Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
File:                     020AFECF727CE88A459FCBC17D694507CE9ADE22.cer (raw, json)
Hash identifier:          C1qtFkSSPOXlq1DHpl+BwFNNyB9Pn8QVwnY7WfX+TuU=
Subject key identifier:   02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E2FDDC6FF1EF88F2066615C7C64D336BEB4C7B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Oct 2026 06:30:28 +0000
Certificate not after:    Fri 22 Oct 2027 06:35:28 +0000
Subordinate resources:    AS: 268239
                          IP: 45.236.36.0/22
                          IP: 2804:4e18::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2f:dd:c6:ff:1e:f8:8f:20:66:61:5c:7c:64:d3:36:be:b4:c7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 23 06:30:28 2026 GMT
            Not After : Oct 22 06:35:28 2027 GMT
        Subject: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:13:f3:f0:92:bf:2e:1d:42:27:be:e5:77:f5:
                    35:a7:07:25:fc:77:b6:5b:99:2b:e1:db:98:cb:c2:
                    c3:3b:a9:3f:5a:a9:e0:42:9a:b1:06:9b:60:cf:34:
                    dc:70:5c:c0:85:9f:e9:8f:45:23:1e:88:1b:a2:05:
                    ca:29:e9:31:42:32:d0:d3:ff:de:74:20:c3:b9:2f:
                    62:a1:01:7e:a2:fa:9b:60:c6:cf:6f:4a:7c:5e:3f:
                    46:5f:f1:6d:84:15:07:bc:42:35:1e:72:3b:83:8e:
                    9e:0e:07:ce:55:d2:5a:17:e0:2a:b7:76:5a:8e:0b:
                    49:7f:31:0c:e7:50:97:c9:25:d8:97:dc:1c:69:4b:
                    c9:b7:b1:94:a2:b7:36:0f:0f:9f:c6:78:42:8f:82:
                    a4:53:25:67:bd:9b:12:c0:b7:bd:74:d3:32:77:50:
                    22:7e:f9:d9:10:f6:f8:28:46:65:f0:ee:4b:cb:26:
                    38:94:62:87:f6:f5:0c:70:a3:bd:f0:85:bf:7a:62:
                    c2:8e:e8:c4:64:1e:df:03:b4:1f:a4:1a:45:aa:2d:
                    38:25:88:53:95:fc:a2:b1:1c:f5:13:f5:a5:4e:73:
                    a2:3c:cc:40:ce:18:0e:7b:82:ac:0d:2b:6c:b3:53:
                    5c:90:ed:ac:09:a9:60:b7:25:64:a9:15:54:f9:41:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.36.0/22
                IPv6:
                  2804:4e18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268239

    Signature Algorithm: sha256WithRSAEncryption
         b6:45:a6:3e:5b:8f:d2:ef:c1:95:28:96:6c:84:4a:f2:f3:61:
         e2:c4:e0:34:b0:a3:98:c5:df:24:fa:da:9f:03:f5:18:e9:f1:
         7a:37:1e:d9:f9:32:48:b3:67:e8:49:b7:00:d8:8b:ca:46:30:
         29:b5:1f:9c:3a:1f:fa:76:e7:a6:92:55:47:0a:d1:7b:d9:c6:
         81:33:ee:83:c7:2c:df:1c:24:a1:23:78:17:70:31:d0:d2:9f:
         86:f9:b3:c3:6d:ec:0d:6d:6f:a4:af:27:c8:b0:3f:86:b5:8a:
         ce:35:8f:c1:45:a9:13:c0:38:de:35:a8:6a:38:6f:54:2d:94:
         98:5a:91:61:98:ea:b0:d8:e2:8b:fc:8a:ba:25:8a:11:74:af:
         1c:87:53:9c:95:91:e6:5e:f2:cc:85:5f:18:eb:28:d1:94:46:
         41:17:50:09:16:7b:e4:00:39:1a:51:d0:56:94:4c:f3:8b:54:
         82:8c:74:64:6b:93:d9:7c:fa:b1:ff:2a:03:ce:f8:85:65:4e:
         58:7a:63:fe:21:1e:14:4f:f6:ee:45:38:c1:04:32:61:20:fc:
         40:d1:0c:6e:6c:06:a7:e4:51:4f:70:02:fd:b4:23:fb:93:e6:
         31:c6:ea:15:13:7f:71:98:85:be:47:27:1a:ec:65:74:56:42:
         80:f1:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 20:43:16 2026 by rpki-client