Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/3A3D2609778D05CEA63F0BA35CBB1465F2C3792E.cer
File:                     3A3D2609778D05CEA63F0BA35CBB1465F2C3792E.cer (raw, json)
Hash identifier:          LULjsr5kWDZbJNVOUiphxN9yE11E+C0Ms9qmi2cDfrU=
Subject key identifier:   3A:3D:26:09:77:8D:05:CE:A6:3F:0B:A3:5C:BB:14:65:F2:C3:79:2E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E678E3560F3BD80E24C6AF008FA8DB5A64A575D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/3A3D2609778D05CEA63F0BA35CBB1465F2C3792E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Sep 2026 14:38:55 +0000
Certificate not after:    Thu 02 Sep 2027 14:43:55 +0000
Subordinate resources:    AS: 270398
                          IP: 189.126.10.0/23
                          IP: 2804:6b68::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 19:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:67:8e:35:60:f3:bd:80:e2:4c:6a:f0:08:fa:8d:b5:a6:4a:57:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  3 14:38:55 2026 GMT
            Not After : Sep  2 14:43:55 2027 GMT
        Subject: CN=3A3D2609778D05CEA63F0BA35CBB1465F2C3792E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:67:04:e6:6c:cb:7c:26:70:99:0b:56:99:
                    36:ec:09:d9:c3:b0:7b:ce:f5:f5:55:8b:49:65:a8:
                    d7:28:a0:3e:c4:57:9b:20:3e:3e:1a:7a:0b:49:a8:
                    3a:b9:c6:fd:2c:52:48:71:f2:fb:9b:0b:5d:35:99:
                    57:f8:c3:1e:91:4e:e0:0a:78:16:9a:9f:87:47:bb:
                    a5:45:13:a9:ef:2d:21:95:db:01:9b:4d:89:45:7c:
                    56:6d:64:5c:65:07:0e:06:34:f6:f1:88:d0:c7:a1:
                    c0:c5:6b:70:60:bf:04:5e:c9:48:74:30:ef:50:ec:
                    9a:85:91:81:96:ee:3f:74:32:21:54:a1:bc:ef:ed:
                    df:ea:55:ef:0f:46:7c:a6:2e:96:eb:b5:91:bd:d3:
                    de:b3:9e:86:7f:59:50:2a:9b:63:d3:0c:4c:f1:40:
                    d9:f5:75:b2:a9:fd:5e:11:ae:a2:a3:95:a6:4e:51:
                    85:da:78:24:05:2a:2e:3b:3b:0a:0f:6f:1c:2b:c9:
                    0b:e8:15:d7:fe:e5:e4:58:d6:85:ae:4e:41:74:ce:
                    a2:b7:27:11:97:df:ff:26:1e:07:2f:32:89:fd:c3:
                    42:6d:56:89:b0:e0:fa:44:1f:a0:0c:a9:09:f3:36:
                    be:5c:eb:fa:4d:e1:06:5c:98:91:1d:f7:ac:32:19:
                    4e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:3D:26:09:77:8D:05:CE:A6:3F:0B:A3:5C:BB:14:65:F2:C3:79:2E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/3A3D2609778D05CEA63F0BA35CBB1465F2C3792E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.10.0/23
                IPv6:
                  2804:6b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270398

    Signature Algorithm: sha256WithRSAEncryption
         c9:cb:1b:eb:46:f6:c7:7b:0e:12:a8:c2:6b:ed:4e:3d:ad:1f:
         68:d1:d0:11:76:a9:b9:b7:64:c9:15:fe:48:f6:4a:f9:c7:8f:
         15:ab:fe:02:a3:5b:7f:74:be:e9:85:6f:69:8e:99:8c:9f:68:
         44:2a:0b:a5:42:6a:bc:ab:74:23:17:70:15:dd:92:fe:99:2b:
         a9:11:20:56:f5:8d:17:dd:5e:0f:6c:9e:51:1c:9b:24:f2:f5:
         11:e9:c5:0f:99:e1:b8:7d:6c:56:fb:15:8f:ea:ec:0d:33:f7:
         7b:74:53:49:77:5f:29:0b:7a:a2:d1:ac:13:29:75:53:60:ca:
         8b:35:0c:a4:5d:4e:f0:13:fd:05:47:02:a0:0c:7e:74:e8:51:
         a9:d6:93:01:13:7a:aa:ea:cc:08:dc:68:bd:6f:5f:0e:4d:f5:
         1c:e1:9c:4d:77:2d:fa:43:ed:2b:fd:20:e3:01:ba:bd:f6:80:
         9b:0b:e7:f7:68:48:9a:04:b0:16:4b:ed:3e:b9:8a:98:8e:6d:
         5f:3e:7d:0d:4b:0c:e8:c1:75:e0:82:26:de:6b:ea:5f:68:cc:
         e5:09:0c:b0:92:28:fb:f7:d1:fa:e8:97:4a:95:8e:84:79:28:
         0e:3f:c3:7c:b4:d5:45:fe:32:86:d6:a2:08:2d:61:f6:d5:59:
         de:50:4d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:19:31 2026 by rpki-client