Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.cer
File:                     7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.cer (raw, json)
Hash identifier:          ySlBUaVr8JOhxb0YBvbdETJ5ezSLTw/dVXfqEtjz1hQ=
Subject key identifier:   7C:C7:FE:AF:66:BD:90:E2:ED:09:2B:6E:9B:77:4D:F6:9C:E7:5A:A5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F6F74EF7B7987AE605A0221BF4729C7AA832E31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Jul 2026 11:01:07 +0000
Certificate not after:    Tue 27 Jul 2027 11:06:07 +0000
Subordinate resources:    AS: 265029
                          IP: 170.84.24.0/22
                          IP: 2804:31a8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 18:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6f:74:ef:7b:79:87:ae:60:5a:02:21:bf:47:29:c7:aa:83:2e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 28 11:01:07 2026 GMT
            Not After : Jul 27 11:06:07 2027 GMT
        Subject: CN=7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:11:b8:1c:fc:50:88:25:f3:eb:4d:60:32:
                    02:31:56:ec:53:77:47:78:76:d4:fa:0c:c3:d4:e9:
                    83:28:25:b2:d7:2b:6a:50:46:d3:69:f4:d1:76:1a:
                    75:2c:69:a6:21:3c:4b:13:e4:10:78:ae:9e:26:73:
                    9f:4b:42:42:f9:26:9d:fe:63:03:5c:70:a1:0e:c4:
                    42:a8:0a:4d:f7:6b:dd:ca:c4:6c:73:b2:35:a0:2c:
                    e0:b0:bf:77:a1:33:dd:cd:fb:2d:25:1e:3b:3a:8c:
                    81:bc:ab:fa:15:b1:18:08:ff:b0:4b:5c:df:ec:0b:
                    ef:34:bd:6e:a6:73:bd:bb:aa:7f:52:77:d3:1c:b0:
                    c4:6d:85:11:e0:35:6b:74:81:68:fe:a3:29:41:bb:
                    4e:5a:97:44:33:5b:f3:20:1b:16:3e:fe:b2:fa:fd:
                    94:75:a3:af:ab:14:84:47:3a:b0:50:37:db:4f:f1:
                    66:73:c2:fa:31:af:25:45:22:b0:1c:1d:77:7e:2e:
                    c7:9f:a1:2f:2d:40:9e:2b:d2:10:9d:6e:8c:0c:fc:
                    1f:9b:db:c9:6b:9b:0b:00:29:48:c0:cf:d2:ed:7f:
                    7e:f3:24:6e:39:39:14:c3:94:5c:b7:c8:0a:cc:a5:
                    46:fe:e2:c1:b7:80:05:03:7b:ef:27:42:5b:89:9e:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:C7:FE:AF:66:BD:90:E2:ED:09:2B:6E:9B:77:4D:F6:9C:E7:5A:A5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.24.0/22
                IPv6:
                  2804:31a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265029

    Signature Algorithm: sha256WithRSAEncryption
         75:01:a5:ae:4a:c5:a5:0e:b0:28:80:3a:5b:d6:0a:46:c2:71:
         56:19:4c:50:54:e5:f0:8d:39:fd:16:a9:9b:46:a8:b7:8b:6c:
         d5:97:d6:ef:45:f4:35:b2:d5:07:5b:5c:8e:e3:b7:9d:dc:a7:
         91:3a:71:c5:f9:d8:17:b8:c2:9d:02:61:9c:65:40:77:a3:d3:
         02:4f:cb:06:ca:12:8a:0f:fc:93:98:d6:d6:b6:51:98:3a:28:
         89:d2:a2:b3:c2:ae:a3:e8:32:ac:3a:ff:c6:07:1b:cd:a1:72:
         1c:a7:b1:65:f2:4d:af:dd:ff:0e:d6:47:5f:99:b7:57:a4:f9:
         38:ea:7e:88:57:03:47:7c:22:39:e3:c1:e5:e7:f7:2d:b9:6c:
         7c:d9:c6:10:8e:67:63:6b:d1:9d:dc:1a:6a:fb:0d:90:95:c4:
         fa:1e:e1:d8:ae:9c:b6:2a:0f:8c:2e:dc:76:a1:41:a6:7e:73:
         3d:d8:64:9e:7e:9d:a1:fd:a4:a2:7b:f1:0b:df:86:f5:f8:0d:
         f6:13:dd:b3:fa:92:21:a5:d0:4f:b8:31:bc:e2:d2:fd:4a:66:
         d8:de:5f:1b:f4:c6:9b:dd:60:c0:30:83:9d:15:51:2a:f5:00:
         d5:db:20:5b:70:70:55:61:88:23:72:aa:80:e0:57:a5:da:03:
         b5:ad:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:55 2026 by rpki-client