Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AEB71D4188C5199A2CDAE52929E93E4FE9BAFA79.cer
File:                     AEB71D4188C5199A2CDAE52929E93E4FE9BAFA79.cer (raw, json)
Hash identifier:          HMrb8qNGqIpLgHagpBgQttinTcyTwAn2J8t81DEFP1U=
Subject key identifier:   AE:B7:1D:41:88:C5:19:9A:2C:DA:E5:29:29:E9:3E:4F:E9:BA:FA:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       472850EBB040104674C62BFEFC61FDC54358A938
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/93UAW8BrajyzuT369gFZZSYSwz6PV9HeVtiS9shmmgSn/0/AEB71D4188C5199A2CDAE52929E93E4FE9BAFA79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/93UAW8BrajyzuT369gFZZSYSwz6PV9HeVtiS9shmmgSn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Feb 2026 20:31:18 +0000
Certificate not after:    Wed 24 Feb 2027 20:36:18 +0000
Subordinate resources:    AS: 264574
                          IP: 138.36.108.0/22
                          IP: 2804:21cc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 20:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:28:50:eb:b0:40:10:46:74:c6:2b:fe:fc:61:fd:c5:43:58:a9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 25 20:31:18 2026 GMT
            Not After : Feb 24 20:36:18 2027 GMT
        Subject: CN=AEB71D4188C5199A2CDAE52929E93E4FE9BAFA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:d9:5c:65:52:86:6b:01:b0:77:eb:15:0a:
                    c5:3d:c5:a5:db:9b:3e:76:6c:9c:07:64:7d:b6:d4:
                    2f:38:2d:fc:c6:88:56:fd:ee:6f:5e:f7:5e:11:85:
                    43:59:b4:42:68:85:bb:91:fa:cf:d8:93:7b:ae:35:
                    49:25:9c:ea:43:41:3f:84:b3:e8:7c:54:34:a9:2f:
                    f8:d3:ef:4d:b2:3a:00:64:e4:72:97:84:09:35:03:
                    cc:0d:b8:73:47:28:b3:fe:84:07:94:bb:23:a4:8d:
                    81:61:8d:e7:e2:98:03:44:da:1c:e1:db:6c:3d:a9:
                    c0:a4:0c:8e:e6:4e:ca:54:19:a2:cc:fb:f9:ff:00:
                    39:7b:a8:f4:aa:dd:83:a4:a1:b7:ef:b0:86:31:fb:
                    41:65:e4:c7:29:47:70:09:df:c1:18:b4:e7:8b:aa:
                    2c:2e:25:1b:61:6b:5b:e5:b2:5f:08:1a:de:9b:11:
                    45:b1:5c:b4:27:d7:ab:45:22:c0:e7:0b:53:8b:57:
                    a6:e1:f1:cb:10:5f:67:c9:ad:08:29:4f:be:42:71:
                    b5:44:ec:8f:64:00:e4:43:29:f5:e5:15:6a:22:fe:
                    63:2c:10:76:d6:bc:1f:24:10:d2:59:39:d8:f6:2a:
                    b7:61:eb:94:cc:b0:14:f4:4a:ce:cf:38:37:38:0b:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:B7:1D:41:88:C5:19:9A:2C:DA:E5:29:29:E9:3E:4F:E9:BA:FA:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/93UAW8BrajyzuT369gFZZSYSwz6PV9HeVtiS9shmmgSn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/93UAW8BrajyzuT369gFZZSYSwz6PV9HeVtiS9shmmgSn/0/AEB71D4188C5199A2CDAE52929E93E4FE9BAFA79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.108.0/22
