Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.cer
File:                     9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.cer (raw, json)
Hash identifier:          SHikN0ASBt1FEfBV0hvqJWXuzL/0bwEFHIU/4+lKGBk=
Subject key identifier:   9F:9D:1F:01:2D:65:55:CC:F9:E1:B7:BF:D2:2C:A2:81:23:7F:AD:3E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       108DAEE256E0FC1D822D16A87B2307D772A1950E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jun 2026 20:48:50 +0000
Certificate not after:    Tue 01 Jun 2027 20:53:50 +0000
Subordinate resources:    AS: 268512
                          IP: 45.161.184.0/22
                          IP: 2804:5258::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 09:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8d:ae:e2:56:e0:fc:1d:82:2d:16:a8:7b:23:07:d7:72:a1:95:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  2 20:48:50 2026 GMT
            Not After : Jun  1 20:53:50 2027 GMT
        Subject: CN=9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:44:69:e4:88:12:7c:14:cc:71:fb:a7:e6:
                    b8:6a:e4:d4:29:87:ac:ce:9c:0e:16:2b:0b:c6:17:
                    c4:4e:9d:88:32:3f:58:d4:b7:50:30:2c:f7:dc:13:
                    df:56:69:61:9f:df:de:d3:97:51:f6:6f:d0:45:3f:
                    d6:a0:7e:d1:6f:cf:e7:42:37:5b:aa:dd:34:85:c4:
                    cd:2a:df:1f:25:d8:f1:58:fa:57:99:87:ff:48:0e:
                    67:30:4d:f9:c0:42:4c:bc:b9:9a:b9:09:54:cb:56:
                    57:57:d2:34:93:59:c2:d2:9b:22:a2:c0:92:e7:82:
                    8d:d3:9f:26:71:6f:fc:6c:ed:55:c2:c5:34:85:ba:
                    5e:58:3d:c3:84:8a:94:10:96:64:37:3f:9b:b4:6f:
                    a9:67:71:8f:3f:8d:bd:31:d7:1a:38:73:0b:7b:ff:
                    42:ba:10:71:d5:fa:9e:3f:20:47:f4:6a:88:28:0d:
                    b9:43:16:fb:bc:0c:7b:fe:64:99:af:85:ad:21:aa:
                    3d:13:37:d9:bc:7e:98:00:b3:98:36:23:3e:14:4e:
                    a6:5f:19:6b:2a:e3:c2:aa:14:b4:5e:10:1a:67:1c:
                    b9:d9:db:ad:86:a8:90:23:85:a0:d2:88:38:62:ea:
                    d4:60:ad:43:8a:e3:8d:67:4b:57:0b:0c:b6:20:d3:
                    0e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:9D:1F:01:2D:65:55:CC:F9:E1:B7:BF:D2:2C:A2:81:23:7F:AD:3E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/9F9D1F012D6555CCF9E1B7BFD22CA281237FAD3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.184.0/22
                IPv6:
                  2804:5258::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268512

    Signature Algorithm: sha256WithRSAEncryption
         64:d4:ad:b7:2c:cc:67:02:6a:f7:c7:3c:f4:e5:c5:e6:b8:06:
         fe:f1:73:36:47:93:e3:b2:b9:4a:3f:45:5e:d7:3d:da:92:16:
         84:3e:70:37:ad:f2:90:b2:55:88:82:74:e5:11:7d:44:47:06:
         1a:86:42:92:9c:02:5f:5e:e9:4d:c9:75:03:9b:ed:99:ff:1c:
         d3:51:9e:7f:19:03:21:6e:7a:88:64:d9:79:94:23:69:06:53:
         64:97:3a:67:94:81:40:fd:4d:9b:35:14:c4:ca:b4:b9:4b:2f:
         94:51:0e:5d:32:fa:de:f5:95:a6:7f:a7:63:8c:18:ab:2d:aa:
         7d:ad:35:86:41:8e:09:b0:9e:6c:00:55:3a:30:25:3c:c6:24:
         bc:10:d5:05:63:db:26:72:0f:b2:be:9e:3d:9b:0a:02:9d:49:
         5d:2f:12:ff:29:8c:d5:a7:92:97:93:1e:85:58:17:53:46:f7:
         d9:09:f6:b8:b6:89:87:5c:b0:b3:63:b9:a0:00:51:c3:02:4a:
         c5:6a:a5:a2:8b:b2:01:db:9e:a8:34:14:c0:6d:60:0b:1a:8d:
         1c:05:03:43:4e:a2:d8:fe:83:a9:be:c3:58:a2:a1:cd:05:39:
         fa:7a:ce:23:0f:ff:7b:3e:4b:4d:ad:8b:c5:95:8a:b1:fa:49:
         c8:c9:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:18 2026 by rpki-client