Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
File:                     237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer (raw, json)
Hash identifier:          N7OuJC5yDecHgGvvActagS3BYgyU+ssSaYyuHi5vSKI=
Subject key identifier:   23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       172D3F72F5C22528D15737F428FB3981A2B15A63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Oct 2026 16:26:06 +0000
Certificate not after:    Wed 27 Oct 2027 16:31:06 +0000
Subordinate resources:    AS: 271607
                          IP: 190.9.104.0/22
                          IP: 2804:7e2c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 23:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2d:3f:72:f5:c2:25:28:d1:57:37:f4:28:fb:39:81:a2:b1:5a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 28 16:26:06 2026 GMT
            Not After : Oct 27 16:31:06 2027 GMT
        Subject: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:01:25:0f:cf:15:60:93:45:91:9a:4f:87:
                    61:f3:62:9d:b3:00:12:34:d7:55:da:07:2b:70:40:
                    02:af:6a:88:44:57:a8:a5:ba:0d:01:0f:ba:f2:e9:
                    47:31:d7:43:aa:18:e7:8d:80:d1:26:13:4a:24:e3:
                    72:cd:6b:77:80:27:46:29:80:a4:b8:fa:d3:0b:80:
                    12:a2:1e:c7:93:b8:6d:d5:e1:a0:99:99:f2:49:ad:
                    05:a5:04:57:39:94:a7:04:b8:fb:67:ca:8f:02:58:
                    f4:a9:57:ae:e6:20:54:0f:35:7b:19:f1:21:8b:17:
                    f6:d4:8e:68:f3:65:39:1f:92:6f:13:34:7a:01:d6:
                    d9:7e:55:a6:19:cf:d6:2b:35:8a:1a:e9:b8:5d:18:
                    15:dd:d7:1d:b7:68:a3:db:5d:67:04:1c:3a:82:9d:
                    94:41:3e:3f:d4:c8:a5:02:41:51:23:ae:de:9a:cf:
                    62:d8:02:55:cc:67:93:3e:c7:56:53:29:c6:50:b4:
                    b2:6c:22:d8:51:8c:3b:16:2c:e6:56:06:13:eb:ac:
                    c1:6d:05:b7:5e:c7:85:93:e5:05:81:d6:45:11:c3:
                    4a:85:3b:52:c3:26:6f:31:83:86:9c:a9:ea:75:ee:
                    79:f1:ec:56:bc:ed:1a:94:f9:4a:fd:80:10:9f:b8:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.104.0/22
                IPv6:
                  2804:7e2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271607

    Signature Algorithm: sha256WithRSAEncryption
         66:1e:af:a3:d3:6e:77:b4:29:9a:d6:0e:c8:f1:a9:1a:f9:f7:
         23:f8:89:06:d1:cd:d2:ad:da:e9:93:d8:0a:ff:f8:2e:c3:4c:
         e2:88:9d:83:1b:10:c8:d9:27:29:82:4c:23:3f:cd:3f:8c:f1:
         3b:6d:86:2c:7e:84:a8:32:98:6f:3c:b0:e4:5f:b3:a9:71:68:
         15:97:a4:60:6e:ef:c6:b6:fa:67:9a:30:08:81:93:64:19:4b:
         32:b4:38:9e:01:86:a5:d6:3a:7d:f8:31:a3:02:8f:1b:ae:d8:
         82:70:f9:5f:8b:e9:5d:93:b5:59:19:2e:b9:63:f2:63:22:b5:
         b7:aa:4c:7a:0d:8c:51:3b:45:ff:69:af:53:3e:42:a3:cd:bb:
         9f:3f:e7:8f:d5:77:1a:df:33:cb:5a:18:fc:86:ba:96:24:14:
         f3:be:71:b3:1b:2a:51:1e:62:f3:d4:44:49:2f:3c:d6:6b:93:
         1b:ea:9b:e7:ea:83:14:98:83:ba:09:ee:08:c9:22:3c:3b:de:
         83:eb:58:0e:ab:17:01:81:23:9e:63:b8:80:e9:35:bf:61:66:
         b3:e6:e6:78:b3:f6:53:64:78:b0:f5:33:14:3b:28:02:f3:1a:
         a7:72:2c:43:d7:f0:af:04:80:6f:1e:0b:7f:4e:a4:ae:4b:c7:
         e5:f2:a5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:48:55 2026 by rpki-client