Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/245875DC5C65401308CAA9A90B2DCB6A3D596DE2.cer
File:                     245875DC5C65401308CAA9A90B2DCB6A3D596DE2.cer (raw, json)
Hash identifier:          jpU83R/fzb7si4nmK3Ub686VzaO1Lxv4TwY+DkB7cC0=
Subject key identifier:   24:58:75:DC:5C:65:40:13:08:CA:A9:A9:0B:2D:CB:6A:3D:59:6D:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3AAB8BDA2CC1A71051D292F2B0DCF543C84B5E4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/245875DC5C65401308CAA9A90B2DCB6A3D596DE2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 13:16:57 +0000
Certificate not after:    Tue 26 Jan 2027 13:21:57 +0000
Subordinate resources:    AS: 266438
                          IP: 170.82.48.0/22
                          IP: 2804:37d4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ab:8b:da:2c:c1:a7:10:51:d2:92:f2:b0:dc:f5:43:c8:4b:5e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 27 13:16:57 2026 GMT
            Not After : Jan 26 13:21:57 2027 GMT
        Subject: CN=245875DC5C65401308CAA9A90B2DCB6A3D596DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0f:fd:35:26:7b:a8:a8:7a:e0:b0:c4:d0:14:
                    06:64:75:47:17:86:01:98:6f:90:7b:b5:d7:57:fb:
                    a0:87:09:2a:05:d1:77:79:29:b9:e8:06:a6:e8:63:
                    b1:68:53:42:f0:e3:39:0c:51:28:e9:f7:b7:6a:2e:
                    21:2c:ca:81:0c:9d:4e:10:8b:97:33:8b:67:18:6b:
                    5b:a9:0a:a2:2b:2b:6d:0d:41:18:e3:66:74:35:f8:
                    77:f8:e3:6d:da:16:b7:8f:4f:19:47:9f:98:24:1a:
                    29:c0:53:a9:db:1a:4e:0e:42:b9:ee:6e:1b:eb:08:
                    1f:d0:e2:4a:76:ab:dd:3f:76:2c:fb:a6:92:0a:f3:
                    02:f3:66:12:fb:0a:ae:e3:82:16:17:d0:fe:6f:28:
                    51:c9:85:cd:d2:54:48:a6:43:9c:45:00:7b:5c:78:
                    cf:a0:ec:5f:5a:8e:00:f8:38:c7:7a:80:db:75:37:
                    2c:02:e4:d5:d2:fc:1c:26:07:41:dc:5c:23:77:a2:
                    93:63:65:5e:bd:68:e7:52:94:aa:cf:bf:a8:6f:ae:
                    97:2b:07:6c:b9:8d:d2:14:8b:2c:95:24:f1:dc:a8:
                    6d:1a:e5:44:37:5f:0b:5b:0b:78:90:7b:fb:fa:9c:
                    f5:00:94:5b:3d:ad:2d:f0:d6:6b:ce:a3:7e:c9:7a:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:58:75:DC:5C:65:40:13:08:CA:A9:A9:0B:2D:CB:6A:3D:59:6D:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/245875DC5C65401308CAA9A90B2DCB6A3D596DE2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.48.0/22
                IPv6:
                  2804:37d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266438

    Signature Algorithm: sha256WithRSAEncryption
         3b:d7:71:8e:ec:3f:06:73:86:fb:6b:7d:50:e0:aa:84:1e:3c:
         ca:93:ca:62:c5:77:69:7b:c2:f6:ab:9c:05:01:47:da:03:58:
         ad:0a:a1:3c:57:e1:54:8d:0a:dd:03:50:4b:bb:13:bd:59:11:
         8d:9e:ec:ed:e3:dc:6d:b2:d1:70:cf:11:1b:73:e2:3c:0c:99:
         4d:58:1b:b2:4a:a0:42:8c:2d:02:da:21:63:be:d5:6e:16:ef:
         f9:4e:ef:0f:e8:22:be:06:02:d4:84:06:d2:16:04:37:4c:f9:
         e8:8f:59:b1:99:a9:bd:47:d8:5b:4a:4a:b0:21:12:08:e6:84:
         2a:0c:03:7e:01:11:df:49:b9:9d:4a:c6:09:e1:65:d3:1d:19:
         9f:44:61:cc:4a:0d:3f:d4:77:ba:44:04:ec:9e:c7:de:4a:13:
         4f:91:b8:d4:93:f3:f8:60:f0:9f:10:62:81:0d:0c:07:25:4e:
         fe:9e:4d:77:9d:18:ba:a8:ec:65:88:0e:34:48:63:9c:96:e8:
         b3:f8:de:0f:13:f3:97:15:dd:81:8b:d6:4e:60:a9:1d:8a:cb:
         63:dc:25:90:20:d6:7c:2a:cb:26:ca:18:cb:95:5f:ef:7d:2f:
         be:7a:66:39:ba:a0:33:d6:77:35:58:c5:39:8f:20:21:d2:7e:
         a7:a0:cc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:21:41 2026 by rpki-client