Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
File:                     34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer (raw, json)
Hash identifier:          vqgkzR+ikRy1Q6nrVCFv8Zlid3JNPWP5+yTzVd6A6Io=
Subject key identifier:   34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D67D819AD1EA7A715A50514DB6A08FBE6F959D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 May 2026 14:29:40 +0000
Certificate not after:    Wed 26 May 2027 14:34:40 +0000
Subordinate resources:    AS: 28349
                          AS: 28647
                          AS: 53008
                          AS: 53067
                          AS: 53143
                          AS: 262420
                          AS: 265021
                          AS: 266206
                          AS: 267203
                          AS: 267452
                          AS: 267484
                          IP: 45.161.148.0/22
                          IP: 45.163.96.0/22
                          IP: 45.179.0.0/22
                          IP: 45.187.236.0/22
                          IP: 45.231.136.0/22
                          IP: 131.0.84.0/22
                          IP: 131.100.68.0/22
                          IP: 168.195.236.0/22
                          IP: 170.0.160.0/22
                          IP: 177.84.176.0/21
                          IP: 177.154.64.0/20
                          IP: 177.185.160.0/19
                          IP: 179.107.0.0/21
                          IP: 181.191.76.0/22
                          IP: 186.193.112.0/20
                          IP: 186.194.224.0/20
                          IP: 186.219.96.0/20
                          IP: 187.85.192.0/19
                          IP: 187.86.112.0/20
                          IP: 187.87.64.0/20
                          IP: 189.51.128.0/19
                          IP: 189.113.192.0/20
                          IP: 189.113.216.0/21
                          IP: 189.126.160.0/19
                          IP: 200.71.68.0/22
                          IP: 201.76.224.0/19
                          IP: 2804:554::/32
                          IP: 2804:a50::/32
                          IP: 2804:b1c::/32
                          IP: 2804:e50::/32
                          IP: 2804:1a68::/32
                          IP: 2804:3184::/32
                          IP: 2804:3c5c::/32
                          IP: 2804:41b8::/32
                          IP: 2804:4230::/32
                          IP: 2804:49c8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:67:d8:19:ad:1e:a7:a7:15:a5:05:14:db:6a:08:fb:e6:f9:59:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 27 14:29:40 2026 GMT
            Not After : May 26 14:34:40 2027 GMT
        Subject: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:2c:14:2a:de:49:c1:67:3a:e6:71:f6:5d:
                    22:ba:00:e2:ff:d9:d7:78:2a:36:07:94:af:08:45:
                    3c:bb:3b:29:8b:12:0e:f0:03:b2:5f:d3:a2:82:ed:
                    eb:d3:b1:74:bc:b1:98:a8:34:35:16:e7:43:75:26:
                    7d:29:85:36:da:63:f9:8f:6f:b4:3b:1d:8c:b7:50:
                    fb:f9:08:7f:94:29:ef:42:79:5a:52:44:88:bf:ee:
                    54:cd:0d:e9:c0:24:30:60:ca:01:81:08:8f:f9:f6:
                    7e:cd:94:c0:57:9b:77:f3:3e:46:57:0f:23:b0:93:
                    01:7e:e9:d2:08:16:a4:d1:6a:f2:94:87:3c:11:d0:
                    87:d3:bc:e7:95:f7:e7:8c:92:23:d3:5e:6c:20:c7:
                    e5:c4:eb:8e:15:24:19:61:f0:e6:a4:62:b2:1c:0f:
                    a0:c4:20:f5:a1:6b:eb:0d:11:b6:49:1a:30:8c:b5:
                    ec:15:58:f3:e9:e2:b0:e1:7c:32:4a:fe:67:d3:af:
                    be:7a:2b:0d:5f:2b:8d:11:30:bf:b0:33:57:3a:dc:
                    20:0f:0f:94:73:b3:8f:a9:85:c2:7b:98:e9:03:72:
                    af:b2:77:7f:03:de:0a:21:78:d4:24:c9:cb:75:3f:
                    4e:90:e5:38:cd:63:3a:1d:9f:b8:92:22:73:82:9e:
                    6f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.148.0/22
                  45.163.96.0/22
                  45.179.0.0/22
                  45.187.236.0/22
                  45.231.136.0/22
                  131.0.84.0/22
                  131.100.68.0/22
                  168.195.236.0/22
                  170.0.160.0/22
                  177.84.176.0/21
                  177.154.64.0/20
                  177.185.160.0/19
                  179.107.0.0/21
                  181.191.76.0/22
                  186.193.112.0/20
                  186.194.224.0/20
                  186.219.96.0/20
                  187.85.192.0/19
                  187.86.112.0/20
                  187.87.64.0/20
                  189.51.128.0/19
                  189.113.192.0/20
                  189.113.216.0/21
                  189.126.160.0/19
                  200.71.68.0/22
                  201.76.224.0/19
                IPv6:
                  2804:554::/32
                  2804:a50::/32
                  2804:b1c::/32
                  2804:e50::/32
                  2804:1a68::/32
                  2804:3184::/32
                  2804:3c5c::/32
                  2804:41b8::/32
                  2804:4230::/32
                  2804:49c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28349
                  28647
                  53008
                  53067
                  53143
                  262420
                  265021
                  266206
                  267203
                  267452
                  267484

    Signature Algorithm: sha256WithRSAEncryption
         a8:8c:1d:26:7b:68:a9:a4:2c:60:9b:e9:9e:7a:d5:b0:51:a3:
         f7:6a:b1:e9:b5:7e:a5:52:3a:23:e1:b7:6b:cb:4f:6f:1a:b1:
         17:0a:d5:8c:84:4a:fc:da:32:a4:9a:7d:c9:63:16:57:a6:22:
         f7:b3:5f:db:91:91:30:59:57:cc:14:6c:71:eb:05:f8:e5:32:
         a2:c0:33:2b:9a:01:54:1d:9e:67:e7:d1:a6:44:3d:29:57:a8:
         4d:18:77:73:d8:43:8f:7c:41:77:20:c1:0c:ca:9f:82:77:f2:
         be:9f:5d:11:8c:7f:14:af:ec:a4:54:a8:ba:89:60:ff:da:b1:
         be:6f:47:5c:f6:7f:55:db:85:8d:9d:b8:28:94:b4:7e:e3:8d:
         c9:27:e0:ae:74:81:e6:81:d8:b0:32:ab:b5:f3:ab:47:b6:b4:
         20:0c:dc:55:bb:1e:58:20:3e:66:49:43:dd:e8:0a:0f:da:a9:
         a9:69:5f:bc:12:60:54:37:98:81:33:bc:2a:f5:3f:81:c3:b5:
         6c:24:9b:90:b3:80:e9:91:90:76:e7:44:5e:a7:1b:e7:8e:98:
         88:c6:e4:09:6b:e0:c2:8a:28:d6:57:03:45:8e:de:2e:eb:77:
         3a:7e:f5:d2:11:b4:87:9c:f0:e8:d6:85:d4:1c:4f:95:3e:08:
         dd:c9:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:42:18 2026 by rpki-client