Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.cer
File:                     8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.cer (raw, json)
Hash identifier:          cvFojBkRLktP46Dy3R5zEMKWpqrTL6GlhJBsfpoOu38=
Subject key identifier:   89:40:C5:0A:C5:63:1C:CD:F2:D0:D0:91:49:CB:C5:A2:FE:B6:4B:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F87B760F4EA7B0EBEA7FB5FD82552E3FC13C31D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Apr 2026 13:42:17 +0000
Certificate not after:    Fri 02 Apr 2027 13:47:17 +0000
Subordinate resources:    AS: 264124
                          IP: 138.94.48.0/22
                          IP: 2804:22d0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 12:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:87:b7:60:f4:ea:7b:0e:be:a7:fb:5f:d8:25:52:e3:fc:13:c3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 13:42:17 2026 GMT
            Not After : Apr  2 13:47:17 2027 GMT
        Subject: CN=8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:7e:60:84:f9:3d:c8:c8:30:b8:7d:33:91:
                    57:de:5b:e9:62:38:2f:2c:84:88:ce:39:c3:26:73:
                    04:b6:7b:39:f7:02:32:b5:36:83:52:cf:d2:c9:7c:
                    eb:10:38:b1:de:49:4a:8d:ae:ba:24:33:f1:75:da:
                    c5:84:34:f7:b3:97:2a:c5:d9:ba:ea:75:42:00:f7:
                    b6:a6:20:42:5a:ad:e2:23:27:ce:cd:bf:8a:e4:35:
                    80:25:47:5b:cc:8c:17:03:62:ec:2b:9b:13:9a:48:
                    f4:d8:35:c9:01:a3:99:09:6c:f0:8b:84:0b:d0:e2:
                    7e:3d:40:3e:88:71:b5:6d:90:39:fa:07:13:16:c6:
                    67:e7:90:82:09:4f:49:19:23:b3:65:c6:bb:b8:5d:
                    92:50:3c:9c:e9:c8:d6:2a:ae:e0:75:4d:c9:a6:87:
                    0b:8c:fb:27:63:1b:b6:cf:0d:4f:9c:c9:2e:8c:74:
                    27:9d:f4:d6:99:fc:2a:44:d2:d3:b6:6b:2a:2c:45:
                    c2:23:2b:40:37:94:8a:43:ba:a2:8f:a3:f5:30:a4:
                    22:ed:6b:00:df:2a:3c:9f:18:f3:57:04:d1:5e:13:
                    65:8c:f4:41:19:f8:3b:f6:aa:c7:2c:cd:5c:16:d9:
                    be:12:f1:a4:95:ab:f3:8b:2e:7a:cc:ab:ee:0f:3b:
                    3a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:40:C5:0A:C5:63:1C:CD:F2:D0:D0:91:49:CB:C5:A2:FE:B6:4B:8E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.48.0/22
                IPv6:
                  2804:22d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264124

    Signature Algorithm: sha256WithRSAEncryption
         39:69:b5:3d:9c:60:fe:ef:d7:c5:ac:1f:b4:9a:8f:2e:34:c2:
         82:74:53:e4:e4:bc:26:23:76:5e:11:fd:91:d9:a2:8d:a7:76:
         52:22:39:8d:ff:9c:06:21:be:7b:76:24:68:35:0e:14:dc:7f:
         2d:86:df:c5:f2:6a:39:c5:4d:39:06:9e:fe:d5:c6:8a:6d:c7:
         0c:6c:2e:90:07:57:f9:95:ab:41:1b:9b:21:73:49:8e:1a:3b:
         9d:b7:93:92:c9:07:d6:ca:e6:dd:4b:0b:91:49:41:73:b6:33:
         84:c5:f8:d5:76:79:28:23:c8:76:4f:77:01:20:3e:22:4a:ee:
         6a:b9:86:ac:c3:4c:09:50:41:c4:37:ee:cc:f3:5a:bd:bd:48:
         77:4b:2b:31:80:66:78:25:d8:92:5e:ed:fc:62:46:76:c8:15:
         67:06:07:ed:5a:29:e7:73:70:bc:01:4f:31:75:92:3f:8a:76:
         6d:e4:3b:24:38:73:43:7f:8f:c8:da:3a:3c:33:e0:c1:1e:7c:
         5f:ad:c9:c7:f1:66:df:7a:cc:00:44:5c:86:9a:e4:fe:6f:17:
         cf:75:30:de:6d:00:b5:3a:68:e8:8a:ad:fb:76:59:c9:ed:bd:
         2b:d3:3b:28:85:8a:18:dd:27:44:cf:7b:56:33:31:4b:38:a3:
         8a:9d:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:48:53 2026 by rpki-client