Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer
File:                     48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer (raw, json)
Hash identifier:          m/80wXIFawnCC8+UQnifTXatn8QtFy8HWsOzpEViK2g=
Subject key identifier:   48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5123FF928E6E203BE4B6F583DAE12AAE3F70C3D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Feb 2026 21:59:32 +0000
Certificate not after:    Fri 05 Feb 2027 22:04:32 +0000
Subordinate resources:    AS: 271221
                          IP: 179.49.248.0/22
                          IP: 2804:781c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 21:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:23:ff:92:8e:6e:20:3b:e4:b6:f5:83:da:e1:2a:ae:3f:70:c3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 21:59:32 2026 GMT
            Not After : Feb  5 22:04:32 2027 GMT
        Subject: CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:92:fc:77:09:63:a0:1d:13:59:93:e0:18:
                    90:f6:29:7e:85:69:52:f2:f9:c7:c2:5f:7a:e9:8f:
                    75:a2:5b:66:c6:78:9e:42:a9:e6:ce:43:e3:9c:61:
                    67:66:25:e8:45:00:2a:b4:81:a1:24:55:25:13:bf:
                    1c:94:c5:b8:0b:9f:13:b1:77:7b:85:f9:15:d7:74:
                    63:72:58:a0:de:72:81:b3:98:40:72:77:0a:5f:60:
                    f3:a8:ca:f7:e8:da:82:80:8f:42:29:12:df:50:89:
                    8c:b3:0a:9b:58:2f:9f:0f:54:91:e5:80:52:2e:c2:
                    60:76:8b:96:36:ef:ac:02:85:ca:e5:c5:73:6b:0d:
                    46:a2:67:b7:30:8f:77:5f:dc:16:db:a5:5f:d3:f0:
                    df:d2:75:ce:10:80:3c:33:29:15:a6:0c:6d:4b:1b:
                    97:23:cd:02:09:4a:fd:31:8a:2b:d2:81:3d:e0:65:
                    cf:98:6d:90:f0:70:fa:3f:83:d9:68:a6:32:70:a1:
                    ab:db:d0:ad:2b:d0:96:ed:26:0a:25:be:91:98:97:
                    95:61:27:8c:a8:57:20:e6:68:03:e7:55:85:6f:2d:
                    ae:0c:0b:1c:00:cb:a0:0f:98:2f:83:b8:ce:ac:a1:
                    1d:01:10:2b:65:58:9d:81:b5:56:ad:f7:58:b9:86:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.248.0/22
                IPv6:
                  2804:781c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271221

    Signature Algorithm: sha256WithRSAEncryption
         2d:1d:b3:ad:41:ab:c4:a7:11:f9:b4:2b:e6:59:3c:57:3b:6c:
         61:b8:4d:12:21:e1:5d:39:a9:0e:29:fb:74:7c:31:72:a5:4b:
         74:32:fd:e8:29:d7:68:d2:22:04:fa:04:06:c9:89:c1:b4:d7:
         16:95:a7:75:33:ae:37:87:2f:d6:71:8c:16:f7:9e:b0:5d:25:
         d2:3d:4e:c5:28:18:0a:f1:c4:c5:b8:a3:c8:59:6a:00:e1:81:
         c7:76:0e:3a:ff:61:ab:e8:2c:e3:bd:19:e8:c7:7b:c5:ef:91:
         7d:84:23:22:5b:5d:1d:f3:43:c2:93:c0:ee:43:3f:54:1f:4b:
         7d:1d:66:ea:8f:79:66:66:38:14:18:2e:1b:90:e9:4c:19:0d:
         c4:45:f6:83:79:b9:aa:20:ef:36:8f:46:46:d7:01:44:f6:e9:
         97:0c:7c:64:f8:bd:3c:03:61:1e:b8:c9:20:a3:6f:a1:f2:5e:
         e6:d9:4d:4e:9b:22:9d:8f:de:0d:72:23:d3:6c:cb:6b:39:95:
         d6:de:8f:87:e8:50:bb:bd:77:5c:b8:2c:87:d4:e0:bd:fa:3f:
         f3:88:6b:bc:9f:25:af:e0:1d:de:55:d0:85:bb:ec:6c:23:15:
         e3:8e:35:91:c0:ad:99:c2:35:1f:9a:b3:31:fc:b8:c0:1a:33:
         eb:1d:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:04:48 2026 by rpki-client