Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer
File:                     4856F1A3B30D5C7881DA87018005E5D420414FCA.cer (raw, json)
Hash identifier:          YIxjCdbqqOR9w5vHA1sOKnU6XX7N5YdKi5okzXpll9c=
Subject key identifier:   48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26C529B6399B9C5C2E0789EF12D94F8D415E800F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Feb 2026 06:32:18 +0000
Certificate not after:    Thu 25 Feb 2027 06:37:18 +0000
Subordinate resources:    AS: 53088
                          IP: 177.21.80.0/20
                          IP: 187.33.208.0/20
                          IP: 2804:360::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 18:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c5:29:b6:39:9b:9c:5c:2e:07:89:ef:12:d9:4f:8d:41:5e:80:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 26 06:32:18 2026 GMT
            Not After : Feb 25 06:37:18 2027 GMT
        Subject: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:d3:21:3d:6e:ea:31:59:39:3f:42:f6:2e:
                    08:77:e5:77:55:ee:29:70:d2:c6:f0:50:18:88:3b:
                    a0:c9:1e:a1:da:f8:b3:4d:85:ce:47:1b:61:d2:50:
                    ef:29:ec:7a:79:eb:da:21:9d:d5:9a:9e:35:cd:43:
                    83:62:92:de:36:4e:9d:a9:0f:df:e6:8d:fc:e0:e4:
                    b4:29:ba:53:f0:f8:0c:a3:bc:e4:27:7f:1f:ea:66:
                    1a:6b:0e:4a:af:09:b1:4c:89:0b:fc:7f:86:41:82:
                    55:2f:c4:9a:75:46:22:48:8a:8d:1d:85:54:80:2c:
                    36:0a:9d:12:52:7b:2c:16:0e:36:04:5e:ae:70:2f:
                    08:b2:6f:9c:5d:bf:67:6c:89:9e:dd:70:d7:e2:29:
                    28:d3:79:08:8d:e3:89:87:eb:8b:62:67:ad:9d:bc:
                    fa:60:42:e3:71:86:54:96:c8:3f:75:2a:c8:a0:3c:
                    e6:6a:a2:d0:6b:17:c9:9c:4a:93:96:7f:ba:7f:39:
                    1e:b1:f6:2d:ac:26:5e:7a:f9:cb:97:0c:2b:5a:c6:
                    f7:40:0c:eb:9d:86:cd:a6:b1:49:32:8b:48:35:54:
                    df:fd:b3:17:7d:28:31:27:e5:70:69:e7:61:4c:ea:
                    35:20:0d:ce:22:87:0d:b6:90:53:01:fb:0e:a0:8b:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.80.0/20
                  187.33.208.0/20
                IPv6:
                  2804:360::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53088

    Signature Algorithm: sha256WithRSAEncryption
         18:f0:7e:24:7d:4f:94:16:5f:df:7b:d0:bc:53:40:67:3f:15:
         30:88:8b:2e:80:9e:e0:e7:92:21:98:3b:59:f0:ae:26:2c:ac:
         4f:7d:f3:d7:02:fd:c3:dd:c9:83:96:49:73:a9:f0:b8:fb:43:
         27:3a:e8:c7:9e:1e:fd:c7:98:78:a8:05:22:38:b4:01:f8:dc:
         7e:83:13:f1:5f:0d:3d:f9:a9:f4:97:24:3e:a5:0d:99:e2:52:
         4e:df:a2:57:9b:ee:e6:1c:dc:01:35:c7:29:1e:d4:bc:5e:b0:
         13:96:69:0d:f3:69:ec:d3:3e:e5:36:99:81:44:07:23:35:f3:
         be:21:ea:9b:58:ca:09:26:11:69:ad:14:1f:c8:1b:67:ba:a6:
         1b:33:13:5f:57:af:94:a2:3a:8b:02:97:bc:cc:0f:7f:0b:de:
         5c:a5:e3:9d:01:d9:f4:9e:9a:c5:58:f7:10:1e:11:b7:1b:eb:
         6d:23:92:fe:6c:ea:1b:a1:b7:dc:2b:e6:b6:4c:a6:64:82:f5:
         78:92:fa:63:81:76:d1:f0:f3:e2:d4:f9:e5:5c:e4:f8:d7:3f:
         d8:36:af:2a:54:7e:ac:65:b0:85:3f:a6:16:b0:b5:4c:db:c1:
         27:a4:d7:26:01:a5:16:83:4d:d7:a8:0d:89:64:fc:f4:2a:41:
         b8:a8:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:22:43 2026 by rpki-client