:23:58:56:bb:d5:77:
         35:ff:87:59:d4:01:b4:98:d5:13:ce:64:f4:27:4f:fc:07:91:
         66:88:b4:86:9d:fa:d3:8b:01:7e:15:a3:29:00:95:42:9e:6c:
         c3:66:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 07:35:19 2026 by rpki-client