Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.cer
File:                     C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.cer (raw, json)
Hash identifier:          NWDPtPGhZeMB5javoKh3EFa7pSbRYaiX4htVsHEs/nQ=
Subject key identifier:   C5:3D:9E:6D:AA:8E:F4:A0:CD:81:4E:2F:7A:8E:FA:82:FD:65:63:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05C920395C031AF03BF822D5750A6D1B57F9614B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Sep 2026 21:19:14 +0000
Certificate not after:    Thu 16 Sep 2027 21:24:14 +0000
Subordinate resources:    AS: 53101
                          IP: 177.107.208.0/21
                          IP: 187.103.144.0/20
                          IP: 2804:6e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Sep 2026 17:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c9:20:39:5c:03:1a:f0:3b:f8:22:d5:75:0a:6d:1b:57:f9:61:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 17 21:19:14 2026 GMT
            Not After : Sep 16 21:24:14 2027 GMT
        Subject: CN=C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:60:45:f7:df:21:bd:1e:50:66:38:87:96:
                    1f:45:ec:a2:a1:80:30:7a:aa:0f:b0:25:54:f7:c5:
                    c2:f5:b3:b2:bf:70:fd:d6:c6:f3:6d:e4:4a:f5:fe:
                    a8:18:7a:70:56:09:91:c5:1e:ac:26:e8:be:6b:a5:
                    19:02:68:a7:4e:44:3e:15:7d:c5:71:90:0d:4d:22:
                    17:9f:35:41:bd:d1:73:58:49:f7:51:64:98:4e:4e:
                    da:44:ae:2a:14:34:2a:d6:78:ef:97:4f:fc:0c:34:
                    2c:01:22:69:97:38:9f:2d:35:b1:2c:d5:71:b9:58:
                    cf:51:4c:64:e9:c9:d0:2a:20:85:8e:2b:ed:eb:e6:
                    6d:30:e4:00:24:e3:56:68:2f:65:f2:a3:7d:b6:08:
                    18:0d:47:f2:e0:fb:79:ea:e3:39:da:38:ea:2f:e5:
                    d1:93:bd:80:5b:64:2c:27:52:ed:9d:af:f8:a0:30:
                    49:99:35:7a:0d:df:88:77:24:7d:5d:67:6a:12:f8:
                    2d:06:e1:a8:13:8c:c4:5d:e4:a1:04:9d:5a:b3:8f:
                    bc:bd:1e:f9:23:c3:75:69:80:c4:f5:75:9a:29:17:
                    10:7b:b5:8a:5b:4d:b2:18:70:b0:36:e4:04:df:b1:
                    ba:89:8c:43:84:9c:c5:e6:fd:34:22:72:78:82:3c:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:3D:9E:6D:AA:8E:F4:A0:CD:81:4E:2F:7A:8E:FA:82:FD:65:63:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.208.0/21
                  187.103.144.0/20
                IPv6:
                  2804:6e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53101

    Signature Algorithm: sha256WithRSAEncryption
         47:90:23:e9:d2:5a:02:bb:ee:c9:5a:73:91:d0:ca:39:58:fc:
         81:ac:45:8b:42:fb:02:35:11:d9:8c:b6:ae:2d:58:15:e3:a5:
         4d:44:20:5a:cd:e8:7c:17:fb:7b:fd:47:7c:85:45:ec:b1:af:
         6e:15:3e:5c:08:33:19:cb:fa:eb:b8:31:3a:64:8d:86:a8:c4:
         54:ec:90:60:06:bf:c5:7e:6b:60:0e:fa:fa:f9:21:45:86:1e:
         09:f0:56:ed:a3:80:e0:c5:9b:0a:a0:95:67:92:35:35:a6:5b:
         c2:fe:cf:1b:1b:e2:42:57:f9:9c:1f:7c:71:ce:ed:70:62:e4:
         4e:78:e6:24:6f:0e:d5:86:a5:4b:c1:6e:ef:7d:23:78:0a:38:
         10:00:97:64:ec:22:d1:8b:b3:3d:21:08:35:fa:55:bd:f6:19:
         f3:2f:54:a2:a4:16:23:0f:6e:c4:4c:80:7e:39:25:fc:1c:2f:
         79:93:38:95:d9:77:e8:0a:91:03:d6:50:ba:4b:57:59:f3:9e:
         f9:d6:51:24:da:c3:44:96:40:21:fd:3d:b6:4e:fa:f4:ed:39:
         41:b6:c8:7c:e6:0a:0a:4c:31:73:23:f6:20:82:43:37:f0:54:
         3e:d9:ea:1f:76:d4:f1:4a:8d:cb:b8:1c:6a:8a:78:35:c2:c1:
         8b:0c:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:39 2026 by rpki-client