Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3EB9B14B9DE59370B40E7EDDA54413BF92CFA696.cer
File:                     3EB9B14B9DE59370B40E7EDDA54413BF92CFA696.cer (raw, json)
Hash identifier:          kFysX7QqlsM5L4TL/z/aVZhhJ3KND3Pv8fOxFrHLx10=
Subject key identifier:   3E:B9:B1:4B:9D:E5:93:70:B4:0E:7E:DD:A5:44:13:BF:92:CF:A6:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BE60EE4E4ED1DAE27B9553068D3B9F3ED94BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/3EB9B14B9DE59370B40E7EDDA54413BF92CFA696.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Apr 2026 16:44:30 +0000
Certificate not after:    Thu 08 Apr 2027 16:49:30 +0000
Subordinate resources:    AS: 268430
                          IP: 45.161.0.0/22
                          IP: 2804:5118::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e6:0e:e4:e4:ed:1d:ae:27:b9:55:30:68:d3:b9:f3:ed:94:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  9 16:44:30 2026 GMT
            Not After : Apr  8 16:49:30 2027 GMT
        Subject: CN=3EB9B14B9DE59370B40E7EDDA54413BF92CFA696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:51:ae:a5:cf:44:56:2d:3f:5a:08:ce:9c:cd:
                    65:ef:33:56:ae:91:be:61:cf:da:b9:c4:59:6e:23:
                    35:4c:bd:af:bc:5f:b2:56:b7:f8:77:9b:be:89:d7:
                    b7:89:7a:a6:2d:a9:4d:a1:29:24:da:07:0d:4b:f7:
                    de:02:8d:ad:e4:15:07:c1:6e:0a:4f:57:30:3a:57:
                    01:84:e3:62:98:a6:c7:cc:4c:c0:75:fd:f2:55:c2:
                    28:f4:9b:07:24:f8:43:c8:a7:8c:43:52:96:04:54:
                    14:ca:48:11:1b:bd:1a:a3:d4:97:bf:93:c1:44:89:
                    2d:74:c3:57:3b:56:86:5e:5a:47:b4:09:1b:3a:55:
                    af:fb:f9:3d:d4:20:34:8c:d3:ef:9d:70:d2:ca:a1:
                    fd:b9:85:7f:3d:4e:4f:fe:f8:46:ec:48:f3:70:20:
                    90:b9:10:c0:ff:df:de:77:0c:16:1a:f4:ea:a7:1d:
                    51:71:82:b6:45:2a:e1:31:f4:0c:27:8c:8b:fc:2a:
                    84:a6:14:2b:80:f0:21:71:09:f6:77:38:c4:5d:76:
                    d1:1f:04:55:03:a6:25:e9:76:fe:39:b5:bc:56:2b:
                    b0:c8:98:fb:d8:9b:cf:b6:bb:08:53:c9:c4:5d:5d:
                    9d:a2:59:79:aa:34:fc:87:41:2a:11:b7:d1:47:d1:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:B9:B1:4B:9D:E5:93:70:B4:0E:7E:DD:A5:44:13:BF:92:CF:A6:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/3EB9B14B9DE59370B40E7EDDA54413BF92CFA696.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.0.0/22
                IPv6:
                  2804:5118::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268430

    Signature Algorithm: sha256WithRSAEncryption
         3c:f9:69:19:5e:86:73:4a:b6:7d:c3:c3:1e:b8:3e:b6:f6:19:
         9a:f7:71:6a:57:9e:d9:9f:23:bd:07:00:5d:be:56:b6:f6:5f:
         66:20:e7:d7:72:9d:6d:aa:1e:d6:28:c2:28:bc:6b:9d:bc:54:
         1e:01:ce:53:7f:a2:b4:dd:16:f2:5c:f7:12:f3:82:c3:7a:dd:
         5a:70:70:49:cf:c6:c8:f9:ec:a5:25:94:f4:7d:ec:52:d2:f5:
         97:d8:49:ee:28:f4:ba:cf:72:65:78:8f:65:fe:99:d1:31:24:
         03:3b:31:90:c7:7e:86:d3:b4:8f:9c:99:3b:e5:83:c9:94:0b:
         98:66:b1:09:24:97:91:53:b1:8a:0d:ab:a1:1b:9e:01:52:ea:
         27:09:81:4f:53:7b:60:60:92:46:41:75:26:7f:32:93:5c:87:
         58:23:0d:29:5e:60:a7:c0:4f:30:49:96:84:b2:ec:b5:eb:f2:
         47:61:f6:00:25:1f:fb:75:1f:de:09:51:47:89:00:69:f1:1a:
         7d:03:bd:e8:50:5e:07:64:ab:e9:4d:f8:c8:dc:d8:ba:1b:03:
         27:b3:65:56:34:71:b4:45:45:96:ae:62:7d:b7:e0:f2:ac:ff:
         c0:bb:df:22:5c:6c:cc:cd:2d:a5:01:dc:71:62:af:40:86:2e:
         07:72:12:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:32:50 2026 by rpki-client