Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
File:                     501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer (raw, json)
Hash identifier:          kRIv/4UWlQXP7UuPaCm5YXE6/A474rxWNTvuDP2j65Y=
Subject key identifier:   50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69FDFEA153F2A2F4EE42A33BA70DE2855BFA7589
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Oct 2026 21:19:24 +0000
Certificate not after:    Wed 13 Oct 2027 21:24:24 +0000
Subordinate resources:    AS: 28299
                          IP: 177.12.160.0/20
                          IP: 177.185.192.0/20
                          IP: 187.1.128.0/20
                          IP: 189.38.80.0/20
                          IP: 191.6.192.0/19
                          IP: 2804:10::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 04:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fd:fe:a1:53:f2:a2:f4:ee:42:a3:3b:a7:0d:e2:85:5b:fa:75:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 14 21:19:24 2026 GMT
            Not After : Oct 13 21:24:24 2027 GMT
        Subject: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:a5:88:f9:8b:5d:3e:c1:11:61:6b:ce:29:
                    67:1f:b4:bf:83:76:d5:ad:e7:62:20:33:58:fa:25:
                    21:d1:1e:6e:77:ca:93:72:4d:e6:23:eb:ad:db:a2:
                    b3:c3:10:f3:be:fe:86:5d:bb:a8:ec:9e:03:86:ad:
                    5c:66:35:f9:ea:89:0a:9d:e8:93:75:1a:49:8a:dc:
                    ce:e6:47:3f:71:8d:b4:a0:1c:9b:8e:9e:5d:3c:d8:
                    15:bd:4b:66:6b:85:04:12:bf:53:28:4d:45:da:73:
                    84:bc:4b:92:e5:fd:a2:fd:7c:b6:44:eb:92:ea:7e:
                    1d:c2:4d:52:9c:e2:5c:08:69:d1:de:00:3c:87:e8:
                    ce:b7:57:41:a2:e2:1d:a1:62:39:b1:8f:4f:0d:92:
                    df:1f:08:26:b3:ba:8b:7f:c7:56:01:4a:e8:74:b1:
                    5f:da:02:90:a5:e2:4f:12:ce:70:ad:91:c3:09:e8:
                    0a:ac:c6:4f:1f:b7:40:f0:b9:dc:c6:9c:ff:62:1f:
                    1a:6c:14:b8:56:d4:b8:0b:dd:29:f5:98:d5:08:fd:
                    c1:16:9c:e1:a3:e6:e8:1d:75:f8:ff:5c:b2:6a:91:
                    2c:a9:36:39:cf:77:79:f4:ac:77:64:1d:8b:bb:16:
                    14:28:ad:22:e9:47:0e:71:eb:95:90:98:af:96:bc:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.160.0/20
                  177.185.192.0/20
                  187.1.128.0/20
                  189.38.80.0/20
                  191.6.192.0/19
                IPv6:
                  2804:10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28299

    Signature Algorithm: sha256WithRSAEncryption
         b1:ac:ef:58:8a:01:a4:bc:09:4e:10:4f:cf:19:96:7e:a7:f7:
         16:e5:ac:13:70:2c:92:ad:5d:90:ff:b8:09:bc:cc:71:84:96:
         ef:31:91:af:b3:73:9b:c6:e2:6b:43:a9:46:1b:06:3c:61:59:
         94:bb:33:72:74:80:f8:37:77:29:03:44:ca:42:77:22:41:03:
         47:03:3f:96:08:d1:fa:2f:fd:bd:bb:68:6c:f2:53:bc:6c:43:
         17:a1:14:8e:cf:41:e1:f2:93:37:b5:b5:5c:e2:53:e9:7f:95:
         fb:03:c0:91:4f:3d:7f:f9:93:c7:99:32:5c:5e:97:4b:32:50:
         69:cb:68:62:72:50:49:ec:fb:f4:d3:97:71:da:f2:5f:06:4b:
         4b:b3:be:54:d3:60:10:ec:38:9f:e9:5e:69:51:5e:2a:d8:94:
         be:0c:af:f7:41:6c:7d:e5:ba:99:a4:43:59:4b:76:cc:e4:f0:
         aa:b3:0d:5f:ca:14:63:b0:df:14:d5:ff:b9:43:f4:12:f9:5b:
         5c:f8:bc:15:a1:2b:62:1b:1a:a8:ae:a8:49:97:ae:e8:f1:38:
         c4:1f:3a:3d:79:83:c0:2d:f4:5d:16:d0:e7:26:6d:db:2b:e2:
         e1:44:ca:40:d7:dd:ef:b3:2d:22:dd:f6:3f:71:41:50:6d:ea:
         f4:22:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:19:23 2026 by rpki-client