Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/32C97CAE95BE17ABF84BFF7BE087D0CD147DF457.cer
File:                     32C97CAE95BE17ABF84BFF7BE087D0CD147DF457.cer (raw, json)
Hash identifier:          rnx+RnSoiebn9vB7O6Nuz4gNXVWLoQWSUtObIOYZoFU=
Subject key identifier:   32:C9:7C:AE:95:BE:17:AB:F8:4B:FF:7B:E0:87:D0:CD:14:7D:F4:57
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D956ACE3DE5CF3F8075FAB11F0856A0DE159F9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/32C97CAE95BE17ABF84BFF7BE087D0CD147DF457.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Aug 2026 12:39:27 +0000
Certificate not after:    Tue 10 Aug 2027 12:44:27 +0000
Subordinate resources:    AS: 267189
                          IP: 45.231.84.0/22
                          IP: 2804:4988::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:95:6a:ce:3d:e5:cf:3f:80:75:fa:b1:1f:08:56:a0:de:15:9f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 11 12:39:27 2026 GMT
            Not After : Aug 10 12:44:27 2027 GMT
        Subject: CN=32C97CAE95BE17ABF84BFF7BE087D0CD147DF457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:94:e2:e3:89:d4:a6:61:42:96:34:3a:bf:
                    d4:7f:c0:c5:6b:60:91:8a:0f:12:c8:51:81:d4:ba:
                    cd:89:fc:01:ec:37:d3:3f:db:1d:2e:ca:c3:4f:6f:
                    bd:4c:87:c9:26:00:b5:d4:a0:ea:8f:6c:ff:35:3e:
                    ad:cb:d4:92:8b:98:57:cb:2f:ad:68:c1:be:d4:1d:
                    65:91:64:dc:a6:1a:8b:c2:44:78:b5:82:27:2a:af:
                    2b:17:c5:36:47:6b:76:06:8f:e5:f3:c2:41:75:67:
                    df:50:66:a3:7f:7e:b8:d8:10:b3:ce:bc:f8:e6:9f:
                    d8:1d:41:8d:bd:54:b8:82:81:e0:6d:f6:c2:e8:2d:
                    fd:5b:ab:d9:d7:c1:31:5e:0b:d5:be:06:a4:08:bf:
                    53:a8:69:d5:62:2f:98:9a:7b:b1:30:86:56:e0:34:
                    00:e1:95:04:76:6f:71:a6:0f:66:4d:0b:1d:7e:20:
                    a8:f9:a8:6c:52:bd:b0:75:cb:0a:a4:4e:a0:c7:ad:
                    44:3f:d4:01:3a:4a:af:3a:fd:14:53:27:64:21:c9:
                    fb:91:82:a4:17:52:0e:90:01:67:9a:1a:17:af:e6:
                    87:ad:bc:b2:02:a5:e7:4f:2f:af:b2:3d:28:78:ca:
                    6b:6c:2c:e6:d8:fb:40:52:3e:23:ce:42:44:13:b5:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:C9:7C:AE:95:BE:17:AB:F8:4B:FF:7B:E0:87:D0:CD:14:7D:F4:57
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/32C97CAE95BE17ABF84BFF7BE087D0CD147DF457.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.84.0/22
                IPv6:
                  2804:4988::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267189

    Signature Algorithm: sha256WithRSAEncryption
         5f:70:01:2e:f7:d8:c2:40:85:c0:63:40:04:fd:96:ab:80:c0:
         6f:3b:71:ed:85:29:29:4a:3b:dc:09:f5:8e:ac:c9:69:5f:e7:
         52:bb:f1:50:52:5c:27:14:8a:24:db:49:cd:05:d5:29:94:de:
         a8:5a:11:1c:04:ba:66:39:84:05:14:6c:86:0e:ea:5e:0d:fd:
         43:0a:ef:78:a8:bc:d8:49:bf:10:3b:d9:57:d9:6b:4e:6d:1a:
         b0:b8:08:23:7b:40:23:a5:b3:8d:c3:02:c6:55:9e:da:dc:33:
         ee:a8:60:43:ab:6c:3a:fe:d7:96:9d:bc:72:e6:27:dc:52:a7:
         27:5f:b7:0f:f3:85:8f:ba:cd:c3:b3:e1:3f:81:4f:79:23:8f:
         b4:63:8f:84:7e:d9:f7:20:c1:35:d4:97:c9:87:b6:f3:7e:c0:
         30:30:cc:cd:01:1d:ce:b0:1d:4a:12:27:e3:df:0b:c7:71:b1:
         cd:83:f2:77:e0:01:2c:25:88:6c:c5:ae:ff:f9:28:1d:e4:bf:
         e1:11:68:1c:a0:02:e5:aa:d8:20:4f:58:d0:00:25:2b:ce:55:
         3a:09:91:fb:be:3a:19:d0:84:36:49:ed:88:d1:3d:eb:1d:27:
         de:48:30:69:06:78:57:f1:15:bc:f9:c6:ba:c5:36:d3:73:99:
         c1:07:73:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 23:39:12 2026 by rpki-client