Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer
File:                     D01D2EC076BDA62D438B972886851503EED04B2F.cer (raw, json)
Hash identifier:          qqnRrONGNl5kjjdmssUk/UOfdu/b1yIFoR7BRQjYId0=
Subject key identifier:   D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       31D6CA0E8E6AFD6DA7268254606295648B04DA0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 20 Sep 2026 05:49:14 +0000
Certificate not after:    Sun 19 Sep 2027 05:54:14 +0000
Subordinate resources:    AS: 268290
                          IP: 45.237.204.0/22
                          IP: 2804:4ee8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 12:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d6:ca:0e:8e:6a:fd:6d:a7:26:82:54:60:62:95:64:8b:04:da:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 20 05:49:14 2026 GMT
            Not After : Sep 19 05:54:14 2027 GMT
        Subject: CN=D01D2EC076BDA62D438B972886851503EED04B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:b1:59:1f:c1:59:07:39:11:ba:9a:cc:9a:
                    90:a7:9e:34:5a:fb:97:85:15:09:cf:7f:d0:7d:e4:
                    68:8e:40:96:d7:d3:fc:01:c6:2e:1e:67:01:78:0f:
                    ec:e2:a8:17:96:c0:76:5d:04:e9:4a:0a:dc:d9:54:
                    1c:7d:a9:d2:9c:55:49:fe:b7:07:1c:38:dc:2c:49:
                    58:fd:cf:9b:1d:94:2e:91:cb:82:b1:e7:6e:91:2c:
                    a7:de:b0:84:e7:ef:db:18:03:e8:f6:61:25:23:01:
                    c7:e6:d3:f4:c0:18:76:5d:d0:e1:ce:c1:e2:d8:74:
                    8d:26:6f:e7:57:a7:ab:9a:4b:3a:c5:d9:02:dc:22:
                    a6:b4:7f:78:f8:5b:82:26:5a:a9:7c:45:f8:a7:6e:
                    87:16:8f:bc:2d:39:dd:31:2d:93:fe:c8:cd:e9:8a:
                    4f:00:fe:94:53:d4:99:03:6b:3f:10:9f:8b:94:3a:
                    67:96:a8:9d:23:7f:1a:ca:79:25:24:82:d2:5a:35:
                    6c:30:ef:c7:57:4b:d4:31:c1:0b:50:75:2a:5e:ef:
                    03:b3:b6:bf:66:d7:d1:0e:d6:65:f8:54:ee:4b:73:
                    a6:e0:8e:54:b1:e3:17:5e:d1:af:83:00:37:b7:02:
                    b8:b2:4a:c7:87:31:f7:71:85:2c:73:56:41:ed:2c:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.204.0/22
                IPv6:
                  2804:4ee8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268290

    Signature Algorithm: sha256WithRSAEncryption
         26:17:a7:df:dd:78:64:80:04:b0:fc:b0:de:69:21:3e:f9:00:
         cc:37:cd:ef:6e:56:1c:01:e2:0b:83:68:dd:dc:8f:fb:e4:60:
         52:17:61:2c:a9:82:69:37:46:26:ef:ae:b4:c9:5f:bd:80:28:
         18:22:7c:ba:86:0d:8a:30:5a:6a:96:b9:df:78:9c:0d:2a:ab:
         96:bb:e7:09:24:45:77:56:ca:e4:06:37:e6:db:c9:f4:54:8f:
         25:12:bd:c3:8c:d2:1f:e0:4d:6b:cb:16:ba:f3:5a:37:cf:82:
         a4:ff:f6:b6:17:dc:29:86:f1:c3:f8:86:0d:e2:41:e2:b6:94:
         2c:8b:b5:74:ab:69:ba:66:66:4b:f5:ff:ce:ff:80:73:af:e8:
         25:88:a4:88:35:d5:b8:27:7d:e8:bd:54:d4:c1:3c:94:d9:63:
         ae:4e:10:68:ec:54:ec:36:d6:61:6b:4f:1f:50:74:ed:b0:df:
         45:a3:3f:69:ce:8e:b9:5c:21:9f:fb:f8:67:44:33:99:f3:1c:
         40:d5:4a:6a:f4:8c:4e:2a:d9:62:a0:5f:4f:d1:8c:18:b4:07:
         9f:ad:a8:55:1e:d9:f4:d8:e2:e4:75:db:06:9a:e4:5c:0e:27:
         8a:51:7f:c1:dc:8e:7a:55:9f:69:3b:82:4b:3c:ab:c6:5b:16:
         71:8f:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:11:45 2026 by rpki-client