Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
File:                     328938F6B87D58141D853FA04B61F2EC68371E43.cer (raw, json)
Hash identifier:          oZCLAO2XEJk5q/2p4EDfVa5UkTAli8gc9TKORfLRga8=
Subject key identifier:   32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       633AC2EB06A07EEF79A4ED8E10CDFD63139ECEFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Feb 2026 20:34:41 +0000
Certificate not after:    Wed 03 Feb 2027 20:39:41 +0000
Subordinate resources:    AS: 272185
                          IP: 2804:833c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 21:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3a:c2:eb:06:a0:7e:ef:79:a4:ed:8e:10:cd:fd:63:13:9e:ce:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  4 20:34:41 2026 GMT
            Not After : Feb  3 20:39:41 2027 GMT
        Subject: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:53:82:bd:9d:01:e5:5a:2f:e0:c7:44:b5:
                    d7:a5:97:00:b5:2d:cc:8d:1a:12:0c:aa:87:d8:fd:
                    bb:1a:1f:43:66:35:9a:59:6d:f9:9b:7c:7e:dd:55:
                    67:0b:ae:7e:79:17:e0:05:3b:68:7c:b1:d8:ea:a0:
                    9d:ad:2c:a3:31:5a:60:5f:44:e7:a4:a7:5f:96:15:
                    df:03:df:aa:93:b9:9a:86:09:5b:18:51:a3:46:fc:
                    8f:b7:92:67:f4:81:39:f4:02:eb:99:70:c5:aa:e6:
                    bc:cf:1f:e0:d5:5f:67:eb:43:04:06:c4:c8:65:35:
                    e9:54:74:da:d7:06:26:5f:9b:6b:92:45:48:2e:3a:
                    2d:41:aa:c2:6d:f7:7c:c2:fa:1d:7b:b0:da:d0:80:
                    9d:f6:bb:b9:83:a7:ac:fa:0d:cc:64:18:9b:73:a4:
                    fc:90:34:42:73:19:d2:be:d7:6e:96:31:6e:cf:04:
                    96:5e:ee:31:d2:89:f0:dc:0f:7c:9a:e3:15:ee:35:
                    aa:08:e5:24:9c:c8:7b:53:a9:f8:9d:54:c8:84:02:
                    85:0e:b5:ce:4c:74:5f:17:e7:73:a1:57:e6:b1:d4:
                    a9:eb:0e:21:d6:eb:54:53:08:5d:d8:a8:e3:08:ed:
                    5d:01:3d:06:8c:5b:a5:26:69:2c:0e:34:4e:11:6f:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272185

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:4a:3e:ce:80:f3:70:e1:52:75:38:4d:59:37:19:f0:48:
         c3:b8:bf:6b:1f:41:e3:34:29:37:77:bc:e1:e5:01:55:5b:c5:
         cf:8c:0d:8a:cc:ed:be:9a:84:a6:b6:f4:13:3e:01:f6:bd:13:
         e7:a2:ab:30:91:97:53:94:21:df:38:a5:79:54:a3:d8:9f:b3:
         26:7c:6d:e6:36:b1:03:a4:9f:89:22:e6:e6:b2:de:b0:74:99:
         5c:28:d4:7a:ff:ef:3e:03:e9:65:41:cf:91:f6:d7:c3:d6:78:
         db:b0:7e:29:09:91:d7:82:40:fd:a1:9d:46:0b:c8:0e:34:1b:
         ce:2d:43:14:91:7a:51:bd:c6:b7:97:84:68:b9:89:9d:bd:de:
         3a:1a:79:16:c0:44:fd:b0:93:58:35:f1:24:15:fd:45:36:3d:
         11:60:78:f5:13:9c:a4:b0:c1:eb:0d:44:5a:9b:e8:31:f6:91:
         ee:a5:d9:cf:63:e4:e7:4b:d0:af:07:26:79:ab:6d:91:32:3c:
         d3:7b:7a:c2:fd:8c:a4:3e:92:fa:7f:7e:4d:be:39:0d:7f:75:
         84:8b:f7:57:b1:8b:b9:99:ac:18:f3:a7:6c:08:84:78:45:56:
         75:5d:41:cc:53:4f:bf:c0:69:7f:5c:1b:5c:a2:18:c5:25:46:
         f6:25:6e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:04:52 2026 by rpki-client