Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer
File:                     8DCB7831617AC9209CC97DB36614C6B05759A03B.cer (raw, json)
Hash identifier:          RJInxrQzWYa+5XHyRIVvmo/dR9ayk5yBRgOiAWpMAAk=
Subject key identifier:   8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55056EBF94DB6FFE8FA44C28CD9BC9C410E566D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Apr 2026 06:47:11 +0000
Certificate not after:    Wed 07 Apr 2027 06:52:11 +0000
Subordinate resources:    AS: 28139
                          IP: 186.235.176.0/21
                          IP: 187.49.16.0/20
                          IP: 2804:994::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 20:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:05:6e:bf:94:db:6f:fe:8f:a4:4c:28:cd:9b:c9:c4:10:e5:66:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  8 06:47:11 2026 GMT
            Not After : Apr  7 06:52:11 2027 GMT
        Subject: CN=8DCB7831617AC9209CC97DB36614C6B05759A03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:20:de:7c:4b:ea:42:57:cd:61:cd:f8:fd:
                    9c:d9:f1:37:66:29:64:fe:63:82:75:5f:13:e6:75:
                    5e:50:40:b3:d0:72:e7:bf:97:ff:50:9d:97:9d:b8:
                    2b:da:97:ea:f5:45:d5:fd:58:a9:34:74:18:14:7d:
                    95:c2:fb:ed:ef:4f:da:00:6a:1f:cd:ee:e2:e1:ba:
                    ed:80:b5:d1:3e:c9:47:7e:82:fd:95:e6:27:ec:54:
                    23:2b:ca:9b:47:fa:1f:f0:17:51:15:da:d7:75:7b:
                    92:cb:9b:52:74:d2:21:f8:22:44:ff:9c:75:60:0d:
                    68:11:d7:d4:39:0d:f8:5b:3e:18:d2:a4:30:25:09:
                    37:f7:e2:fd:3d:29:96:93:03:a0:e7:1f:b9:04:84:
                    3a:03:e7:93:1a:ee:ad:db:dd:87:e2:2d:3c:d0:b1:
                    22:9c:bc:b7:57:ae:d4:58:e4:ba:90:8e:74:f6:23:
                    d8:57:d0:1d:f4:65:1b:d0:45:61:71:d0:f4:51:06:
                    6c:db:e7:e7:b4:ee:5d:03:a3:58:27:df:2d:72:2c:
                    7b:42:50:0b:79:44:bf:07:61:b3:d2:d6:7f:99:57:
                    c8:8f:e5:9b:c0:3b:a1:d0:e3:f0:9c:1b:25:11:7f:
                    58:4d:5d:cd:01:b7:47:3b:9e:c7:c6:fc:b5:d6:a0:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.176.0/21
                  187.49.16.0/20
                IPv6:
                  2804:994::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28139

    Signature Algorithm: sha256WithRSAEncryption
         90:4a:fd:dc:ac:35:f0:60:f8:9f:45:f6:d9:00:8b:17:f9:95:
         2c:fb:17:90:c5:25:cc:70:fc:08:83:b4:a1:cc:11:13:bb:da:
         23:a8:29:fc:df:a6:da:28:52:36:da:ab:ee:32:1f:24:94:4b:
         31:6e:53:c0:39:4d:b2:2c:4b:1e:0f:c1:84:04:5c:c4:1d:ea:
         13:38:9c:a3:8d:02:5b:a9:1d:81:fe:9c:18:fe:86:5e:37:1b:
         55:f6:d3:bd:19:e7:47:14:0d:09:f8:78:b7:7d:3d:87:7c:fa:
         55:cb:9f:1f:41:a6:d4:56:6d:77:2b:a9:fb:d1:5a:8d:c3:67:
         68:13:d9:b0:11:65:88:a4:db:67:22:30:ae:00:f0:95:b3:ba:
         76:65:f7:0f:6d:85:3b:bb:b3:12:2e:9d:e8:08:65:d8:92:ef:
         8f:4b:43:cd:58:af:a7:e4:17:42:b1:9f:93:28:bc:b1:6d:a2:
         7f:08:f2:38:25:95:37:2a:07:02:c2:89:0b:72:1b:77:eb:6d:
         09:ca:b5:2d:bf:02:ef:8f:d6:66:78:3d:c2:5a:fc:75:6c:f6:
         66:35:aa:77:09:38:be:0c:67:0d:61:dd:b9:25:a1:3a:46:6d:
         6e:fe:87:f6:bd:00:1b:24:ba:14:da:3a:34:aa:03:a2:b9:72:
         02:38:68:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:17:37 2026 by rpki-client