Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.cer
File:                     68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.cer (raw, json)
Hash identifier:          igXRjRTedn+Y0H7V4vMQypRttjnPTZ5POOqHnzmTHjw=
Subject key identifier:   68:DC:F9:CE:56:E6:B2:2F:6D:39:A5:FE:19:C4:84:3D:FA:72:5E:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19EB707CB077386AE6FF0D251F5A1845336140E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Jun 2026 11:16:02 +0000
Certificate not after:    Wed 09 Jun 2027 11:21:02 +0000
Subordinate resources:    AS: 264598
                          IP: 138.36.228.0/22
                          IP: 2804:2238::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:eb:70:7c:b0:77:38:6a:e6:ff:0d:25:1f:5a:18:45:33:61:40:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 10 11:16:02 2026 GMT
            Not After : Jun  9 11:21:02 2027 GMT
        Subject: CN=68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:28:c7:ac:38:e6:fb:ee:46:87:ee:ee:02:
                    bb:29:dd:bb:09:ad:c9:0e:83:9f:a3:23:4f:dd:07:
                    37:f5:24:b2:29:67:8b:21:61:fe:2c:ef:03:9d:90:
                    ef:25:72:61:49:87:89:2a:92:3a:1d:ab:8e:c4:60:
                    73:0c:49:e9:70:59:24:f5:30:56:75:d2:81:1a:9a:
                    6b:08:3a:d4:0f:7d:b8:66:da:9f:3e:af:06:48:41:
                    c6:d7:52:66:0f:13:ab:eb:06:76:4a:09:3a:d1:12:
                    88:d2:10:32:2e:34:9b:52:81:28:a6:e8:e1:9f:a9:
                    c5:49:33:ab:d1:0b:39:bb:61:a7:fc:ac:4b:e1:39:
                    00:63:2e:22:da:ab:c7:7a:5b:c6:79:d5:36:fc:55:
                    f4:3e:d0:75:34:22:4a:5b:0b:72:02:e0:72:bc:cc:
                    dc:0d:b5:09:51:5c:d3:c2:c1:f0:db:5d:12:e8:84:
                    74:70:f0:28:c6:dc:ca:9a:21:6f:b3:d0:4c:77:c5:
                    10:fa:24:27:27:a7:da:7b:8d:57:04:fa:57:3b:9c:
                    1e:0a:96:44:f5:31:d3:50:d1:b9:c7:68:85:a1:1a:
                    23:d9:f6:9e:b2:0e:21:61:22:55:e4:bc:c9:45:ab:
                    fb:9b:7c:88:e5:5b:45:8e:d0:56:e5:ef:5e:1e:c7:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:DC:F9:CE:56:E6:B2:2F:6D:39:A5:FE:19:C4:84:3D:FA:72:5E:C1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.228.0/22
                IPv6:
                  2804:2238::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264598

    Signature Algorithm: sha256WithRSAEncryption
         59:a5:de:cf:5b:b4:b1:99:db:5d:ed:e8:85:0f:bc:8b:01:24:
         97:ec:0e:9b:b3:4d:ff:ff:7b:6e:b9:5e:18:12:5a:5b:5b:de:
         d3:0e:ea:75:68:c1:a7:ce:a3:f6:dc:c7:ec:af:db:26:d0:6a:
         88:6f:47:58:a0:7a:2a:29:8e:e5:20:a0:9e:5f:08:99:d8:96:
         2f:76:0b:f5:06:a8:7b:86:bf:b8:71:99:4c:41:46:1c:ec:30:
         f8:ea:31:b2:f3:96:0e:d4:3b:fe:da:f5:91:85:fc:74:98:7c:
         7a:30:86:96:3e:a4:b2:79:bc:9c:b8:cc:58:17:16:ea:29:bd:
         63:3c:74:02:9a:07:4b:ab:af:b9:b5:08:24:40:ae:36:2b:e0:
         44:45:fd:f6:34:04:6c:8a:2a:7d:60:aa:e1:77:16:8b:9f:19:
         76:9a:c0:21:56:d6:92:46:bf:1f:05:d0:03:c5:ce:c3:fd:07:
         72:f0:11:b5:ce:46:c4:69:34:05:43:10:c0:f4:d3:56:dc:00:
         57:5f:19:ba:8f:62:67:dd:87:c8:13:cf:07:b5:80:33:19:d0:
         8b:44:cb:98:c7:cb:22:b1:12:07:94:c1:e5:48:ee:1d:51:48:
         67:5b:bf:6f:59:15:26:de:8d:f6:30:b5:7f:1e:26:ae:97:71:
         00:07:6e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:47:25 2026 by rpki-client