Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer
File:                     53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer (raw, json)
Hash identifier:          mK7cA/1pI44PVMp2fWXfGh8SBZXL2Z/g3+t8X8tzUvs=
Subject key identifier:   53:A5:B6:99:AF:ED:13:BD:0E:02:2C:A4:1D:2E:6E:4F:14:DC:F9:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       573A5797BC047751FDFCFE8715371CF9E14A662E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Feb 2026 19:05:14 +0000
Certificate not after:    Thu 25 Feb 2027 19:10:14 +0000
Subordinate resources:    AS: 271437
                          IP: 45.225.80.0/22
                          IP: 2804:7b88::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3a:57:97:bc:04:77:51:fd:fc:fe:87:15:37:1c:f9:e1:4a:66:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 26 19:05:14 2026 GMT
            Not After : Feb 25 19:10:14 2027 GMT
        Subject: CN=53A5B699AFED13BD0E022CA41D2E6E4F14DCF934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:bf:c3:a6:49:c6:d9:47:0c:1e:b7:1a:d3:
                    3e:1c:5c:15:c8:87:0b:c4:c2:0b:c2:07:8e:eb:a8:
                    98:56:f4:9a:67:0e:a1:24:b0:bc:ad:45:1e:1a:af:
                    ef:cb:3e:97:50:e8:68:b5:ec:92:0f:5c:b1:93:3c:
                    0f:8c:f4:a1:fc:c2:68:60:56:2b:ab:20:51:d7:d0:
                    d8:9f:a8:b5:a1:69:46:fb:b8:b6:cf:4f:23:ab:54:
                    e5:a1:ba:ed:bb:02:cb:4e:83:01:10:e2:84:0e:ae:
                    6a:c0:51:63:2c:f9:7a:0e:e1:48:6d:14:ee:b7:66:
                    67:fd:aa:96:bb:3f:66:c6:52:81:f9:4f:97:bc:e5:
                    7f:46:11:82:30:f4:de:ec:ce:e5:ff:95:b6:04:fc:
                    e2:e6:60:0d:a1:5e:56:58:91:a4:c4:c1:ab:3f:d0:
                    cc:16:00:23:9d:ce:d6:6c:51:09:fd:10:a1:ae:28:
                    ce:c1:60:a1:4a:f4:b9:01:24:b2:bb:21:c8:d8:96:
                    7a:c5:06:92:aa:9c:9d:78:e9:be:f3:2f:eb:9c:51:
                    ab:11:e5:b3:58:b7:21:c3:76:b0:e6:b7:7f:49:bb:
                    21:e2:ea:d1:db:e4:f5:09:19:62:2f:72:ca:88:95:
                    7a:5a:18:4b:45:48:f3:c4:fa:ee:3d:af:bc:34:5d:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:A5:B6:99:AF:ED:13:BD:0E:02:2C:A4:1D:2E:6E:4F:14:DC:F9:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.80.0/22
                IPv6:
                  2804:7b88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271437

    Signature Algorithm: sha256WithRSAEncryption
         4c:50:9a:6c:ba:7a:9a:29:35:4c:0a:1e:a4:ea:43:66:ea:a3:
         d2:10:64:da:16:7d:91:13:53:32:f5:52:bf:74:cb:e0:b9:48:
         18:17:4b:2d:eb:f2:00:fe:3f:ac:c1:b4:0f:cb:34:1c:8d:54:
         a4:42:45:d6:63:26:af:0e:ee:4c:34:a3:27:e5:30:9a:dd:72:
         6e:c9:8a:ba:69:1c:65:0c:8d:0c:5e:72:9c:91:a2:12:c3:35:
         0f:34:b9:55:d3:3b:2e:fd:05:21:93:64:a7:d1:4a:25:26:94:
         77:0a:d2:f2:fa:eb:fe:12:e9:7d:8c:a3:b7:55:bb:82:55:41:
         2e:bd:8b:3d:13:fc:71:44:62:ec:15:45:2f:8b:ac:51:5a:93:
         55:ad:60:d2:9a:53:07:e6:11:df:2e:82:20:c2:cd:4d:d6:ef:
         ce:ee:a2:4c:22:a3:fd:63:ee:20:83:52:2c:6d:c9:d9:a4:70:
         86:c6:5d:9f:41:45:a3:06:bd:43:31:06:7f:f9:4d:f2:46:6e:
         96:92:90:45:d5:8c:09:b4:d5:84:14:a9:00:01:e8:3a:a0:25:
         7c:9f:e7:9c:99:fc:95:2d:19:0f:9a:af:06:68:c2:d1:1f:ab:
         31:ba:14:f7:45:55:0e:94:be:76:9b:52:8d:67:c7:73:86:7d:
         da:ea:a1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:16:55 2026 by rpki-client