Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
File:                     4774D086E10F29F42B699F993DE4061E0FDF8862.cer (raw, json)
Hash identifier:          IJ1NAl/11YGErR0TJ539HuYueiI4n4tzmCwRVGZ6uvE=
Subject key identifier:   47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69064A4E58CCFC1A793B2052310F55647709DF4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 31 May 2026 15:00:32 +0000
Certificate not after:    Sun 30 May 2027 15:05:32 +0000
Subordinate resources:    AS: 262485
                          IP: 138.118.88.0/22
                          IP: 170.238.172.0/22
                          IP: 177.66.0.0/22
                          IP: 191.7.16.0/22
                          IP: 2804:500::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 03:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:06:4a:4e:58:cc:fc:1a:79:3b:20:52:31:0f:55:64:77:09:df:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 31 15:00:32 2026 GMT
            Not After : May 30 15:05:32 2027 GMT
        Subject: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:90:a4:38:c5:2d:3f:c3:1e:97:89:8a:80:50:
                    38:1f:98:3f:6c:a9:71:e3:31:92:3d:1e:96:5a:3d:
                    90:f1:af:27:3b:de:54:41:c1:e1:16:56:55:69:b1:
                    ef:19:25:2a:fb:84:3e:8e:e9:65:46:ec:7d:a8:6c:
                    58:cd:8b:40:6d:f0:51:7f:84:dd:ba:61:0f:2d:ea:
                    c3:6e:32:68:33:d3:2e:d6:53:6e:5b:f5:d5:4e:ea:
                    8f:b2:7d:d5:d8:d9:63:08:8f:9d:57:68:2b:e6:2d:
                    f5:64:a9:29:83:c8:5b:c7:cf:0d:15:62:4f:af:f9:
                    47:a7:49:bf:fa:ec:23:a5:9e:ed:4e:19:5b:c2:27:
                    5a:da:33:d5:bd:a7:52:56:92:c0:85:af:8f:ea:56:
                    9f:f4:0a:e9:85:b0:89:b3:cc:d0:a7:a4:a3:f3:d1:
                    96:42:d4:8a:d2:5e:3b:c1:04:3b:82:b3:be:ff:8d:
                    3c:bd:a7:b4:99:89:71:5a:ea:dc:ad:a4:96:72:ac:
                    89:a0:2a:2b:f2:a3:55:21:a2:e3:3f:b8:ed:f9:4d:
                    76:c3:f8:78:36:e3:ef:bc:b9:b8:a9:5c:78:1c:34:
                    c6:45:45:87:a0:14:71:20:1f:87:d4:38:a7:a8:d0:
                    91:21:c9:69:a5:a4:a4:7b:53:9b:87:ae:11:db:05:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.88.0/22
                  170.238.172.0/22
                  177.66.0.0/22
                  191.7.16.0/22
                IPv6:
                  2804:500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262485

    Signature Algorithm: sha256WithRSAEncryption
         cc:35:54:62:2c:dc:c7:1b:97:ce:4b:8d:cb:6e:25:58:1a:5b:
         9a:77:75:23:98:4d:95:ae:f2:f3:f8:48:32:ca:ae:74:a5:13:
         77:9f:97:4c:35:42:14:bc:f7:a6:cd:de:1b:be:97:2b:08:d6:
         5a:c9:cc:3f:31:a3:ab:32:98:f7:f0:38:55:84:02:0e:79:69:
         c8:ef:ae:da:78:6e:2e:a5:44:26:58:ca:01:da:76:c6:95:79:
         b7:3a:3b:b8:1f:ef:0c:e8:3e:64:ca:88:90:16:f8:dc:4c:29:
         ad:87:54:bf:d5:d7:70:14:06:2a:fa:4d:bc:e0:47:95:03:c2:
         ba:ea:30:0f:6f:3b:ba:d3:50:db:16:77:16:90:68:37:a1:1c:
         50:ab:c1:45:cf:7c:d2:6a:84:c9:94:9c:41:75:e7:e1:4a:0d:
         b2:c0:03:3c:d8:94:ec:b9:0c:c4:9a:34:fe:88:50:87:6b:c8:
         07:2b:53:fe:16:8d:24:1f:1a:d6:27:63:f0:33:03:da:f0:18:
         10:0c:ed:0d:19:4e:ba:40:f2:65:81:39:bb:62:83:f2:ce:1a:
         73:70:a6:0a:a7:8a:78:ce:9a:05:da:bb:28:b0:d9:3e:06:81:
         44:8d:6c:15:9a:61:dc:7d:9b:97:a5:70:c0:63:28:d7:e6:4a:
         2d:cb:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:54:53 2026 by rpki-client