Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.cer
File:                     48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.cer (raw, json)
Hash identifier:          s/YVG31RslhPbFuc6WBTHEC7kvtdYfS0kmQo+tzjLLg=
Subject key identifier:   48:C8:BB:91:A4:A5:1A:01:3E:78:E5:B7:DC:C8:F9:4E:A7:04:44:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C404C0748E10B1A5950D40A3569AFF18BF1B4B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Apr 2026 18:47:34 +0000
Certificate not after:    Tue 06 Apr 2027 18:52:34 +0000
Subordinate resources:    AS: 262539
                          IP: 45.234.63.0/24
                          IP: 177.72.24.0/22
                          IP: 179.124.196.0/22
                          IP: 2804:6f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 18:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:40:4c:07:48:e1:0b:1a:59:50:d4:0a:35:69:af:f1:8b:f1:b4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  7 18:47:34 2026 GMT
            Not After : Apr  6 18:52:34 2027 GMT
        Subject: CN=48C8BB91A4A51A013E78E5B7DCC8F94EA7044483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:53:2f:52:9d:fa:e8:ef:5d:e9:07:f3:2f:
                    b1:cf:5e:7b:2f:63:9b:01:6f:0e:04:49:24:7e:58:
                    d6:ef:7d:e8:97:f2:b1:08:9a:52:97:81:ad:d5:7e:
                    4e:0b:16:f2:73:39:3d:a0:17:e3:90:cf:e6:74:29:
                    41:c0:42:bf:8b:5a:e2:f3:1e:76:a4:76:6a:10:eb:
                    d8:2d:be:71:05:61:e1:39:25:c7:c0:f1:11:a5:6b:
                    e6:1f:33:54:d7:9a:ff:82:23:d9:a5:ca:d0:c1:bf:
                    fa:fd:cd:c2:8b:ce:57:72:8f:ce:00:54:b6:d1:f0:
                    0f:4f:a4:23:0a:bc:88:64:53:2d:64:a9:02:fe:24:
                    68:95:a3:22:38:d4:af:0e:2a:9f:fb:96:78:63:af:
                    a0:33:74:0d:c8:01:78:a2:de:68:49:24:de:6e:f2:
                    82:54:67:88:1a:60:9b:e3:69:6a:6d:38:b7:d5:87:
                    39:ce:57:ab:09:69:83:58:1a:77:d9:d4:96:b1:9f:
                    f7:df:ac:ba:84:d0:c3:18:a4:24:eb:ac:94:ac:56:
                    0e:fb:c1:97:52:e9:83:93:13:7c:54:56:28:2b:df:
                    7e:a9:32:55:3f:2c:51:80:77:08:21:d6:2a:98:41:
                    84:52:90:61:d6:db:4d:c9:9f:ba:e1:8e:ee:17:9c:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:C8:BB:91:A4:A5:1A:01:3E:78:E5:B7:DC:C8:F9:4E:A7:04:44:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.63.0/24
                  177.72.24.0/22
                  179.124.196.0/22
                IPv6:
                  2804:6f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262539

    Signature Algorithm: sha256WithRSAEncryption
         82:f5:79:e5:b0:12:30:74:d8:dc:41:08:0a:40:36:76:99:a5:
         5e:af:6b:5f:52:92:9e:18:a3:83:ad:29:dd:9e:67:2a:1f:8b:
         b5:9a:ff:41:46:89:fb:f1:27:c3:36:63:e0:3b:47:3e:32:0c:
         77:57:4a:7c:4e:ec:16:f4:5e:54:aa:11:b4:38:c3:79:5e:92:
         07:11:ab:fc:71:be:04:0e:f5:a3:b7:d7:ab:e9:68:fa:20:76:
         e6:95:c9:a7:d3:1d:66:c4:7c:58:1a:75:a6:97:ad:e1:5a:f7:
         2b:1b:47:61:cd:3e:22:93:e0:48:52:c1:54:9e:6c:19:b2:71:
         d9:81:11:48:51:70:58:dc:52:d7:55:de:68:46:7f:47:bb:18:
         01:b1:1a:ad:d3:a6:60:4b:16:d0:0a:6a:d9:2a:bd:f2:f7:a1:
         a7:82:66:3c:c8:75:92:9d:7f:8c:a5:f3:c5:33:49:0c:b6:19:
         a7:05:a8:74:29:82:49:58:25:89:97:fd:5b:90:8a:a7:3b:c3:
         ab:98:ee:3c:0b:de:d6:f1:bf:9c:5d:74:dc:1a:77:11:fd:ba:
         0b:0f:cd:6e:9e:79:7b:7c:c8:7a:3b:bd:74:b0:ff:7f:7d:26:
         4a:90:9a:18:39:51:ca:d2:52:f1:90:c1:11:6f:e5:b9:87:71:
         4c:48:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:00:39 2026 by rpki-client