Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
File:                     B8BF0367B559121777A21A84D953A717D6E82AEA.cer (raw, json)
Hash identifier:          GnyGJjvfyqqy3waQvJGN3pyYv4FfSW0fdCJZHnS9pYY=
Subject key identifier:   B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5FA4488E39DEDCBA68ABBB9EAC71E89B59453CE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Feb 2026 17:59:53 +0000
Certificate not after:    Fri 05 Feb 2027 18:04:53 +0000
Subordinate resources:    AS: 263321
                          IP: 138.117.24.0/22
                          IP: 168.90.24.0/22
                          IP: 170.233.204.0/22
                          IP: 191.7.136.0/21
                          IP: 2804:1440::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 19:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a4:48:8e:39:de:dc:ba:68:ab:bb:9e:ac:71:e8:9b:59:45:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 17:59:53 2026 GMT
            Not After : Feb  5 18:04:53 2027 GMT
        Subject: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:52:79:60:a5:75:b6:e6:3b:7a:e0:46:19:
                    29:bf:97:f2:c8:41:a9:cf:4e:c8:63:fc:b1:ed:54:
                    6e:36:21:22:00:d9:36:f2:96:4a:ac:13:be:c9:b5:
                    4d:b9:ae:96:76:04:28:08:4e:65:ad:37:29:01:f4:
                    36:6d:ae:69:83:40:d5:a0:84:44:27:1d:d2:22:b8:
                    3e:a4:28:1d:59:c9:71:8f:77:c3:3a:ea:66:c7:02:
                    f7:75:ce:df:f8:b3:db:af:fc:80:44:d9:7b:88:6d:
                    d4:f6:f6:97:d5:c9:75:7f:a9:f5:e3:0d:13:e7:e9:
                    e2:0a:22:83:93:dd:d1:25:46:d3:5a:81:d0:53:0c:
                    c2:7e:e1:1d:f4:c3:76:91:3e:60:43:1a:f3:17:e5:
                    81:9b:ca:7d:d6:ff:ee:98:1c:52:22:fc:ce:f0:6d:
                    28:41:1a:2e:43:74:e6:d5:90:e2:94:2a:78:61:31:
                    49:e9:02:b2:7f:69:0c:fa:cc:de:07:94:63:5d:1e:
                    8b:cc:f2:3d:3e:91:4a:3a:ed:ff:b6:fd:74:04:73:
                    e2:f8:79:32:61:f5:a7:6c:38:cc:25:c2:55:be:8d:
                    a2:2c:e5:c3:e4:d4:03:07:11:b2:69:e4:9a:f8:e5:
                    b7:71:eb:02:27:97:79:39:28:09:5d:72:8a:a7:45:
                    c5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.24.0/22
                  168.90.24.0/22
                  170.233.204.0/22
                  191.7.136.0/21
                IPv6:
                  2804:1440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263321

    Signature Algorithm: sha256WithRSAEncryption
         30:77:35:6d:34:25:ea:28:2c:84:e9:24:ef:3c:e5:8b:a2:f7:
         73:7e:86:02:55:27:b5:0c:f9:48:92:15:72:c7:f6:cc:c6:7a:
         fb:12:da:d9:d6:6a:f9:6c:df:29:af:42:fb:98:62:02:17:ff:
         a9:b2:8d:10:69:17:01:f2:47:af:44:c7:a6:70:27:28:b9:c0:
         3d:d9:1d:3d:31:0b:55:31:14:60:9e:87:cb:e6:91:84:f7:17:
         06:be:a6:f4:b0:e9:ce:78:7f:fe:46:f4:5b:c3:a1:f3:dd:c2:
         71:20:6d:86:50:4b:4e:51:14:d0:bc:0c:c0:fb:cc:63:1f:08:
         c9:23:cc:6c:aa:c8:2e:91:fe:a3:fc:da:68:4c:42:d5:7c:bc:
         47:82:17:17:19:92:f3:c8:63:50:70:1f:b7:31:fa:5b:50:ec:
         f3:94:95:a7:1f:82:00:93:f6:11:78:cf:66:e4:f1:a0:43:b6:
         0c:dd:2b:5c:d4:96:90:c1:50:65:9e:45:b5:08:8d:bf:f2:a0:
         94:47:f7:da:fe:f2:28:2d:3a:6a:cb:46:97:2a:44:a5:ca:41:
         9e:34:41:69:a7:b8:dc:65:7d:f9:e8:3f:c5:11:e2:5d:6c:1c:
         44:8d:01:0b:e2:43:9e:84:19:a2:dc:8a:9d:5c:bc:01:7b:fb:
         7d:f2:f7:07
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIUX6RIjjne3Lpoq7uerHHom1lFPOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAyMDYxNzU5NTNaFw0yNzAyMDUxODA0NTNaMDMxMTAvBgNV
BAMTKEI4QkYwMzY3QjU1OTEyMTc3N0EyMUE4NEQ5NTNBNzE3RDZFODJBRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pVJ5YKV1tuY7euBGGSm/l/LI
QanPTshj/LHtVG42ISIA2TbylkqsE77JtU25rpZ2BCgITmWtNykB9DZtrmmDQNWg
hEQnHdIiuD6kKB1ZyXGPd8M66mbHAvd1zt/4s9uv/IBE2XuIbdT29pfVyXV/qfXj
DRPn6eIKIoOT3dElRtNagdBTDMJ+4R30w3aRPmBDGvMX5YGbyn3W/+6YHFIi/M7w
bShBGi5DdObVkOKUKnhhMUnpArJ/aQz6zN4HlGNdHovM8j0+kUo67f+2/XQEc+L4
eTJh9adsOMwlwlW+jaIs5cPk1AMHEbJp5Jr45bdx6wInl3k5KAldcoqnRcV7AgMB
AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4vwNntVkSF3ei
GoTZU6cX1ugq6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzI4
S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1BqSHEvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzI4
S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1BqSHEvMS9COEJG
MDM2N0I1NTkxMjE3NzdBMjFBODREOTUzQTcxN0Q2RTgyQUVBLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcB
Af8EMTAvMB4EAgABMBgDBAKKdRgDBAKoWhgDBAKq6cwDBAO/B4gwDQQCAAIwBwMF
ACgEFEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBASZMA0GCSqGSIb3DQEBCwUA
A4IBAQAwdzVtNCXqKCyE6STvPOWLovdzfoYCVSe1DPlIkhVyx/bMxnr7EtrZ1mr5
bN8pr0L7mGICF/+pso0QaRcB8kevRMemcCcoucA92R09MQtVMRRgnofL5pGE9xcG
vqb0sOnOeH/+RvRbw6Hz3cJxIG2GUEtOURTQvAzA+8xjHwjJI8xsqsgukf6j/Npo
TELVfLxHghcXGZLzyGNQcB+3MfpbUOzzlJWnH4IAk/YReM9m5PGgQ7YM3Stc1JaQ
wVBlnkW1CI2/8qCUR/fa/vIoLTpqy0aXKkSlykGeNEFpp7jcZX356D/FEeJdbBxE
jQEL4kOehBmi3IqdXLwBe/t98vcH
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:42:30 2026 by rpki-client