Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
File:                     601AB4C2CB27698A7EF0684324D416B8646A9B75.cer (raw, json)
Hash identifier:          645V2Xj39/2CEGymcAA2OY/3IfUeC/07536dt0rS6hE=
Subject key identifier:   60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2092221D4A902464A68482434890746B92B50435
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Oct 2026 07:17:55 +0000
Certificate not after:    Fri 22 Oct 2027 07:22:55 +0000
Subordinate resources:    AS: 273443
                          IP: 177.21.208.0/20
                          IP: 186.196.68.0/22
                          IP: 186.196.100.0/22
                          IP: 186.198.144.0/21
                          IP: 186.226.216.0 -- 186.226.218.255
                          IP: 187.86.20.0/22
                          IP: 2804:8eb4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 10:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:92:22:1d:4a:90:24:64:a6:84:82:43:48:90:74:6b:92:b5:04:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 23 07:17:55 2026 GMT
            Not After : Oct 22 07:22:55 2027 GMT
        Subject: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:25:85:6c:02:c6:21:ae:65:03:5d:46:09:
                    78:bf:45:e0:99:76:fc:ec:e0:12:7b:c0:61:4e:9c:
                    2e:7b:16:27:cc:f0:e1:18:3a:84:c8:b3:b5:d9:d9:
                    df:db:67:74:ba:4d:6c:ae:e1:4b:91:f5:f2:b0:04:
                    b0:79:af:0a:86:2d:63:02:b2:eb:0d:5d:8c:ba:9d:
                    dd:e9:e7:26:16:c7:96:9e:dd:d6:f3:e3:67:f4:bd:
                    3f:17:f7:43:80:6f:c5:8f:7f:5d:92:40:d9:4a:95:
                    34:80:17:b5:7e:93:b9:25:bc:3c:54:6e:24:0a:7d:
                    1e:52:87:f8:32:e4:35:87:55:1e:89:16:6a:98:39:
                    96:6e:26:a3:09:dc:e4:cb:e4:ac:9f:a9:e6:aa:ea:
                    c7:79:8d:41:67:1a:33:7c:58:e3:42:77:cc:86:e6:
                    82:73:e9:36:65:06:60:5d:bb:fe:3e:b9:f2:4f:2d:
                    52:47:ac:77:3f:88:a8:65:b3:ef:f1:5f:31:2b:ca:
                    ba:77:5f:a5:ca:60:f8:7d:86:c9:c8:b8:0c:1d:13:
                    8f:da:3f:65:93:97:27:37:2a:35:1c:5a:13:96:94:
                    40:15:ad:3b:97:5c:10:ed:da:fa:28:60:53:71:da:
                    2f:0a:65:11:5b:69:6e:3d:ef:c8:c5:c3:1c:38:6c:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.208.0/20
                  186.196.68.0/22
                  186.196.100.0/22
                  186.198.144.0/21
                  186.226.216.0-186.226.218.255
                  187.86.20.0/22
                IPv6:
                  2804:8eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273443

    Signature Algorithm: sha256WithRSAEncryption
         2e:6a:39:dd:54:39:7d:7b:29:e3:23:05:e1:9a:f0:ae:b6:60:
         d5:06:3b:6f:45:5c:dc:42:cf:4b:48:0e:bc:7e:6c:44:3f:35:
         ef:ac:74:c1:7b:47:68:1f:f5:af:f8:50:0e:04:32:1b:6d:da:
         c8:71:41:40:e1:8d:63:27:f1:0e:40:fa:81:bd:32:60:c3:e0:
         fb:56:ee:1b:f0:55:b7:ba:c8:9d:9d:4e:d2:bc:a7:4c:fb:52:
         7a:6d:61:f2:f7:ec:c2:8f:93:ce:de:d5:04:d1:d0:66:1f:d0:
         60:7e:5d:29:2e:6f:b2:2b:c0:aa:6c:39:34:69:a1:b4:65:b8:
         38:91:76:3a:ed:de:8a:bc:fd:d6:64:55:2c:0b:c8:c0:82:4d:
         2a:32:11:62:8f:16:3e:46:0b:d9:e4:70:db:8f:77:3f:02:de:
         d8:30:e0:20:83:1a:ca:a7:1f:d6:45:bc:df:97:7c:6e:82:0c:
         fa:0a:30:48:d4:88:d7:7c:1d:6a:68:84:f8:72:63:c7:de:cb:
         32:cb:52:af:45:9a:6d:77:58:f6:44:33:a1:f3:6b:cd:17:cf:
         4b:c6:19:c9:52:3c:20:e4:44:17:86:5d:7e:b6:c4:bc:57:a4:
         45:af:f4:83:56:86:7b:6c:ad:f8:5b:18:f9:2c:df:e0:de:fe:
         a6:ee:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:46:33 2026 by rpki-client