Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
File:                     D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer (raw, json)
Hash identifier:          5WfnDHLXEPUZNk/wowBTHncJgjEpmQUwN4jdJowxSQg=
Subject key identifier:   D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26A8EBB9815A1FFE247503F0F13F4B3F3FDB4134
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Jul 2026 17:58:07 +0000
Certificate not after:    Thu 22 Jul 2027 18:03:07 +0000
Subordinate resources:    AS: 271414
                          IP: 181.224.0.0/22
                          IP: 2804:7b28::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 22:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a8:eb:b9:81:5a:1f:fe:24:75:03:f0:f1:3f:4b:3f:3f:db:41:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 17:58:07 2026 GMT
            Not After : Jul 22 18:03:07 2027 GMT
        Subject: CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:ab:a6:8f:f0:1b:e0:26:c9:b6:ce:ac:93:
                    50:2c:f5:62:65:93:f5:25:be:ab:ca:3d:ef:c5:b5:
                    e0:0d:39:b4:c7:e9:60:07:26:35:bc:18:dd:b0:93:
                    8c:a5:63:09:47:a9:cb:44:30:15:40:52:e0:94:c7:
                    d7:f3:53:00:5a:89:6e:ad:72:ea:a4:33:cd:d5:ab:
                    26:fb:d3:8d:87:c7:f3:b2:bd:7b:35:6e:64:7b:ee:
                    1e:91:4a:24:1a:28:89:31:2d:65:da:b3:4c:76:55:
                    a6:db:58:88:1b:fe:ac:b9:0f:52:d3:68:64:e1:86:
                    9a:ef:95:a9:6e:7c:66:3e:43:75:b2:b0:45:df:bb:
                    60:44:84:30:a7:77:3a:a0:f7:83:dc:b7:5a:21:fc:
                    0f:40:c5:84:f5:61:0f:27:d4:7e:a8:e5:d1:6f:fb:
                    a3:78:a7:32:0b:8e:62:da:c3:3c:8e:f0:f8:3e:76:
                    af:fb:c2:04:12:fa:48:2c:d7:8a:15:08:24:55:b2:
                    e3:d7:7d:77:fd:85:b9:ce:c9:c1:9c:b0:98:f3:94:
                    73:b2:95:fe:3b:5a:88:8d:74:91:12:e7:ce:85:d1:
                    cc:19:6f:f0:e9:86:13:fb:2d:4f:9c:d4:08:e1:ed:
                    97:bf:72:b3:26:8e:35:ff:4c:f6:64:52:58:b7:51:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.0.0/22
                IPv6:
                  2804:7b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271414

    Signature Algorithm: sha256WithRSAEncryption
         a9:95:79:63:c9:cb:0e:21:5b:64:19:2a:9f:a6:8c:44:95:41:
         0e:29:d8:f4:f4:bd:c5:4e:80:2b:2e:8b:46:74:c0:81:d9:d6:
         19:7f:2d:ca:c0:df:70:ea:6f:2a:49:f1:f1:cc:fc:aa:9a:af:
         41:e7:94:50:53:10:be:e8:3b:c4:74:50:2a:b9:9e:49:6d:fb:
         c7:c5:20:c5:d1:7b:ef:44:76:8e:73:4b:7f:9d:8f:2f:62:32:
         1e:01:36:a6:f6:42:34:cc:89:8e:f9:2e:cc:f8:c9:c1:43:1f:
         93:b1:12:ac:b8:21:10:ef:d6:4a:9c:ec:90:54:ee:5c:84:10:
         6c:67:7d:18:06:16:05:65:56:08:6c:f8:67:38:99:7b:46:32:
         25:ed:6b:7c:2b:08:42:da:83:16:12:ea:6e:10:7d:dd:cc:8f:
         21:04:20:d1:84:75:61:2e:6d:50:7c:72:1b:92:5d:85:f0:86:
         3e:58:bd:e3:72:12:95:e5:b0:bf:d5:9d:81:55:d3:0d:4c:a5:
         83:56:4b:9b:95:c3:3d:10:b2:5c:d3:a4:2b:a1:f0:e1:8c:e1:
         40:24:6a:f5:ac:19:21:38:8b:91:6b:c2:72:72:7e:eb:44:d4:
         f7:6e:c2:37:17:a7:19:bb:bb:32:78:f3:64:89:e2:e3:71:4e:
         b2:bc:f4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:41:41 2026 by rpki-client