Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer
File:                     44AA67B8361484903B52C5717C3AC07266651DDA.cer (raw, json)
Hash identifier:          6lm/EptAL4c0QN4i7z1aAvjWaa9F2Ha3xQv6se7EPiM=
Subject key identifier:   44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7EFCA399A65F5BD48175CD5F188FBD0E2B8E2CE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 May 2026 14:17:59 +0000
Certificate not after:    Tue 25 May 2027 14:22:59 +0000
Subordinate resources:    AS: 273371
                          IP: 177.91.0.0/22
                          IP: 2804:8da8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fc:a3:99:a6:5f:5b:d4:81:75:cd:5f:18:8f:bd:0e:2b:8e:2c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 26 14:17:59 2026 GMT
            Not After : May 25 14:22:59 2027 GMT
        Subject: CN=44AA67B8361484903B52C5717C3AC07266651DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2a:2d:bc:73:cf:6a:49:11:02:34:af:89:88:
                    92:17:e0:b9:10:8e:f1:36:84:40:15:13:f4:19:e5:
                    a8:14:56:0e:0e:ab:4b:81:f5:1c:44:d1:a6:4b:92:
                    49:d9:82:dc:f8:3e:68:32:87:8b:cd:2e:fe:35:fb:
                    08:be:d0:37:3f:2f:70:18:1a:c2:04:ce:0e:e2:4d:
                    66:7f:c9:25:86:47:ef:f8:e3:bf:f8:35:1e:ef:98:
                    5b:41:f7:2a:18:64:da:e5:d0:2d:2f:ec:9f:52:25:
                    8e:d5:07:b2:41:b6:68:87:61:dc:8c:41:0d:1a:12:
                    bb:da:24:27:85:d8:f2:3a:1b:f6:a9:07:09:18:03:
                    45:74:0c:dc:bf:13:de:67:40:ce:c4:6a:92:5b:7c:
                    c3:2c:85:76:57:2c:d2:cf:c2:c4:c1:82:ef:44:25:
                    9d:44:e2:5d:a2:a2:e1:f1:1b:ce:fd:2c:e1:a3:b1:
                    de:64:2f:24:c8:a5:0d:f1:ab:db:98:2e:6a:74:c2:
                    dc:3e:7e:72:cf:8d:30:fc:24:3b:8b:be:b9:e3:dc:
                    d5:44:32:ee:00:bd:c5:ae:c2:b3:e2:e0:c9:d3:d4:
                    de:83:da:e9:ac:db:63:a9:b2:3a:0b:08:46:3f:d1:
                    49:f3:02:c8:1b:9e:da:0a:a7:4e:7f:37:25:ed:4d:
                    1b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.0.0/22
                IPv6:
                  2804:8da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273371

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:9b:9e:43:29:f6:79:7d:5f:4d:f9:a6:90:83:96:a3:43:
         9c:8e:87:a1:4d:64:a0:8f:ae:39:36:25:33:be:48:d1:2a:cc:
         9b:c9:c2:1d:7b:c7:fa:32:db:7d:8a:ad:be:81:9f:98:75:49:
         63:87:da:b6:86:d6:eb:5e:c2:e0:6e:66:ca:e3:47:19:96:96:
         06:2d:aa:79:7c:6d:c2:71:d2:ab:fb:5b:46:41:b6:ef:99:15:
         03:56:4b:3a:ab:75:e5:ad:f8:c9:d2:44:ab:f5:2e:a4:1f:b4:
         b1:61:40:de:57:83:f4:99:4f:c6:34:93:50:56:ea:f3:6e:67:
         06:8d:a9:5d:4d:c5:b3:53:1d:8b:03:54:f2:6c:c4:96:3d:a0:
         52:2e:60:4c:54:e1:2a:9a:e8:48:84:f5:53:07:a9:2f:c0:62:
         00:b7:32:ef:ff:3a:15:80:9f:19:e6:21:17:e1:34:d6:65:d5:
         d2:2b:6c:f2:c6:30:c4:d2:10:35:f3:a4:8b:bf:35:47:07:99:
         f8:cc:e8:cd:e0:6e:8d:f7:4c:3f:0d:87:45:af:ac:e3:d5:01:
         03:94:9c:5e:1e:8f:85:cd:b0:86:07:d6:f5:e8:39:ab:4b:24:
         9f:05:d9:94:08:44:ad:74:04:7a:47:c9:77:9d:28:8c:2a:ec:
         97:a4:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:07:56 2026 by rpki-client