Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D23E8B5A8BDD7B4069179C1C314FA887A2E89815.cer
File:                     D23E8B5A8BDD7B4069179C1C314FA887A2E89815.cer (raw, json)
Hash identifier:          sYu2GZhkxVP3ElN9DZiWyQaHpTQ5a1SImLB6dufMOeE=
Subject key identifier:   D2:3E:8B:5A:8B:DD:7B:40:69:17:9C:1C:31:4F:A8:87:A2:E8:98:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C135FD027D2EAA919ADD5749E66184BCD1B4B21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/34HjjK8ab8yYcmh6unRsD38ncVCDGeVWseAJNjRf8oUp/0/D23E8B5A8BDD7B4069179C1C314FA887A2E89815.mft
caRepository:             rsync://rpki-repo.registro.br/repo/34HjjK8ab8yYcmh6unRsD38ncVCDGeVWseAJNjRf8oUp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Sep 2026 23:50:03 +0000
Certificate not after:    Tue 31 Aug 2027 23:55:03 +0000
Subordinate resources:    AS: 269373
                          IP: 45.185.112.0/22
                          IP: 2804:63a0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:13:5f:d0:27:d2:ea:a9:19:ad:d5:74:9e:66:18:4b:cd:1b:4b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  1 23:50:03 2026 GMT
            Not After : Aug 31 23:55:03 2027 GMT
        Subject: CN=D23E8B5A8BDD7B4069179C1C314FA887A2E89815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:a1:3e:97:5a:57:89:8d:e3:45:d6:72:b3:
                    c6:f9:e6:28:c8:20:a5:40:dc:d3:6f:b2:9f:6a:be:
                    38:dd:a0:6f:6d:fd:5a:64:54:15:be:15:0d:35:7f:
                    45:7c:fa:2e:2e:22:56:84:15:6c:60:cd:93:aa:19:
                    5c:19:34:f5:96:0d:62:0b:c0:05:0d:72:e7:74:1b:
                    a8:9b:67:ea:33:95:3d:be:a1:02:af:3d:6d:b1:bd:
                    b0:17:b2:94:f2:4b:0b:f4:ee:c7:22:6c:60:3c:0f:
                    3d:9b:ad:47:e8:86:00:b8:5e:d4:94:87:7b:f0:32:
                    f4:ef:58:43:6b:86:25:07:5c:b5:ea:0f:9d:f5:3a:
                    a8:62:dd:1d:9c:7e:e9:72:cb:a4:4c:9e:38:e7:07:
                    2c:aa:f7:19:cb:db:af:69:94:25:06:30:fe:dc:fc:
                    ee:43:0c:9f:a9:91:44:bc:3b:83:54:aa:a7:35:0d:
                    43:d3:ba:d1:c2:57:a8:c3:5a:23:c5:b3:0d:69:0d:
                    b3:ad:38:b5:fc:c6:ae:f9:1c:a5:e3:61:ed:7c:e8:
                    82:ba:b8:ae:f2:dd:44:4b:70:f2:af:15:5c:fb:4b:
                    35:46:09:c4:8e:b5:01:09:37:ae:95:f7:6d:fe:bd:
                    98:cf:1c:1f:69:ec:2f:a6:36:98:16:04:7d:db:0b:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:3E:8B:5A:8B:DD:7B:40:69:17:9C:1C:31:4F:A8:87:A2:E8:98:15
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/34HjjK8ab8yYcmh6unRsD38ncVCDGeVWseAJNjRf8oUp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/34HjjK8ab8yYcmh6unRsD38ncVCDGeVWseAJNjRf8oUp/0/D23E8B5A8BDD7B4069179C1C314FA887A2E89815.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.112.0/22
                IPv6:
                  2804:63a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269373

    Signature Algorithm: sha256WithRSAEncryption
         4e:65:b5:63:2c:37:2b:02:79:f1:ba:58:fc:76:20:3c:5a:df:
         eb:2c:ae:05:b8:8b:0e:2f:a7:8b:36:24:2b:75:27:fc:1b:79:
         f3:1b:a3:de:1c:b9:00:ba:42:0e:12:ec:25:7f:4a:b9:72:0b:
         bd:d3:08:7a:26:47:33:93:ce:91:01:2e:ce:d3:f9:46:44:7f:
         f0:8c:ce:92:c7:37:3f:26:f3:38:6e:ce:12:3e:70:81:8f:c4:
         ba:dc:0a:e9:c4:ec:88:a9:5e:16:30:75:62:5a:7c:bf:be:f2:
         d7:1b:65:f0:be:a4:9f:e9:74:c3:a8:6d:f5:86:eb:26:ea:6c:
         a5:7b:fd:3e:1a:d3:6b:90:70:91:ba:64:04:fe:fa:01:ed:58:
         83:af:30:31:c9:f6:b6:2d:44:c3:e1:d1:c6:a3:92:3f:02:ae:
         fc:f8:2e:99:a2:2f:21:ba:2b:09:00:c7:a5:97:e6:0d:f2:44:
         18:74:e5:6a:09:a1:c4:58:91:7c:b3:7d:d0:cd:5e:f6:2e:61:
         9e:38:09:0d:dd:85:ef:e4:5a:21:2a:f8:5f:61:16:9e:f7:a5:
         bb:a1:c6:5c:7d:01:de:cc:ce:03:20:c7:49:04:35:ce:bc:c6:
         09:fa:e5:c6:4f:0c:02:c1:3b:e1:81:74:68:01:dc:96:e9:56:
         76:05:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:14:47 2026 by rpki-client