Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/40A6BC7589FB54328CA6448F98F0A6755FB5993F.cer
File:                     40A6BC7589FB54328CA6448F98F0A6755FB5993F.cer (raw, json)
Hash identifier:          MRS16uGUjfNSBd8ZxRI3yIibFm8kzdtZuZ4OmpIPM8Y=
Subject key identifier:   40:A6:BC:75:89:FB:54:32:8C:A6:44:8F:98:F0:A6:75:5F:B5:99:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D24B06DBE8E2C59710EC9F08A039CD89AC9FFCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Feb 2026 13:32:38 +0000
Certificate not after:    Thu 25 Feb 2027 13:37:38 +0000
Subordinate resources:    AS: 267473
                          IP: 192.141.184.0/22
                          IP: 2804:4208::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 20:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:24:b0:6d:be:8e:2c:59:71:0e:c9:f0:8a:03:9c:d8:9a:c9:ff:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 26 13:32:38 2026 GMT
            Not After : Feb 25 13:37:38 2027 GMT
        Subject: CN=40A6BC7589FB54328CA6448F98F0A6755FB5993F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:10:cd:73:33:9f:49:c7:3b:ef:de:83:ba:
                    25:4d:0e:3a:81:7e:5f:5f:6b:80:cb:86:76:a1:d8:
                    af:2e:43:8c:44:07:a0:de:c6:92:b7:2e:be:74:aa:
                    69:bc:ca:e6:7e:ce:31:2a:59:20:38:3f:c8:be:9a:
                    da:7a:38:82:45:6a:59:fe:2e:b0:c7:0c:df:e4:62:
                    5c:4a:77:f8:b4:12:3d:7c:cc:df:c2:93:44:28:01:
                    a3:98:60:87:9a:fb:50:d6:f9:35:7d:94:3f:f4:ac:
                    32:f4:93:36:0f:20:73:a1:bd:32:15:e1:a5:3a:34:
                    b9:88:a5:01:74:a0:6b:5c:c1:0b:c4:d5:2a:c8:03:
                    08:1c:34:f2:a6:f9:81:e9:a3:9d:53:48:ee:01:1c:
                    27:60:45:24:d7:66:cc:61:e6:40:61:04:e9:7c:92:
                    43:7c:e9:de:bf:35:2f:0a:c4:7c:a1:26:79:50:7c:
                    c7:61:3f:5d:aa:17:76:e4:3d:5d:55:c3:ba:d9:7b:
                    6a:f8:e7:c9:c3:ca:9d:18:d0:ce:5c:81:6b:be:56:
                    8c:7b:94:30:57:42:fb:b9:2a:83:21:12:2c:4c:5d:
                    f1:c1:fc:60:6a:52:0e:96:76:37:47:99:7d:33:f6:
                    25:32:c2:97:7c:61:17:40:5d:9e:17:87:75:23:89:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:A6:BC:75:89:FB:54:32:8C:A6:44:8F:98:F0:A6:75:5F:B5:99:3F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.184.0/22
                IPv6:
                  2804:4208::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267473

    Signature Algorithm: sha256WithRSAEncryption
         0e:b8:a3:83:1c:f3:01:60:98:a2:2a:38:6d:16:82:1b:47:c1:
         99:24:a8:41:50:3b:0f:02:28:c2:49:87:4b:2b:35:c7:ec:b8:
         95:dd:b6:a3:11:a0:c4:f4:bb:7e:dd:b2:17:99:f4:94:fb:df:
         3c:2e:07:95:ed:46:cf:1d:6c:28:c8:28:99:44:b6:74:76:1d:
         d6:58:36:d9:13:99:44:19:15:d3:ec:5e:53:d9:5e:b6:37:53:
         f6:72:b3:ad:84:5d:48:ce:9a:48:1e:1b:53:de:bb:2f:64:cb:
         8e:8b:eb:5d:e9:1a:43:c3:83:49:e0:51:a3:48:4c:5c:db:fc:
         74:38:17:2c:ec:13:16:63:0f:6a:c3:7a:f0:54:f9:a2:bb:54:
         cc:d1:03:8d:c1:c7:ab:48:de:e2:5e:85:89:cd:38:35:a6:ff:
         01:1e:74:b6:81:f6:7f:10:6c:30:1a:71:ad:af:dd:5a:9d:78:
         1c:35:87:cb:68:0d:14:82:09:8f:d2:4b:aa:1d:b1:9e:91:b9:
         d1:d0:9b:65:b5:ce:34:88:18:00:f2:61:1d:13:04:29:5c:28:
         c4:35:7f:7a:6b:49:a6:6e:d3:e7:87:54:fe:aa:c0:39:08:e5:
         ed:ae:ab:c3:82:ec:18:3c:8f:4b:30:36:86:d0:80:ea:d3:d1:
         b4:db:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:04:04 2026 by rpki-client