Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6A8AFF2BC17137B88D1978673F370B98459B81DD.cer
File:                     6A8AFF2BC17137B88D1978673F370B98459B81DD.cer (raw, json)
Hash identifier:          K80IxZAK/SdxNd+e17bodBf9kuhgOJM9pagjEQt7XWs=
Subject key identifier:   6A:8A:FF:2B:C1:71:37:B8:8D:19:78:67:3F:37:0B:98:45:9B:81:DD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19796E2D9F40B3B32FD16F20E9DD59001AF55014
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/6A8AFF2BC17137B88D1978673F370B98459B81DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Jul 2026 12:35:09 +0000
Certificate not after:    Wed 30 Jun 2027 12:40:09 +0000
Subordinate resources:    AS: 266187
                          IP: 160.20.88.0/22
                          IP: 2804:3c0c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:79:6e:2d:9f:40:b3:b3:2f:d1:6f:20:e9:dd:59:00:1a:f5:50:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 12:35:09 2026 GMT
            Not After : Jun 30 12:40:09 2027 GMT
        Subject: CN=6A8AFF2BC17137B88D1978673F370B98459B81DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:63:40:6b:d9:a6:86:80:e8:87:15:97:84:
                    36:4b:70:f3:ee:8f:71:a4:e4:42:52:e9:17:04:3e:
                    84:ba:cf:85:38:dc:bb:ff:6d:96:85:f3:f5:6a:c0:
                    53:c9:80:5d:40:23:7d:b3:96:43:72:7b:83:3a:b1:
                    9a:ea:5f:61:93:63:73:86:6f:f8:0d:34:e1:90:ab:
                    75:90:0e:aa:ac:44:fb:3d:92:ca:0b:43:ec:29:55:
                    cb:21:78:d2:77:29:2f:86:fd:31:d2:f1:35:af:1a:
                    ab:f6:d1:d7:8e:63:b9:77:16:be:fd:93:4c:4d:52:
                    60:cc:66:56:dc:3e:bc:f5:81:d0:8d:81:80:7f:5d:
                    e2:b7:c1:de:08:69:1b:2e:39:c8:49:4f:42:be:a5:
                    98:88:4a:75:cf:98:cc:f5:97:95:ba:fe:59:99:6a:
                    11:b3:b0:c4:9a:d2:cb:26:73:6d:d2:a2:e3:ca:7e:
                    37:ea:07:bc:b6:1c:4c:5d:1e:78:3f:26:fe:2d:05:
                    99:76:36:ee:ed:f7:1f:2d:6c:17:38:e8:85:6e:1e:
                    c2:eb:55:84:6c:48:0a:28:ec:9c:d2:2e:56:08:92:
                    6c:33:bf:dd:cf:fc:f9:78:14:1e:b6:0e:c5:75:c4:
                    a3:13:01:60:dd:11:01:f5:da:e4:83:8d:d8:39:83:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:8A:FF:2B:C1:71:37:B8:8D:19:78:67:3F:37:0B:98:45:9B:81:DD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/6A8AFF2BC17137B88D1978673F370B98459B81DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.88.0/22
                IPv6:
                  2804:3c0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266187

    Signature Algorithm: sha256WithRSAEncryption
         43:55:4d:45:74:d5:af:77:5a:32:ff:33:db:d5:87:50:1c:ae:
         2b:e2:e3:ea:28:fb:ee:8c:db:c9:d9:bc:e0:25:11:fa:fb:3f:
         0c:ea:a3:7c:c4:03:93:1f:f1:b2:85:8f:72:91:81:22:89:0d:
         ea:56:db:06:46:61:c5:27:09:96:1c:05:e6:1d:81:c7:f1:59:
         4e:f1:8b:17:f5:d1:df:94:99:e8:f9:65:b7:46:6c:7e:6d:51:
         e1:e7:29:d7:6e:d2:3a:01:67:07:81:81:2e:b3:eb:fa:df:d0:
         4a:fc:56:f8:df:90:fc:1f:c4:b6:52:e5:9b:fd:eb:79:68:ec:
         6f:9b:0e:39:b4:20:6b:16:48:6b:8a:35:80:74:e1:f6:24:5c:
         b9:0f:6a:a8:5a:b0:e2:52:14:80:8c:45:92:4b:7c:97:8e:e9:
         e5:f1:49:9b:ad:a4:74:73:e1:07:1a:0c:0e:a8:9c:ea:a3:6c:
         d8:b3:61:9c:d1:02:86:3e:10:6b:34:85:0b:78:d3:75:63:a6:
         0d:93:a1:a1:6b:03:0a:1e:f1:b1:e0:e9:6e:cf:5a:3b:25:43:
         73:6c:4c:be:1a:63:ab:96:8d:ab:72:02:bf:44:65:38:c9:46:
         1c:9e:c9:1f:50:cd:e1:98:c1:0a:be:aa:c2:9a:41:46:02:74:
         de:55:c8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:18:25 2026 by rpki-client