Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.cer
File:                     EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.cer (raw, json)
Hash identifier:          Xgc3pqhc1QCU/ynV4tY2Ly5DFuMQhbZ87+BchJUdyk0=
Subject key identifier:   EA:0C:6D:51:FF:8F:6F:AC:2D:B3:B5:0E:82:62:EE:39:7B:63:E9:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       614E1CFDFD5239A187D576D93D8E35EDBB7ED2CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Jul 2026 05:12:44 +0000
Certificate not after:    Fri 23 Jul 2027 05:17:44 +0000
Subordinate resources:    AS: 268347
                          IP: 45.238.160.0/22
                          IP: 2804:4fc0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 20:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4e:1c:fd:fd:52:39:a1:87:d5:76:d9:3d:8e:35:ed:bb:7e:d2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 24 05:12:44 2026 GMT
            Not After : Jul 23 05:17:44 2027 GMT
        Subject: CN=EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:3c:99:06:e1:35:76:f9:42:92:b6:dd:96:
                    df:83:0f:1d:3e:05:bb:5f:33:79:b8:2a:e6:86:1a:
                    dc:89:d8:3d:ee:34:7d:29:92:f2:03:2f:6c:3d:02:
                    4c:1e:b4:10:71:de:a5:28:69:9a:69:1c:67:c6:62:
                    32:a3:7c:2a:87:03:15:23:a7:48:16:2c:83:8b:52:
                    c7:9b:58:03:14:ea:8f:de:20:33:c3:17:dc:98:1f:
                    a8:cf:fd:34:c5:a8:df:29:a3:52:05:ba:fd:a8:fe:
                    45:13:6b:35:cd:10:fe:f5:5d:1d:30:82:82:2d:a0:
                    2e:39:6f:cc:4e:0b:12:be:78:71:21:b8:11:3b:3b:
                    02:ae:17:f8:ed:fb:8c:f1:f0:39:16:ba:e2:45:61:
                    56:9b:ae:1f:b8:65:7e:88:c9:1b:8f:dc:cf:3b:1e:
                    aa:ff:41:f4:70:3a:e7:7a:14:4f:46:e6:0b:9e:57:
                    b3:50:bf:a8:36:f5:e4:e0:2a:ff:34:34:91:73:91:
                    70:c9:e6:47:98:7c:e3:ff:10:49:bf:b8:bf:20:0f:
                    4d:7d:8f:01:96:d0:12:89:cf:53:be:f5:55:f2:3e:
                    1e:e5:84:25:bd:19:74:46:67:46:4c:53:b0:71:68:
                    f4:1e:ec:58:d9:1e:28:d6:25:d4:67:dc:4b:f8:57:
                    0f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:0C:6D:51:FF:8F:6F:AC:2D:B3:B5:0E:82:62:EE:39:7B:63:E9:01
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.160.0/22
                IPv6:
                  2804:4fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268347

    Signature Algorithm: sha256WithRSAEncryption
         64:95:25:3c:8c:6f:ef:37:5d:e9:fa:f7:a8:91:4d:cd:76:eb:
         b7:37:4a:6e:16:a5:f0:b1:23:02:1e:aa:4e:94:e4:83:aa:3d:
         6f:24:41:8c:37:55:d4:7d:fd:85:2e:ad:b7:7b:37:36:e2:69:
         24:24:21:a5:a2:a5:2e:e4:5b:42:41:be:00:5e:3f:0a:73:19:
         48:59:e8:63:6f:a5:7e:6c:74:ef:9a:42:77:f1:da:12:68:9c:
         0b:28:29:d5:96:8e:68:ab:30:b5:c6:8d:c3:a6:fb:72:db:f2:
         ba:75:d7:20:08:f5:1e:a3:a8:88:11:80:50:d0:b9:94:7f:a4:
         1d:34:29:f5:8d:08:05:34:c3:c0:b8:6a:ae:24:f9:17:c6:c0:
         6a:2f:b8:19:2d:f2:a7:c5:4f:44:71:59:fd:3d:b2:83:1a:c1:
         0b:2e:c2:39:95:79:8d:a1:21:09:f7:da:d7:93:4a:f9:7d:4f:
         a3:d1:b6:77:42:24:61:0e:62:9b:73:cc:4b:a7:78:c4:81:27:
         97:8c:e4:70:53:7c:c5:68:51:de:2b:df:4a:aa:a9:24:2f:f9:
         50:92:0e:36:1a:b5:a4:1b:78:52:d7:9a:1b:de:14:8f:8d:7c:
         a8:09:2b:ad:ff:28:68:7f:df:57:92:07:77:5b:ce:0b:be:17:
         bf:e1:d6:41
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYU4c/f1SOaGH1XbZPY417bt+0sowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA3MjQwNTEyNDRaFw0yNzA3MjMwNTE3NDRaMDMxMTAvBgNV
BAMTKEVBMEM2RDUxRkY4RjZGQUMyREIzQjUwRTgyNjJFRTM5N0I2M0U5MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtjyZBuE1dvlCkrbdlt+DDx0+
BbtfM3m4KuaGGtyJ2D3uNH0pkvIDL2w9AkwetBBx3qUoaZppHGfGYjKjfCqHAxUj
p0gWLIOLUsebWAMU6o/eIDPDF9yYH6jP/TTFqN8po1IFuv2o/kUTazXNEP71XR0w
goItoC45b8xOCxK+eHEhuBE7OwKuF/jt+4zx8DkWuuJFYVabrh+4ZX6IyRuP3M87
Hqr/QfRwOud6FE9G5gueV7NQv6g29eTgKv80NJFzkXDJ5keYfOP/EEm/uL8gD019
jwGW0BKJz1O+9VXyPh7lhCW9GXRGZ0ZMU7BxaPQe7FjZHijWJdRn3Ev4Vw8NAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTqDG1R/49vrC2z
tQ6CYu45e2PpATAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1BU
WURXM0JNTWllZU1YVHdFdkdYNDZDNFJacVdxaEZKWlJzTE56VUNFckgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNQ
VFlEVzNCTU1pZWVNWFR3RXZHWDQ2QzRSWnFXcWhGSlpSc0xOelVDRXJILzAvRUEw
QzZENTFGRjhGNkZBQzJEQjNCNTBFODI2MkVFMzk3QjYzRTkwMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLe6gMA0EAgACMAcDBQAoBE/AMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQYOzANBgkqhkiG9w0BAQsFAAOCAQEAZJUlPIxv7zdd6fr3
qJFNzXbrtzdKbhal8LEjAh6qTpTkg6o9byRBjDdV1H39hS6tt3s3NuJpJCQhpaKl
LuRbQkG+AF4/CnMZSFnoY2+lfmx075pCd/HaEmicCygp1ZaOaKswtcaNw6b7ctvy
unXXIAj1HqOoiBGAUNC5lH+kHTQp9Y0IBTTDwLhqriT5F8bAai+4GS3yp8VPRHFZ
/T2ygxrBCy7COZV5jaEhCffa15NK+X1Po9G2d0IkYQ5im3PMS6d4xIEnl4zkcFN8
xWhR3ivfSqqpJC/5UJIONhq1pBt4UteaG94Uj418qAkrrf8oaH/fV5IHd1vOC74X
v+HWQQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:56 2026 by rpki-client