Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer
File:                     89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer (raw, json)
Hash identifier:          pm+KWH/m0Eje2ypOZCXvgDF0O7FIHEHXVEC5HlB28D8=
Subject key identifier:   89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       433D4CBAAF12BAF7C37C12D6904473435BF89EC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Apr 2026 14:41:21 +0000
Certificate not after:    Fri 09 Apr 2027 14:46:21 +0000
Subordinate resources:    AS: 268091
                          IP: 45.169.24.0/22
                          IP: 2804:57dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 01:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3d:4c:ba:af:12:ba:f7:c3:7c:12:d6:90:44:73:43:5b:f8:9e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 10 14:41:21 2026 GMT
            Not After : Apr  9 14:46:21 2027 GMT
        Subject: CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f4:e4:d4:76:ec:f7:e3:7f:13:12:8d:7c:ed:
                    c2:69:c5:60:5b:ab:87:ae:da:e4:48:c0:2d:6f:aa:
                    da:da:db:72:02:99:84:c3:c9:43:86:bf:e3:31:77:
                    7c:68:6d:6c:31:8d:1f:42:44:64:e9:56:76:a6:bb:
                    4f:14:2c:f4:7c:20:29:b2:dd:7e:15:6c:99:17:fa:
                    41:fe:e1:f9:69:5a:b8:aa:89:a8:c7:4f:47:cf:9c:
                    92:6c:9f:86:c1:29:34:07:44:9e:91:a0:69:6d:e1:
                    4b:91:e3:57:06:e2:7a:50:a8:4d:76:83:1d:94:45:
                    f5:c8:6c:44:80:3e:a0:86:16:b9:07:fc:d3:e6:59:
                    f3:1a:3f:0a:24:e5:7d:7f:a8:ad:7e:1c:62:7b:80:
                    43:46:de:2d:dc:93:58:50:f0:dc:30:41:aa:5a:f1:
                    9b:ef:dd:6e:48:9d:8f:22:27:dc:58:68:fd:a6:9b:
                    5a:f0:1c:0f:bd:47:24:f7:cc:5e:05:62:a3:fd:29:
                    b1:1f:ba:75:b5:62:3d:32:59:76:4d:20:cd:78:b2:
                    62:04:fa:de:54:c3:25:cd:51:ca:5f:e8:24:1f:57:
                    bf:bf:1d:69:af:cb:d5:a9:ce:66:b4:4a:54:10:f5:
                    38:ae:e7:f8:32:9f:6e:2a:6e:7b:12:05:86:6e:81:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.24.0/22
                IPv6:
                  2804:57dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268091

    Signature Algorithm: sha256WithRSAEncryption
         89:20:61:26:20:8c:0f:e6:64:8c:40:84:70:42:92:9a:03:ae:
         8f:3f:3e:47:42:86:9a:90:b9:4e:1b:c9:63:ce:1b:5c:98:1b:
         59:d0:84:67:0d:cd:98:26:a4:99:26:e1:e0:92:f7:bd:e0:f2:
         cb:9c:34:b6:4b:22:f3:14:bf:ce:c8:56:57:8e:3a:be:58:e0:
         7c:20:e4:ed:64:ba:ab:61:b9:67:af:a7:d3:f2:c8:d1:0e:5d:
         c5:2c:07:84:08:3f:e1:9e:30:cf:ae:77:c1:a2:09:08:5b:08:
         a7:5c:21:4d:01:db:9d:e1:8c:96:e5:91:be:94:69:bb:84:e8:
         d1:1d:c2:d4:39:57:ef:4e:63:b7:68:48:59:77:8c:2e:f5:3d:
         4b:25:d3:a5:2f:d1:9c:b0:4c:63:11:9d:f5:26:11:bd:f9:85:
         28:dc:2f:aa:37:91:1a:6b:a7:e2:ae:6f:35:14:b5:68:df:4a:
         00:70:8c:ae:78:7b:30:e8:30:e4:fd:d7:54:99:96:f1:72:51:
         1e:69:b9:69:06:e1:ea:b1:4e:1b:65:e3:d8:45:e2:70:1c:cf:
         ab:b6:a4:b7:31:03:8b:4e:68:ea:a2:56:df:ae:3c:e3:17:24:
         48:42:c6:56:9a:bd:ed:15:b0:f3:07:58:29:52:72:ef:88:6b:
         11:d3:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:06:08 2026 by rpki-client