Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.cer
File:                     4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.cer (raw, json)
Hash identifier:          bGaYq7AlgDcopw26MIE0w1JiN6GS+9jXvDrzWxWnJ+o=
Subject key identifier:   4A:E7:97:3F:0F:E2:F2:A9:FF:F6:DF:3F:24:D3:87:F3:B7:E1:4E:FB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4F2C88A22840BD3FEA929C84AC8106C8126BB0AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Sep 2026 20:12:29 +0000
Certificate not after:    Thu 09 Sep 2027 20:17:29 +0000
Subordinate resources:    AS: 269056
                          IP: 45.178.204.0/22
                          IP: 2804:5ec8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 11:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2c:88:a2:28:40:bd:3f:ea:92:9c:84:ac:81:06:c8:12:6b:b0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 10 20:12:29 2026 GMT
            Not After : Sep  9 20:17:29 2027 GMT
        Subject: CN=4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:0f:76:e6:d3:76:cd:c2:77:50:ea:b2:3e:
                    88:7c:7c:e9:ce:5f:c3:79:e4:bb:08:47:1d:a2:1d:
                    8f:ba:de:af:6f:f7:65:a2:4d:70:5a:26:af:3c:32:
                    8b:6a:94:cb:3e:bf:f3:08:04:c9:75:b1:5c:39:d8:
                    57:3f:5b:8e:41:f7:10:21:b8:e1:d2:92:bc:3d:90:
                    37:38:c1:69:ff:ca:a2:1d:aa:de:84:a6:2c:7e:d9:
                    29:d3:15:2a:a7:f6:34:e3:a8:89:e3:a2:71:7f:c5:
                    2d:91:2a:97:b7:ee:b5:94:44:21:f1:ff:83:e1:d1:
                    a6:e9:0e:71:82:7a:5d:82:e3:af:fb:f2:95:08:f8:
                    e8:ea:24:6c:87:e6:98:da:6d:b5:a5:79:42:46:fc:
                    24:a2:a5:b2:3c:36:95:1f:47:4f:ef:56:91:fa:46:
                    dc:8b:b7:56:6c:c8:c8:21:f9:0a:49:e1:e0:fe:95:
                    a2:66:68:06:8f:19:1a:b1:97:70:79:09:b6:dd:fc:
                    7b:4c:89:84:95:e4:f4:de:8a:9a:be:9b:b1:c8:f8:
                    5a:9a:19:60:79:93:f0:cc:1e:85:c2:28:18:c3:c5:
                    58:8c:dc:ad:ee:85:5d:0e:7a:84:d3:64:06:60:3c:
                    a0:82:63:07:24:57:2f:46:47:20:0d:75:27:db:e6:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:E7:97:3F:0F:E2:F2:A9:FF:F6:DF:3F:24:D3:87:F3:B7:E1:4E:FB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/22
                IPv6:
                  2804:5ec8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269056

    Signature Algorithm: sha256WithRSAEncryption
         3d:a5:f6:64:42:9f:3f:04:ab:7a:57:e4:94:19:78:9a:2b:e1:
         cd:f9:df:30:59:a3:6a:60:87:87:f0:c3:ae:89:d7:08:dd:73:
         74:a5:a8:2f:db:7c:c3:bc:97:6a:f4:39:6d:e0:34:bf:03:bb:
         b6:41:99:84:ac:6f:e1:68:a0:7b:51:16:87:f1:07:91:c2:0c:
         76:3e:89:5a:a7:37:48:51:ba:07:06:18:40:e4:9e:cb:8d:36:
         60:e3:6a:d7:1e:66:21:b5:56:1c:72:b7:8a:6f:8e:9d:42:6d:
         58:e0:10:a7:2f:db:c4:9c:23:1d:7f:1d:b9:9a:d1:ad:a3:de:
         e0:84:f5:43:2b:7d:0e:96:71:5c:ef:9f:32:54:c4:91:15:62:
         68:5c:80:36:93:f2:1c:71:44:1f:94:21:b9:92:7a:db:da:8e:
         5a:7e:05:db:6b:9a:94:dc:d3:a7:fe:cb:6e:60:8b:ee:4a:9a:
         3a:4f:b0:d8:fc:91:b2:5e:a9:3a:d5:cc:79:ed:16:d6:50:cb:
         82:1d:09:c2:83:e4:81:a6:f9:c7:de:9b:6c:c3:2c:98:62:ac:
         1c:8b:bc:2c:5d:bf:c8:d6:bc:d0:95:91:ed:d4:e3:73:9f:a1:
         21:a4:4d:e6:f2:a6:43:fc:65:19:7f:b2:a9:04:54:f3:bb:ca:
         11:d2:b4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:48:43 2026 by rpki-client