Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
File:                     8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer (raw, json)
Hash identifier:          HUpGQuwjgkCoP3KG/M/mR0mdR2WP9G84m+1c/5QdNCE=
Subject key identifier:   8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57DA0453322A116374E1BA3930546C5E5D15BDD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2026 06:02:08 +0000
Certificate not after:    Fri 16 Apr 2027 06:07:08 +0000
Subordinate resources:    AS: 28646
                          IP: 201.77.80.0/20
                          IP: 2801:80::/48
                          IP: 2801:80:2000::/40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 03:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:da:04:53:32:2a:11:63:74:e1:ba:39:30:54:6c:5e:5d:15:bd:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 17 06:02:08 2026 GMT
            Not After : Apr 16 06:07:08 2027 GMT
        Subject: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:38:39:61:b0:d3:4d:24:18:49:3f:32:8c:
                    94:db:d7:28:92:67:76:c4:c3:cf:c5:63:3a:04:fb:
                    5e:78:99:93:b5:33:53:18:2f:ac:5b:90:02:f8:12:
                    34:1d:e2:39:08:80:f4:1f:9a:e9:43:f9:8b:60:9e:
                    49:7c:b1:27:f5:7b:30:50:37:7d:6e:dd:32:2a:29:
                    f9:bf:d1:50:04:f8:90:f7:94:20:9b:25:d6:7a:f2:
                    6d:c8:93:5d:5b:bb:68:01:7c:6a:86:e1:f4:56:8c:
                    ea:7d:fc:86:0e:57:75:09:a0:83:78:3e:35:cb:f1:
                    e9:60:fa:c9:9a:c1:5d:ea:45:22:9e:e3:b3:9a:46:
                    7d:5c:98:9c:57:6a:6b:87:30:fe:db:52:4c:53:b0:
                    bf:e2:d4:7d:0f:63:df:5f:cf:87:1a:6c:33:d3:74:
                    03:c2:35:11:0c:25:a5:16:0a:c3:a3:de:f4:21:18:
                    9e:5a:cf:a9:ab:3a:7e:dd:a7:05:ea:f5:0f:6e:c8:
                    6d:23:ed:93:64:3b:ed:30:e6:e2:34:58:a3:b5:24:
                    90:1f:94:c4:f5:d1:ed:17:ae:5f:c8:13:47:9d:ae:
                    09:95:dd:bf:26:71:00:93:aa:e8:d5:74:57:4b:90:
                    75:38:b8:a7:55:70:e6:b2:86:09:43:2c:3f:17:d8:
                    60:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.80.0/20
                IPv6:
                  2801:80::/48
                  2801:80:2000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28646

    Signature Algorithm: sha256WithRSAEncryption
         60:24:09:bd:dd:ed:ae:0b:3a:9f:53:b7:cb:d9:4c:ed:30:72:
         5a:6a:d6:fe:94:50:b0:c3:c7:64:84:7a:0c:a2:09:2f:43:2d:
         ee:04:35:ef:c6:cb:59:57:88:d5:b4:4a:74:86:80:b8:63:7f:
         2c:15:63:58:5b:77:94:5d:2f:73:26:68:3e:25:e1:5f:fa:57:
         83:b2:72:25:1f:ae:22:ec:30:99:aa:6b:01:9a:22:00:1a:2a:
         90:85:83:f7:1e:03:fe:e9:b2:7d:00:6d:e4:2e:37:b7:6b:c9:
         47:42:66:f1:f6:fc:86:78:2b:cf:d0:98:ce:67:b5:df:34:a5:
         2a:6c:5c:3e:f7:be:e9:e6:e1:fb:43:58:27:21:c3:71:c7:1c:
         88:3d:51:d4:4d:7d:3c:31:6b:5f:81:6d:72:78:44:b6:ba:ad:
         37:5f:b6:30:6e:01:80:1a:bb:84:37:7e:79:14:3f:fd:fe:d5:
         03:97:44:17:53:73:08:87:e0:fe:68:8f:e9:c4:4e:d6:8d:08:
         55:33:49:e1:01:9b:5d:7c:38:03:eb:0f:7b:79:e4:6b:e2:f7:
         dd:aa:ad:07:cc:bc:42:87:91:ab:d4:81:18:d7:ec:66:8e:2f:
         7d:ad:49:38:41:b1:a9:b3:ff:f4:9a:d6:99:a4:d2:03:78:aa:
         a2:76:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:52:33 2026 by rpki-client