Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/995252A0A186A5AC771DA6040FEF634B469DC2E3.cer
File:                     995252A0A186A5AC771DA6040FEF634B469DC2E3.cer (raw, json)
Hash identifier:          1FQSltopRHGG8kHH+m1QQhRonOxBbCgAOA1xoLGj2XI=
Subject key identifier:   99:52:52:A0:A1:86:A5:AC:77:1D:A6:04:0F:EF:63:4B:46:9D:C2:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       686EF14A21304E93D89FFAF1B887E614FEDFD3BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/995252A0A186A5AC771DA6040FEF634B469DC2E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Oct 2026 18:07:33 +0000
Certificate not after:    Wed 20 Oct 2027 18:12:33 +0000
Subordinate resources:    AS: 266049
                          IP: 45.4.144.0/22
                          IP: 2804:39c4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6e:f1:4a:21:30:4e:93:d8:9f:fa:f1:b8:87:e6:14:fe:df:d3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 21 18:07:33 2026 GMT
            Not After : Oct 20 18:12:33 2027 GMT
        Subject: CN=995252A0A186A5AC771DA6040FEF634B469DC2E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:fb:9e:0f:6d:db:6e:16:6b:e1:08:cd:07:
                    85:97:85:34:a6:2c:4a:18:0d:9d:33:75:79:48:10:
                    eb:a4:e4:75:5c:85:ae:f5:9f:46:e5:db:cd:7f:c2:
                    36:a4:d0:c6:54:b9:d2:0e:1d:f7:29:06:28:52:99:
                    5e:b0:79:dd:29:82:fe:f9:df:c2:76:20:41:84:2a:
                    11:46:89:83:03:d9:64:b3:40:5e:aa:46:e6:bc:e9:
                    0f:68:01:f6:30:04:bb:e4:6b:5b:0d:a2:9f:d2:3e:
                    7e:fe:94:b9:20:db:9f:ef:50:ee:f4:73:ef:e2:2e:
                    22:d2:e8:48:4d:ab:e5:e8:60:fd:c3:96:7c:ad:db:
                    33:73:37:c7:91:7d:cc:ea:a1:31:1c:40:9e:93:6d:
                    ab:58:48:bf:cd:e0:39:0b:79:35:f8:b8:d2:1e:1c:
                    1c:f3:18:e2:57:05:46:19:c2:4c:03:aa:b2:ae:99:
                    8a:e7:da:06:6b:98:fe:69:71:6b:1f:0f:18:01:45:
                    bc:1b:f0:91:a3:ff:2e:fd:2b:8f:3a:21:82:73:ed:
                    ba:40:ee:d6:c3:07:ab:c5:c3:48:3b:1c:75:f2:72:
                    c4:b3:d1:04:d2:f0:62:67:11:11:7b:74:23:67:ed:
                    a3:8f:0b:d5:55:ee:23:b1:b4:d5:c4:5c:e4:fb:3d:
                    12:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:52:52:A0:A1:86:A5:AC:77:1D:A6:04:0F:EF:63:4B:46:9D:C2:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/995252A0A186A5AC771DA6040FEF634B469DC2E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.144.0/22
                IPv6:
                  2804:39c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266049

    Signature Algorithm: sha256WithRSAEncryption
         a3:c8:ed:af:b8:e7:9d:1c:ba:a5:95:9c:e4:18:df:39:6d:49:
         13:21:19:64:b7:38:1e:b7:f1:9a:c0:5f:4f:09:ec:fc:06:d6:
         31:33:6d:9c:9e:ba:f2:71:3d:69:52:2b:c3:6c:02:21:4a:e8:
         9d:bc:c9:6c:a6:30:43:0c:8d:89:8c:1b:ff:3d:fb:48:70:f2:
         f8:6b:6f:15:57:56:3e:65:a7:eb:4d:50:14:3b:1c:bc:70:d4:
         b2:23:8f:f7:b5:5d:95:f4:c6:4b:04:c5:97:46:e8:7d:0b:16:
         fc:4c:9c:e7:c0:f3:f4:29:15:f6:02:17:9d:36:df:14:42:c9:
         41:3a:ff:77:e5:e0:17:af:f6:d3:a0:43:2f:1b:7a:27:d7:d3:
         98:c7:92:f8:8c:2d:92:fb:c2:9e:25:aa:92:e4:9a:ac:60:0a:
         58:7e:ab:97:84:92:1d:6b:e4:88:08:4a:ed:fb:d7:ae:d3:cb:
         52:12:bd:82:22:a6:10:6f:11:e8:73:f8:d3:7e:70:64:4f:74:
         82:27:77:f8:ed:f4:04:57:2b:ff:3f:7b:5c:74:b5:84:06:82:
         86:27:e9:15:cf:97:72:98:ab:7f:75:d9:5e:cf:58:15:dd:eb:
         7e:3b:f1:16:ab:e7:1c:3e:fc:c4:e4:55:7c:f6:fa:a7:1e:5c:
         19:78:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:38:38 2026 by rpki-client