Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer
File:                     2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer (raw, json)
Hash identifier:          U7BmBeOl8qxAMZ2QaJNEmWQu0JFu46CF6ieM7tfRI/k=
Subject key identifier:   2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4A613E183B6C6CDED03E5F810720876105EB13B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Feb 2026 14:35:35 +0000
Certificate not after:    Fri 05 Feb 2027 14:40:35 +0000
Subordinate resources:    AS: 61877
                          IP: 186.251.72.0/22
                          IP: 200.24.88.0/22
                          IP: 2804:1ab4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:61:3e:18:3b:6c:6c:de:d0:3e:5f:81:07:20:87:61:05:eb:13:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 14:35:35 2026 GMT
            Not After : Feb  5 14:40:35 2027 GMT
        Subject: CN=2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:46:61:e1:da:ee:d4:44:68:78:36:80:b1:
                    a5:99:a7:04:3c:7c:34:3c:da:9c:4d:15:4e:4a:69:
                    69:35:80:6a:60:fe:fa:eb:93:86:96:9a:15:03:91:
                    2a:5e:42:a4:5e:29:11:d4:69:db:17:dd:04:38:d1:
                    f7:fc:18:bd:66:0e:fc:bc:0c:6b:2a:55:23:54:cd:
                    57:a5:78:0d:84:ec:f0:36:85:17:a1:de:14:a4:af:
                    73:66:b8:e5:c1:20:47:75:f0:2a:7f:11:e5:8f:93:
                    cd:7a:a7:95:f2:6c:3b:98:cd:bf:a1:3d:19:31:78:
                    49:d7:99:7a:91:a2:51:58:26:a9:2a:d6:1f:44:31:
                    4e:1e:bd:f7:1a:44:d6:aa:96:71:28:8f:19:b1:2a:
                    bd:87:2e:8f:82:05:b2:45:12:bb:47:94:99:b2:31:
                    42:11:1d:b6:27:cd:89:dd:08:75:07:0f:40:98:0e:
                    6f:2d:d5:c8:e1:4d:da:14:8b:c1:d5:cc:ef:f9:20:
                    06:2f:ea:8c:04:25:c0:69:84:9e:64:9c:60:e4:5a:
                    36:af:e3:29:4c:64:c2:37:8a:cb:8d:03:77:41:17:
                    d8:11:7f:76:e0:48:a8:bf:eb:bd:6a:fb:9f:90:38:
                    6b:a6:2b:41:9e:02:83:fd:3f:63:3e:0b:fc:e1:82:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.72.0/22
                  200.24.88.0/22
                IPv6:
                  2804:1ab4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61877

    Signature Algorithm: sha256WithRSAEncryption
         1a:20:89:27:d9:a8:47:7f:de:c0:e6:3c:bc:b0:a7:69:0a:36:
         5c:f4:d3:24:9a:03:08:03:4c:bd:00:ec:a3:78:4f:e3:ff:7c:
         76:0e:3c:e9:c3:72:70:1d:2b:94:80:9d:ea:44:a2:70:7e:37:
         d6:5d:ca:b0:c1:c1:55:53:5d:f2:93:5d:4c:e9:71:ca:56:80:
         57:f5:b0:ac:0f:21:21:75:60:11:b9:64:e5:22:18:cd:ce:56:
         2e:35:ec:6c:d3:ee:10:48:ac:4b:66:39:98:99:b4:02:24:f0:
         2a:99:15:da:99:59:1f:9d:bc:1b:0f:84:8a:53:03:42:ed:3d:
         e4:38:ff:07:42:56:17:c9:4a:bd:0a:5a:16:7e:1b:ea:83:6a:
         7b:5c:46:0a:cd:b6:48:9a:0f:7f:6a:c2:c9:a5:db:b3:3c:6e:
         ab:1f:ee:be:d8:f8:4f:0b:71:42:40:8c:db:6b:75:b2:05:88:
         65:07:c8:e2:5a:ae:29:f1:37:98:52:f5:41:d0:18:e8:78:55:
         e4:e5:02:05:8f:61:5a:47:cd:fb:58:c1:8e:ed:0d:99:b3:d8:
         ce:a0:df:eb:65:a1:31:44:c6:7d:05:c5:15:c4:cb:f0:c7:91:
         54:ab:4a:3e:0a:fd:b2:52:be:92:2f:6d:8e:0e:8c:81:49:ec:
         02:5b:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:22:03 2026 by rpki-client