Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8AE88351A51784420EFC90F9CD2ED9479621FCA8.cer
File:                     8AE88351A51784420EFC90F9CD2ED9479621FCA8.cer (raw, json)
Hash identifier:          ZtTMx6ZKoSFu4gRq0oNsAz+JIAnQptN758FxglsCLOg=
Subject key identifier:   8A:E8:83:51:A5:17:84:42:0E:FC:90:F9:CD:2E:D9:47:96:21:FC:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       68FD5397E32947B6FABF1344FFF564D429377123
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/8AE88351A51784420EFC90F9CD2ED9479621FCA8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2026 12:43:36 +0000
Certificate not after:    Fri 16 Apr 2027 12:48:36 +0000
Subordinate resources:    AS: 267522
                          IP: 192.141.100.0/22
                          IP: 2804:42bc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 05:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fd:53:97:e3:29:47:b6:fa:bf:13:44:ff:f5:64:d4:29:37:71:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 17 12:43:36 2026 GMT
            Not After : Apr 16 12:48:36 2027 GMT
        Subject: CN=8AE88351A51784420EFC90F9CD2ED9479621FCA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:3e:51:41:20:ab:e8:36:86:09:36:f6:c8:
                    52:7c:c8:da:86:44:76:74:ac:04:6c:14:cc:b1:5b:
                    ff:d2:f6:09:07:06:d5:9b:a6:5f:f5:07:2b:7b:42:
                    eb:35:38:50:40:d7:e9:8f:51:7a:f3:fa:3f:67:83:
                    38:a6:1e:e5:0e:01:42:0f:d0:46:dc:49:5d:57:94:
                    1a:57:82:65:e6:85:87:68:90:e3:26:23:42:4c:fe:
                    82:ff:e4:fb:10:21:83:57:33:c7:c0:b9:09:53:83:
                    b4:30:0b:80:7e:33:1b:2e:41:9a:63:40:13:c1:28:
                    d4:82:94:ec:c9:91:ef:c9:df:1c:26:60:bd:07:22:
                    bc:aa:44:4e:5a:62:81:a6:49:96:3d:93:44:21:b5:
                    00:7b:d3:42:06:8e:94:e6:fe:29:40:08:d5:12:37:
                    a6:51:69:30:d1:00:62:91:39:7d:9e:5d:4f:e7:ba:
                    47:1f:78:5d:28:55:83:93:ae:d5:27:54:f3:f8:e3:
                    31:84:34:75:6c:01:cf:6c:f5:9e:14:71:59:8f:80:
                    96:65:d4:eb:d8:69:72:e2:e0:b4:5e:f7:cb:2d:8a:
                    af:9a:2b:fc:07:52:ab:07:65:4c:6d:5c:75:e9:a4:
                    a6:33:dc:aa:cd:9d:dc:86:eb:e2:3f:7c:07:bd:06:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:E8:83:51:A5:17:84:42:0E:FC:90:F9:CD:2E:D9:47:96:21:FC:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/8AE88351A51784420EFC90F9CD2ED9479621FCA8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.100.0/22
                IPv6:
                  2804:42bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267522

    Signature Algorithm: sha256WithRSAEncryption
         97:57:ed:36:45:13:85:cb:74:8c:75:e7:a5:60:e4:f3:4c:5b:
         fa:4e:f8:47:2a:74:33:7a:83:95:ff:3a:82:d5:a6:52:f0:41:
         21:ee:15:5d:9d:dd:12:68:f9:e8:c4:ce:f4:42:07:44:d0:ff:
         ce:53:c8:62:8f:f3:2e:7d:ad:ed:31:90:8b:84:bc:ed:5f:83:
         92:30:cd:0c:79:08:2a:38:56:aa:4f:9c:89:13:3d:01:7e:00:
         3e:99:69:0d:57:75:0d:ff:4b:0a:69:ed:a2:e8:7e:3a:90:44:
         a8:04:30:2c:32:ae:8a:c1:25:2a:5c:7c:e3:61:1d:4a:60:a9:
         c9:9c:ed:0e:92:31:64:d6:0f:8f:1b:cf:58:0b:cb:3a:54:dd:
         a7:d5:66:48:cc:1f:0e:3a:60:37:b2:da:3a:fe:ed:7e:d4:9e:
         70:c0:b2:35:b8:0f:77:b9:c2:f3:c3:8a:84:15:39:fa:5a:ab:
         a2:59:e5:51:f2:d6:79:6f:08:af:46:08:1d:fb:3a:48:c0:4d:
         42:2e:d5:0d:31:ed:8b:fc:31:37:4e:97:f7:d6:78:da:5c:63:
         ef:db:e1:95:27:bd:3f:de:1b:20:bb:5f:56:24:07:9d:f9:ef:
         89:31:44:d1:01:30:44:ba:ae:4e:62:10:e8:f5:51:3e:0b:9d:
         2e:56:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:20:40 2026 by rpki-client