Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF3633BB72B7566B387E3FE16D022B86157ED3EF.cer
File:                     CF3633BB72B7566B387E3FE16D022B86157ED3EF.cer (raw, json)
Hash identifier:          /LgrrhJb6TaQBmNtjC1YSl7RuRceTYfVQd/N7el9oKk=
Subject key identifier:   CF:36:33:BB:72:B7:56:6B:38:7E:3F:E1:6D:02:2B:86:15:7E:D3:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F37F74FA36B616B1A70724F9009D49BC835A642
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Apr 2026 13:06:53 +0000
Certificate not after:    Wed 14 Apr 2027 13:11:53 +0000
Subordinate resources:    AS: 268177
                          IP: 45.171.12.0/22
                          IP: 2804:593c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 21:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:37:f7:4f:a3:6b:61:6b:1a:70:72:4f:90:09:d4:9b:c8:35:a6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 15 13:06:53 2026 GMT
            Not After : Apr 14 13:11:53 2027 GMT
        Subject: CN=CF3633BB72B7566B387E3FE16D022B86157ED3EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:c7:e1:27:57:a8:4c:8e:8e:43:1b:6f:31:
                    88:07:34:52:00:5a:c1:bc:36:8c:64:fa:42:92:88:
                    62:46:35:1b:d3:a3:e7:c4:b9:61:ff:a6:32:9b:d5:
                    10:93:6e:3c:95:33:d2:ef:38:37:3a:24:ba:e1:2e:
                    0a:0a:71:69:d9:ca:c3:08:21:91:66:db:9f:13:74:
                    7e:dc:b8:4d:e7:13:76:16:05:d4:bd:4e:ba:c0:b6:
                    01:a1:a2:20:3f:66:2c:01:2e:88:37:fb:8d:0a:7f:
                    71:59:d0:87:c6:89:7f:20:95:5f:93:32:2c:2a:2e:
                    90:7b:2a:fa:77:29:8d:4e:82:88:54:99:09:47:1e:
                    fc:31:30:22:81:78:61:9b:57:28:ff:b7:37:12:32:
                    0f:6b:41:ef:f7:bc:22:09:e5:51:d5:a4:7e:d1:bb:
                    3b:ac:3e:c4:1a:c2:61:6b:80:60:44:ee:18:73:01:
                    33:e2:f2:44:93:db:81:05:07:be:26:69:02:4c:89:
                    bd:2e:b2:cd:1e:f3:dc:37:13:b1:bd:b7:91:5a:3e:
                    eb:1f:e6:27:4d:ee:31:0c:35:cf:eb:ab:f4:1f:c6:
                    5b:5e:3e:15:71:f8:08:59:e6:fc:8e:90:9b:12:a1:
                    d4:ec:c9:30:a3:69:0a:04:58:fb:3d:fd:5a:89:04:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:36:33:BB:72:B7:56:6B:38:7E:3F:E1:6D:02:2B:86:15:7E:D3:EF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.12.0/22
                IPv6:
                  2804:593c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268177

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:39:dd:73:aa:02:08:f7:8e:e3:4f:53:7e:28:8c:d0:7c:
         e8:1f:d3:3b:d5:a6:8b:92:f9:89:a6:4c:63:bd:8e:62:d5:56:
         7a:75:41:73:1a:6a:dd:36:15:8d:f2:61:aa:f7:73:88:57:fd:
         1c:27:aa:a7:62:78:43:bd:3c:66:2e:c7:88:d3:f5:0c:65:99:
         c1:f3:d8:11:90:93:1d:b6:c1:db:8c:d1:86:24:f3:8e:b4:6c:
         e2:da:5b:cf:57:fc:0f:4c:15:77:76:ed:b8:a5:43:14:84:d3:
         66:de:cf:72:c3:83:2d:96:5d:c6:89:ef:a7:19:4a:a2:6c:a7:
         1e:0d:79:7f:74:c2:b8:c6:4e:21:49:ae:b9:09:e3:d7:ea:fa:
         dc:20:8b:3c:4b:ae:da:8c:ad:66:78:f9:b4:e2:86:03:21:d4:
         21:7d:62:20:f9:22:5e:7b:25:46:63:fa:c4:4d:15:57:26:98:
         4d:d2:30:1c:c8:9d:45:ac:cd:97:5a:29:46:66:1c:a7:8c:8f:
         ae:df:85:0c:eb:a9:8f:84:c4:d5:54:cd:81:10:5b:f9:cf:75:
         56:1b:e0:3e:3a:f4:9d:00:bf:48:c8:49:ef:dc:a2:15:18:f0:
         af:9e:60:94:b6:b2:91:58:f0:24:65:15:4a:bb:64:7b:ce:69:
         7d:be:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:54 2026 by rpki-client