Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer
File:                     45FC107BB0B6654452677B1D69CD570ED537BDB4.cer (raw, json)
Hash identifier:          SAfQF29pYUNq/UD3ElvQakupQxkerlSBcVuTiJxyD0M=
Subject key identifier:   45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A39AD455628C97A7F182FA09292A41463B54BB9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 01 Mar 2026 08:56:21 +0000
Certificate not after:    Sun 28 Feb 2027 09:01:21 +0000
Subordinate resources:    AS: 263069
                          IP: 168.0.128.0/22
                          IP: 186.233.56.0/22
                          IP: 2804:2cdc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 18:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:39:ad:45:56:28:c9:7a:7f:18:2f:a0:92:92:a4:14:63:b5:4b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  1 08:56:21 2026 GMT
            Not After : Feb 28 09:01:21 2027 GMT
        Subject: CN=45FC107BB0B6654452677B1D69CD570ED537BDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0f:bc:0b:fe:74:80:1c:c3:1f:4f:2d:45:c3:
                    5d:59:df:81:39:60:59:05:02:3b:a6:1e:30:d6:6b:
                    5d:a7:3c:f6:3b:38:da:70:cb:d5:7a:3b:38:d4:df:
                    ba:eb:75:ac:7e:a9:bc:df:c8:10:bf:e5:97:1c:4b:
                    76:be:30:25:c6:d6:ea:f8:51:f6:ee:9f:0d:b1:49:
                    24:cc:1b:ea:92:86:c6:a9:6a:ee:a6:ff:6b:59:46:
                    d0:52:bb:79:91:ce:97:d1:48:0b:28:38:55:55:fc:
                    5d:69:ec:d2:d7:ae:45:65:9e:e0:71:06:66:56:6b:
                    f1:ce:f3:bd:c2:96:a9:b8:12:59:f5:aa:63:eb:06:
                    84:bd:7a:3e:2c:71:ce:77:88:16:00:e4:b0:0c:7c:
                    f0:5d:2c:bf:22:a9:b8:cb:9b:95:3b:49:c7:8e:f0:
                    27:9b:55:a0:d9:00:ac:d8:45:f9:65:3b:59:35:86:
                    8d:51:56:de:7d:90:70:90:a1:0e:89:56:e3:b8:96:
                    57:a9:c9:a6:f6:86:4c:48:df:65:10:cd:ae:f9:38:
                    b7:86:79:f7:86:38:bc:92:98:ed:37:60:58:94:f9:
                    16:8e:8d:e5:ca:62:ea:cb:7a:76:21:31:04:67:d8:
                    ea:95:40:07:61:7a:33:91:b0:07:ae:60:c9:61:df:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.128.0/22
                  186.233.56.0/22
                IPv6:
                  2804:2cdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263069

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:79:4b:31:0b:53:de:b4:19:a8:11:d6:9a:0f:f5:de:1f:
         31:9b:08:75:a5:7f:67:88:d0:01:fa:c3:57:2e:42:07:fc:fb:
         de:15:3e:a5:f4:2c:59:36:30:83:b9:4c:f0:ed:bd:b1:8a:38:
         d7:f5:47:6f:23:84:a0:f0:6b:d0:63:e0:6f:92:6c:b0:f8:75:
         ae:53:e8:09:75:59:fa:c3:51:38:4d:d3:d0:37:79:a8:d9:a2:
         a7:42:2e:34:6b:53:14:03:ff:b1:90:89:7e:11:c3:a3:7b:b3:
         ba:55:b0:55:ce:52:0d:d8:84:88:be:03:b3:dd:5a:13:dc:15:
         4b:7f:66:f8:17:e5:3a:23:ec:04:6e:15:5d:2f:1c:8f:59:68:
         1f:90:46:85:10:15:24:d2:44:08:b2:2c:06:64:de:31:8f:4e:
         05:5a:41:69:d2:3d:85:44:b2:62:54:aa:8d:97:39:c9:82:46:
         81:c6:8d:ba:25:49:ad:cb:cc:59:d7:5b:39:8e:95:cd:bb:6c:
         c1:d9:bb:c9:02:d9:f7:70:e9:58:49:32:78:39:27:15:37:15:
         be:a7:69:a5:cb:4b:ed:15:0f:aa:b1:0d:c5:e2:a4:72:31:8d:
         e6:ce:d4:b1:20:8b:d4:40:6a:b9:aa:b4:de:98:eb:59:c3:eb:
         92:66:bf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:22:48 2026 by rpki-client