Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8.cer
File:                     48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8.cer (raw, json)
Hash identifier:          xMUg00l++iNcdUpQLstwdCmT/SpH7CIZiVToXM1DKe4=
Subject key identifier:   48:D6:7A:5A:C0:D9:4B:2E:1D:E0:28:26:CD:AD:EA:C5:8D:57:D1:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1DF0740E98F8553F5418C58ECD4C4040E448ACCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jun 2026 14:06:18 +0000
Certificate not after:    Fri 18 Jun 2027 14:11:18 +0000
Subordinate resources:    AS: 269579
                          IP: 45.189.96.0/22
                          IP: 2804:66bc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f0:74:0e:98:f8:55:3f:54:18:c5:8e:cd:4c:40:40:e4:48:ac:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 19 14:06:18 2026 GMT
            Not After : Jun 18 14:11:18 2027 GMT
        Subject: CN=48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:33:03:b7:7c:ee:d7:fa:89:ae:79:ca:1b:
                    58:b2:55:d8:54:a6:e9:06:29:20:56:88:5d:fc:cc:
                    2d:fe:d1:21:65:5b:d4:f1:6d:f3:67:ce:8c:ed:54:
                    86:31:35:68:79:df:5f:51:17:ed:f0:8e:e4:9e:52:
                    84:3f:5e:4d:50:8c:f6:dc:3f:e0:8b:6b:a8:90:52:
                    60:be:12:79:18:c6:37:3b:3d:f8:92:4b:fe:26:92:
                    df:fd:eb:d2:f9:af:9f:8c:11:07:93:8b:d6:d6:4a:
                    0f:e9:2c:cd:59:20:6d:99:be:85:0b:2e:9a:0e:0a:
                    2d:9d:3c:4d:85:40:ab:f4:60:d8:14:85:4d:f4:9b:
                    d7:d5:31:8a:d4:c0:55:52:62:dc:c9:a1:8f:8c:24:
                    1f:af:58:9b:40:81:6f:cc:59:3b:8e:46:33:fc:d6:
                    c5:8d:5b:b4:f0:f0:59:f3:ef:d1:96:33:ff:81:b0:
                    c1:c4:ed:ec:ca:bb:ce:3e:f2:da:fa:3c:22:75:7c:
                    b3:10:67:dd:83:e4:bc:da:2a:c9:f9:e8:54:e0:17:
                    29:21:f5:c2:ba:98:c3:f9:86:39:68:19:9d:7e:66:
                    77:32:2f:62:ce:9e:f8:af:47:b7:92:5b:e1:7f:cf:
                    aa:78:73:1b:5a:08:2e:39:8c:52:92:c2:29:79:c2:
                    52:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:D6:7A:5A:C0:D9:4B:2E:1D:E0:28:26:CD:AD:EA:C5:8D:57:D1:D8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.96.0/22
                IPv6:
                  2804:66bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269579

    Signature Algorithm: sha256WithRSAEncryption
         38:9d:1a:98:74:ad:93:2e:42:d6:54:d0:99:c8:e4:17:64:fa:
         5b:c4:e1:4a:1a:01:46:75:ad:34:d6:e6:61:6d:e1:dc:d5:1b:
         e1:8e:c7:12:dc:55:f3:1e:3e:1b:fe:22:c2:7e:25:ec:a6:50:
         60:b8:f0:66:29:62:2a:9d:41:8d:1b:70:57:44:ac:ee:46:4b:
         4b:87:88:81:01:e6:cf:ec:81:aa:26:ae:23:55:d1:07:16:2c:
         52:c3:18:8e:65:f4:00:53:91:15:e7:fa:4a:58:ac:31:7f:30:
         a0:27:1f:ba:ec:95:0a:a5:54:db:72:7b:ab:40:65:fe:0b:02:
         08:9d:1d:96:a9:e2:04:c1:40:93:ad:bc:62:9f:a9:16:f8:ea:
         69:3e:77:ce:df:68:d7:82:99:dd:70:08:d9:50:22:be:57:4d:
         49:6a:d4:f6:f4:57:f1:b1:92:bc:52:be:98:ef:65:cf:5b:6d:
         12:1c:cb:29:df:b6:39:bd:90:e4:fb:55:e8:95:9c:5e:05:29:
         11:b9:9e:8d:72:77:1c:45:6d:a8:11:5d:ae:53:0f:6a:e2:33:
         c7:e7:95:c4:5c:ca:82:37:a4:53:9f:ac:4c:b3:c4:af:7a:44:
         e1:91:71:a6:4c:ca:7e:23:f2:02:7f:24:16:ec:db:6f:18:a7:
         41:a6:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:21:03 2026 by rpki-client