Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer
File:                     4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer (raw, json)
Hash identifier:          SmRPGUTNR32B3edwwKtmdlSFMdRengJFtFrzkCUYbZE=
Subject key identifier:   4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4BBBF4DE3288B3CE4975CBE8D5848AF5F69055C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Feb 2026 11:29:44 +0000
Certificate not after:    Tue 23 Feb 2027 11:34:44 +0000
Subordinate resources:    AS: 269671
                          IP: 45.191.124.0/22
                          IP: 2804:6824::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 18:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bb:f4:de:32:88:b3:ce:49:75:cb:e8:d5:84:8a:f5:f6:90:55:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 24 11:29:44 2026 GMT
            Not After : Feb 23 11:34:44 2027 GMT
        Subject: CN=4E8B361B95AC54F01D2EE4C16049026E50FE807A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:25:b7:a8:39:90:3a:1b:f9:65:f1:07:ff:
                    9e:44:d9:5f:3a:fa:c8:89:b6:ca:6f:3f:3a:1e:f7:
                    75:f9:23:9a:38:26:11:67:94:74:a6:86:68:13:21:
                    ec:41:6b:68:bd:9f:ea:4b:52:dc:7e:1c:90:86:0f:
                    6a:0c:8b:0a:b6:75:ae:96:21:8f:a3:07:4d:54:ed:
                    e3:d6:cd:9e:83:88:27:05:e5:9e:ab:95:ba:8b:af:
                    92:49:87:9b:c5:d6:f2:43:e2:a6:ba:4e:09:b9:c3:
                    44:4d:72:9f:ab:32:e6:61:5d:84:10:3d:7c:16:da:
                    70:2f:a5:7a:1b:9c:ee:db:be:3c:e6:17:ee:f2:20:
                    08:86:3c:96:5f:02:72:70:80:35:95:f6:51:f7:6f:
                    2f:78:a3:1e:6b:b2:00:d2:b6:aa:8c:ab:06:d1:4f:
                    10:31:68:b4:3c:03:f2:f1:25:6c:0c:0a:7c:e4:11:
                    53:27:33:d7:fc:16:48:57:f6:93:80:e1:e7:d7:d8:
                    d9:27:8d:60:94:11:ca:05:f3:43:bc:25:65:1f:81:
                    31:e0:0d:ec:93:53:18:2c:c7:c1:fd:c3:91:20:15:
                    87:71:4c:50:b3:45:42:fd:d5:ac:c9:f2:ef:40:2f:
                    8c:e3:09:c4:b8:c9:e8:85:6e:c6:ed:e7:c3:2c:f2:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.124.0/22
                IPv6:
                  2804:6824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269671

    Signature Algorithm: sha256WithRSAEncryption
         da:26:06:99:8b:ad:a6:10:2d:47:44:06:0a:bc:74:4e:37:2a:
         96:3c:78:71:10:16:19:6b:3d:df:d3:c6:df:ba:5c:1f:b8:39:
         19:e6:61:1e:57:d0:e4:21:2b:b8:9f:e9:02:29:a1:d2:12:b5:
         1e:6e:fb:1c:a4:6d:26:d3:08:3b:78:ea:44:89:71:61:8b:21:
         d3:dd:fe:d9:2b:7a:6e:c6:53:f4:2b:d6:28:a8:89:b8:8b:85:
         e1:58:f7:87:2e:d1:6a:09:1a:42:dd:8e:9c:4f:92:a6:13:14:
         ad:a4:15:c6:76:8d:07:93:3f:44:28:90:55:ef:fd:12:14:78:
         98:e0:9f:40:06:fb:ff:34:86:1c:ec:9f:df:13:92:24:4e:26:
         b2:3a:01:75:2d:2a:29:fb:44:4a:42:b3:d7:31:df:90:bb:45:
         50:ba:9c:23:d7:87:0d:21:57:b0:ea:c4:8f:a6:ef:1e:8b:a2:
         49:b9:69:a5:fc:d8:48:ba:22:9c:20:17:2b:f3:74:1e:5b:5b:
         89:5f:8b:cd:a0:d0:17:a5:29:08:ed:d1:d0:78:68:76:ef:8e:
         f1:de:f0:f0:30:7b:8f:1d:3d:7f:02:ee:7d:5f:ff:0d:c2:33:
         48:00:b4:1f:27:20:9d:9a:61:dc:cc:76:be:69:0a:b8:4b:49:
         a5:ca:d7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:31:11 2026 by rpki-client