                IPv6:
                  2804:21cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264574

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:76:57:ec:f1:1d:e2:a1:70:ee:32:bb:6d:f5:35:41:5d:
         c1:f9:d1:8a:17:18:7e:9e:b7:ef:8e:de:1b:de:d0:3f:2c:96:
         3b:93:77:e9:da:a6:de:09:e8:cb:5d:c0:47:29:a3:58:b0:4d:
         e6:ac:fe:bb:46:af:76:b9:58:de:4b:65:8b:4e:79:62:b9:9f:
         89:09:75:94:c1:59:9d:27:e1:5d:3a:d0:fd:b5:b6:4e:c5:fa:
         13:30:b9:4f:63:0e:ad:41:23:6a:e6:b0:64:8f:5d:ed:e5:1b:
         5f:f3:3a:f4:a9:fc:9d:9e:4b:86:e3:e4:8b:26:e4:4b:d1:93:
         9a:c4:27:cc:7f:29:f2:c3:3d:a1:12:21:ea:9d:62:f4:9d:38:
         1f:e7:5b:58:84:95:37:c7:19:34:82:95:6c:ff:3a:3f:da:e7:
         aa:36:63:e0:d8:24:c3:c3:37:bb:88:54:80:bf:45:bb:8e:67:
         88:68:dd:fb:ab:04:9d:73:f1:ac:61:5f:50:b5:36:ee:87:a4:
         26:28:b0:06:46:35:9f:73:44:73:94:32:30:75:c0:96:af:73:
         28:7c:b0:67:9c:37:8b:69:03:63:a8:3f:38:5a:54:e7:dc:62:
         38:6b:5d:34:36:ba:4a:ee:64:6b:0c:dc:b4:5d:ff:7c:ad:6e:
         f5:19:6b:46
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIURyhQ67BAEEZ0xiv+/GH9xUNYqTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAyMjUyMDMxMThaFw0yNzAyMjQyMDM2MThaMDMxMTAvBgNV
BAMTKEFFQjcxRDQxODhDNTE5OUEyQ0RBRTUyOTI5RTkzRTRGRTlCQUZBNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCewtlcZVKGawGwd+sVCsU9xaXb
mz52bJwHZH221C84LfzGiFb97m9e914RhUNZtEJohbuR+s/Yk3uuNUklnOpDQT+E
s+h8VDSpL/jT702yOgBk5HKXhAk1A8wNuHNHKLP+hAeUuyOkjYFhjefimANE2hzh
22w9qcCkDI7mTspUGaLM+/n/ADl7qPSq3YOkobfvsIYx+0Fl5McpR3AJ38EYtOeL
qiwuJRtha1vlsl8IGt6bEUWxXLQn16tFIsDnC1OLV6bh8csQX2fJrQgpT75CcbVE
7I9kAORDKfXlFWoi/mMsEHbWvB8kENJZOdj2Krdh65TMsBT0Ss7PODc4C7EbAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSutx1BiMUZmiza
5Skp6T5P6br6eTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTNV
QVc4QnJhanl6dVQzNjlnRlpaU1lTd3o2UFY5SGVWdGlTOXNobW1nU24vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzkz
VUFXOEJyYWp5enVUMzY5Z0ZaWlNZU3d6NlBWOUhlVnRpUzlzaG1tZ1NuLzAvQUVC
NzFENDE4OEM1MTk5QTJDREFFNTI5MjlFOTNFNEZFOUJBRkE3OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCiiRsMA0EAgACMAcDBQAoBCHMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQJfjANBgkqhkiG9w0BAQsFAAOCAQEAD9h2V+zxHeKhcO4y
u231NUFdwfnRihcYfp63747eG97QPyyWO5N36dqm3gnoy13ARymjWLBN5qz+u0av
drlY3ktli055YrmfiQl1lMFZnSfhXTrQ/bW2TsX6EzC5T2MOrUEjauawZI9d7eUb
X/M69Kn8nZ5LhuPkiybkS9GTmsQnzH8p8sM9oRIh6p1i9J04H+dbWISVN8cZNIKV
bP86P9rnqjZj4Ngkw8M3u4hUgL9Fu45niGjd+6sEnXPxrGFfULU27oekJiiwBkY1
n3NEc5QyMHXAlq9zKHywZ5w3i2kDY6g/OFpU59xiOGtdNDa6Su5kawzctF3/fK1u
9RlrRg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:04:55 2026 by rpki-client