Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/8A68D9494B4B3C3F595CA7A24DB830D6489ED07F.cer
File:                     8A68D9494B4B3C3F595CA7A24DB830D6489ED07F.cer (raw, json)
Hash identifier:          3BESkzxy24/aVoyIx13vyPKCucCSn/kafB06ZXQQUxk=
Subject key identifier:   8A:68:D9:49:4B:4B:3C:3F:59:5C:A7:A2:4D:B8:30:D6:48:9E:D0:7F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       249E6C03FAC5070AEADC9AEFEBAB9FA3315C667F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8A68D9494B4B3C3F595CA7A24DB830D6489ED07F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Oct 2026 12:10:47 +0000
Certificate not after:    Sat 09 Oct 2027 12:15:47 +0000
Subordinate resources:    AS: 263049
                          IP: 170.84.112.0/22
                          IP: 177.129.224.0/22
                          IP: 177.136.104.0/21
                          IP: 2804:fe0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 19:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9e:6c:03:fa:c5:07:0a:ea:dc:9a:ef:eb:ab:9f:a3:31:5c:66:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 10 12:10:47 2026 GMT
            Not After : Oct  9 12:15:47 2027 GMT
        Subject: CN=8A68D9494B4B3C3F595CA7A24DB830D6489ED07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:a1:0e:d3:b2:a9:88:f4:a7:7c:7e:d4:bb:
                    36:fd:f4:1c:c8:04:58:e2:7f:a0:85:41:b6:17:ac:
                    5f:4c:a1:f4:fd:b4:40:3a:3d:b1:bb:9a:26:27:3a:
                    2a:b0:47:fc:e7:1d:c8:e2:54:68:7f:14:02:0d:66:
                    90:de:16:c7:df:1a:4e:c0:d1:a0:60:98:c6:90:79:
                    77:af:9b:f9:c9:83:63:e3:50:fa:5e:37:35:7f:43:
                    2c:d4:b4:a1:1b:65:b3:c8:00:c4:ec:51:f6:95:cc:
                    38:29:2e:19:7f:e6:57:f0:50:6b:0e:d9:88:f0:89:
                    50:5c:e0:c8:18:95:c9:31:bc:fe:23:e1:57:1d:95:
                    70:6a:bf:b1:d6:1e:2c:a3:4f:60:1f:95:f6:04:18:
                    48:80:be:d1:fc:f7:a3:4d:92:e3:e9:5b:7e:2e:8d:
                    eb:ad:e8:cc:a6:3e:cb:a8:9f:25:3f:57:0a:6e:55:
                    8c:2a:f0:8c:02:ab:49:c8:f0:fa:79:9c:dd:bd:c4:
                    5f:48:b7:63:ac:42:8d:4d:35:44:a2:8d:27:7d:98:
                    a8:f5:3a:64:bd:eb:1d:7a:f1:f4:07:22:04:cd:8b:
                    89:a9:f8:d0:67:1f:35:c8:4d:55:4b:85:9e:ae:5f:
                    fd:d3:84:3d:01:5e:0f:7a:d8:c0:48:9c:d7:04:9d:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:68:D9:49:4B:4B:3C:3F:59:5C:A7:A2:4D:B8:30:D6:48:9E:D0:7F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8A68D9494B4B3C3F595CA7A24DB830D6489ED07F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.112.0/22
                  177.129.224.0/22
                  177.136.104.0/21
                IPv6:
                  2804:fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263049

    Signature Algorithm: sha256WithRSAEncryption
         a4:81:bf:63:d5:99:57:3e:9a:7a:9d:e9:0b:9b:41:d2:4d:4a:
         42:39:8d:57:da:dc:26:09:b4:27:41:df:87:a9:48:2e:b6:27:
         dd:31:48:01:60:99:06:cb:da:72:a6:3b:b3:f0:00:67:2a:14:
         cb:d4:e8:07:d1:51:8e:b4:35:93:bf:21:13:3a:6a:44:32:b3:
         c8:3e:ff:08:9a:04:0b:62:f4:fd:12:a9:f0:64:d7:48:67:a3:
         6b:a2:42:48:98:02:ec:57:be:c7:cd:44:f7:f8:8a:1b:40:c5:
         b2:89:98:08:8d:ac:50:d3:b3:50:06:9b:f9:d9:50:38:81:89:
         33:38:e2:04:cc:b4:dc:77:81:9e:b2:8f:8e:41:79:4d:05:12:
         67:a2:cd:19:fd:2b:fc:48:96:67:3e:3b:7a:cb:ae:b9:0a:db:
         e9:4b:74:0a:70:5a:2f:00:d9:4b:11:42:16:5b:27:72:21:75:
         0f:9e:dc:11:f3:b9:f8:68:94:0a:6b:7b:e8:62:7f:5b:c0:6f:
         05:dc:39:d3:c2:9a:ed:f1:2b:b4:b1:12:db:ab:fc:fd:8d:98:
         5a:fb:ff:1c:fa:9e:a1:78:dd:2c:a8:45:4f:78:ec:92:8e:98:
         41:1b:bb:8b:f2:98:98:fa:a1:46:1a:00:75:ef:d8:6d:91:6e:
         77:b7:23:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:16:24 2026 by rpki-client