Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF9F8C386184F700F7CB796CF2E9AB404D95B0F4.cer
File:                     AF9F8C386184F700F7CB796CF2E9AB404D95B0F4.cer (raw, json)
Hash identifier:          d6FiI5kb3dvPMZfPDd/uea3fUtxIw5wiFCRDy9UbQTQ=
Subject key identifier:   AF:9F:8C:38:61:84:F7:00:F7:CB:79:6C:F2:E9:AB:40:4D:95:B0:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54C03E4234B7953EA2648FF3DBB86125ABEC1D68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/AF9F8C386184F700F7CB796CF2E9AB404D95B0F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jun 2026 02:23:40 +0000
Certificate not after:    Thu 03 Jun 2027 02:28:40 +0000
Subordinate resources:    AS: 266565
                          IP: 45.7.40.0/22
                          IP: 2804:3df4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c0:3e:42:34:b7:95:3e:a2:64:8f:f3:db:b8:61:25:ab:ec:1d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 02:23:40 2026 GMT
            Not After : Jun  3 02:28:40 2027 GMT
        Subject: CN=AF9F8C386184F700F7CB796CF2E9AB404D95B0F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:49:04:2b:85:dd:20:f2:27:02:94:3f:92:
                    20:11:f2:0e:8f:10:f3:a0:59:08:ab:50:5e:58:11:
                    f0:3e:a7:9c:e8:47:28:de:9e:10:fc:88:82:08:87:
                    5b:e9:fc:4f:1f:d2:b4:f1:31:1e:23:8f:3c:b1:a2:
                    43:14:09:43:42:57:d8:aa:57:0c:54:e3:2e:65:be:
                    b7:43:6a:b0:39:c3:94:fc:98:26:25:5f:e3:5f:e4:
                    41:b4:20:fa:69:a2:a2:05:cb:48:b2:ca:03:1f:00:
                    33:d4:1e:8e:35:5e:c8:7d:a8:6d:1c:e8:02:b2:f9:
                    07:76:f0:77:51:4d:9b:59:6f:43:36:58:88:aa:bc:
                    9c:1a:f4:89:48:62:25:56:e6:f6:47:09:b6:73:8d:
                    db:58:9f:ad:fe:11:d8:82:c4:1f:70:e1:2d:c8:f8:
                    62:e1:9d:a8:6e:08:ca:00:8a:2b:77:b6:e5:66:2c:
                    3d:f0:35:59:91:f0:7c:06:0e:bb:57:19:96:96:e7:
                    76:68:84:08:14:05:b3:da:9a:c9:47:8b:85:8c:05:
                    7a:99:78:49:02:6f:ce:ba:ce:06:af:7a:29:89:a7:
                    db:f1:8a:7c:2d:95:64:76:da:c9:41:81:43:89:a4:
                    b5:22:01:19:37:c8:57:41:d9:c6:03:39:ca:49:6f:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:9F:8C:38:61:84:F7:00:F7:CB:79:6C:F2:E9:AB:40:4D:95:B0:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/AF9F8C386184F700F7CB796CF2E9AB404D95B0F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.40.0/22
                IPv6:
                  2804:3df4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266565

    Signature Algorithm: sha256WithRSAEncryption
         ab:c0:a1:7a:05:e3:dc:55:10:aa:b0:6e:a8:25:9f:ec:ec:71:
         3c:6c:78:f0:c3:a9:91:62:eb:ca:11:7c:0a:e9:2a:87:54:5a:
         42:46:7e:ce:57:3d:d9:97:b0:79:a4:54:f7:27:a7:2b:3f:b9:
         59:2c:32:d5:9f:4a:aa:7f:af:c1:d7:21:6c:7c:b9:ec:c0:5b:
         9f:e6:52:65:4d:98:56:b5:dd:e1:47:4e:a9:bd:a6:fb:2a:25:
         a6:a1:23:65:8e:a5:80:b9:f6:9f:6e:f0:69:93:8f:4d:4e:61:
         9d:cd:6f:e4:68:94:9e:e0:5e:2b:d1:b7:35:bf:0f:41:7b:b8:
         e2:33:3b:d6:e1:45:9f:60:be:e4:4d:76:fe:64:8a:28:6c:f8:
         a8:1e:e0:89:f4:9a:11:c6:c7:31:8a:fe:dd:10:6e:67:15:23:
         96:8f:fb:f6:36:5f:25:22:d5:cb:c2:e5:e7:a4:e3:7d:6f:38:
         a9:3e:7a:26:bc:9c:ce:07:07:93:ad:4e:af:34:8e:01:3d:e5:
         fc:51:88:e5:d2:b7:a9:3d:ef:12:24:ed:b4:56:dd:46:dd:35:
         5a:25:0f:00:21:5c:a8:b8:f2:65:8a:b3:d0:32:3f:8f:aa:7a:
         e3:cc:f6:9c:74:f0:2f:44:6f:cc:66:4f:72:f8:ef:a3:f4:a6:
         4f:c1:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:51:35 2026 by rpki-client