Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8884216B4D19579BDCC46ED354EA9FD9F44859AA.cer
File:                     8884216B4D19579BDCC46ED354EA9FD9F44859AA.cer (raw, json)
Hash identifier:          l106VY8LatIJYnImvFU/eitzh+qzOPpN0lbrAmYkaQs=
Subject key identifier:   88:84:21:6B:4D:19:57:9B:DC:C4:6E:D3:54:EA:9F:D9:F4:48:59:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3774C16C9EFE4E4F888A01E647AC4AF8B144846F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8884216B4D19579BDCC46ED354EA9FD9F44859AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jun 2026 14:33:05 +0000
Certificate not after:    Mon 28 Jun 2027 14:38:05 +0000
Subordinate resources:    AS: 263049
                          IP: 170.84.112.0/22
                          IP: 177.129.224.0/22
                          IP: 177.136.104.0/21
                          IP: 2804:fe0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:74:c1:6c:9e:fe:4e:4f:88:8a:01:e6:47:ac:4a:f8:b1:44:84:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 29 14:33:05 2026 GMT
            Not After : Jun 28 14:38:05 2027 GMT
        Subject: CN=8884216B4D19579BDCC46ED354EA9FD9F44859AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:f4:73:1a:77:e6:5b:f2:7c:00:fa:43:89:
                    4d:a4:54:c8:8c:04:4b:73:88:d7:ec:c7:38:10:e3:
                    ba:1c:bf:ee:05:29:67:20:9b:b4:db:28:74:54:02:
                    cd:5f:de:9e:fa:c5:d5:5a:b8:ac:1a:28:73:29:14:
                    3a:13:c7:db:59:ac:fe:8f:e7:85:ca:e2:72:a5:52:
                    4a:b9:72:57:e8:91:95:8e:73:62:f5:42:cb:6f:db:
                    a0:c4:1b:5b:be:b4:1b:ff:ed:43:f4:48:79:29:a4:
                    d9:2c:2e:71:5b:25:78:ba:0a:48:2b:57:bb:5d:41:
                    6c:70:c9:a0:f2:17:17:51:c7:50:79:db:27:00:52:
                    eb:3b:85:d9:37:50:22:96:49:d7:ae:0e:4c:03:f8:
                    c4:72:56:c8:ef:d2:16:29:67:61:96:b5:05:5d:b3:
                    45:1e:37:9a:f6:57:62:69:08:ef:29:67:fb:70:58:
                    b8:53:f0:92:29:89:3f:9b:6a:b6:61:0c:bb:6b:1f:
                    f7:b3:c4:f5:fb:6d:0b:f0:24:6f:39:9b:f2:e6:98:
                    94:8d:b4:e0:27:69:65:eb:f1:6c:13:11:48:f6:bd:
                    ce:7e:f5:df:3a:ca:c5:12:0d:14:8b:9f:04:43:27:
                    58:32:3c:50:96:e4:2b:1c:5a:5a:06:45:ef:79:aa:
                    d8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:84:21:6B:4D:19:57:9B:DC:C4:6E:D3:54:EA:9F:D9:F4:48:59:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8884216B4D19579BDCC46ED354EA9FD9F44859AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.112.0/22
                  177.129.224.0/22
                  177.136.104.0/21
                IPv6:
                  2804:fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263049

    Signature Algorithm: sha256WithRSAEncryption
         87:d3:1f:6b:c1:1d:1c:f7:54:bd:96:24:e3:ea:70:63:60:68:
         74:0b:9d:bd:05:a8:4c:a0:93:eb:a6:ed:dd:05:99:04:5f:a0:
         a0:ec:f0:76:d5:8d:8e:c3:21:1e:6d:60:5b:27:bc:5b:60:8f:
         7b:43:a9:d7:76:51:13:dd:23:fa:09:47:8a:e7:d9:c0:49:ae:
         94:3e:14:9c:09:14:df:ba:7e:46:97:05:09:a3:c2:32:58:57:
         2b:e6:ea:45:8b:d7:a8:cc:3c:b5:57:52:2b:7d:88:3c:ae:10:
         01:06:14:f1:ad:1f:98:a4:f6:85:b8:03:c3:c5:c5:f4:ed:14:
         10:43:dd:c1:1e:c0:e7:5b:a3:e4:11:a7:61:b6:81:e6:04:96:
         5d:7f:f2:47:ca:ab:bc:0d:47:f1:25:7b:0c:05:12:c1:ce:ec:
         c5:7d:02:f6:e6:89:93:54:af:16:19:ff:eb:ee:00:8d:dc:65:
         6b:48:25:41:0a:7c:85:63:18:08:fd:39:d6:ad:70:ec:19:9f:
         6f:d4:a6:ed:83:34:d2:ec:c5:24:73:2f:f9:e4:f6:3f:e9:54:
         42:9f:2f:d7:d6:a4:91:9f:23:5c:aa:ba:5a:84:0d:46:a0:23:
         fb:b8:7f:ec:48:84:47:88:e8:23:48:6f:9a:cb:53:40:8f:28:
         42:87:49:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:18:21 2026 by rpki-client