Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
File:                     140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer (raw, json)
Hash identifier:          GEZvetlFIxCzl9JnoI7vZ65KLaMhQKPj0U23IHlg3ho=
Subject key identifier:   14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B609849FFB7F375FA2C0F03441DD54A74BA2475
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Aug 2026 02:01:47 +0000
Certificate not after:    Wed 25 Aug 2027 02:06:47 +0000
Subordinate resources:    AS: 52765
                          IP: 160.238.228.0/22
                          IP: 168.197.156.0/22
                          IP: 170.239.72.0/22
                          IP: 177.39.120.0/21
                          IP: 2804:b54::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 16:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:60:98:49:ff:b7:f3:75:fa:2c:0f:03:44:1d:d5:4a:74:ba:24:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 26 02:01:47 2026 GMT
            Not After : Aug 25 02:06:47 2027 GMT
        Subject: CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:f8:63:89:91:ae:45:2f:8b:85:a0:96:cc:
                    36:36:73:62:86:93:4c:d8:48:fb:6b:dd:b2:4b:53:
                    6e:26:7e:0f:c9:84:0a:a1:12:21:46:16:6f:5c:20:
                    f1:b9:e7:bf:2e:a8:fb:20:42:17:a9:e4:bd:1c:15:
                    5a:29:26:4b:a3:cc:b0:63:d4:1a:6b:2e:0f:43:4e:
                    29:8e:87:89:52:c7:06:9c:81:4a:dc:26:f6:1f:1b:
                    f8:f4:14:cb:f9:e7:eb:79:38:53:00:f4:54:50:69:
                    bd:b1:5e:8e:76:d7:ac:0a:56:37:96:41:c4:99:7f:
                    3c:ee:9a:10:72:f4:b7:b4:a2:7d:85:66:e9:20:b9:
                    68:27:6a:6f:72:81:a0:cf:ef:b9:e7:53:c4:1f:07:
                    f1:e6:e8:ed:7b:7e:2f:42:5e:1f:2f:96:20:29:cc:
                    40:3a:31:b1:66:ad:18:ef:7e:f1:90:be:ea:21:6e:
                    19:9b:b6:4f:aa:a6:1b:c0:4b:c3:3d:31:0c:e7:4c:
                    46:b1:00:f8:a9:5e:66:c2:52:04:81:f0:2b:8e:a3:
                    f4:0a:59:04:58:95:e0:78:b9:aa:ee:da:39:8b:f5:
                    50:83:7b:e4:1f:3e:02:65:8c:99:4a:2e:6a:85:0c:
                    6d:2d:37:b0:ec:0f:f7:39:68:95:38:3d:3f:31:c3:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.228.0/22
                  168.197.156.0/22
                  170.239.72.0/22
                  177.39.120.0/21
                IPv6:
                  2804:b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52765

    Signature Algorithm: sha256WithRSAEncryption
         63:f3:52:8d:e3:3a:ff:5b:9d:23:bc:ef:4f:9e:12:98:1b:d4:
         98:de:69:13:e2:87:cc:89:31:19:0b:54:33:55:0a:3d:7b:0c:
         a9:e3:94:c0:41:1a:de:83:89:66:e0:02:03:ae:bb:f7:41:a2:
         d0:5c:b4:26:06:9b:5a:9d:be:56:68:f4:c2:87:36:2b:61:b3:
         67:c8:f6:8c:74:b6:d8:1a:b9:3a:95:f7:90:83:f9:ea:1a:37:
         2c:b6:87:9c:e4:9f:33:1a:0b:93:00:fe:dd:75:21:b1:49:8e:
         17:53:05:8b:b2:15:17:32:06:8e:fe:a9:c1:e1:fa:96:ce:ac:
         10:de:39:5b:13:2d:c3:df:39:d8:7e:6b:ae:33:c9:15:7f:a5:
         af:68:3a:16:b1:b6:13:34:20:51:cf:30:70:3e:0e:13:24:e7:
         4b:21:46:fb:b5:ca:8f:c3:c7:e4:12:22:ef:9d:f5:ec:19:a9:
         00:d7:42:e9:96:b7:8e:46:33:f4:cb:e2:8a:a8:a4:10:94:8f:
         69:38:c1:13:19:84:31:7f:23:09:62:21:d5:ad:c5:5f:be:0d:
         19:fc:f4:ff:c3:b7:ff:48:5d:a9:6c:d6:ed:cd:f0:b0:7e:d7:
         c3:d9:b3:ad:0e:f9:26:e3:40:1d:14:1e:9f:02:72:a1:e7:b9:
         2e:ec:cf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:15:44 2026 by rpki-client