Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer
File:                     8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer (raw, json)
Hash identifier:          rLM1a/OBQ1GA8CvkR5Q9Y1T2/x8vYhqr3tM6vOmnCSg=
Subject key identifier:   8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       724B166623536691BE719518C37385BB2A8B6170
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Aug 2026 03:41:21 +0000
Certificate not after:    Thu 12 Aug 2027 03:46:21 +0000
Subordinate resources:    AS: 53209
                          AS: 267624
                          IP: 45.71.228.0/22
                          IP: 168.196.56.0/22
                          IP: 177.11.136.0/21
                          IP: 177.38.24.0/21
                          IP: 186.233.176.0/21
                          IP: 2804:295c::/32
                          IP: 2804:4450::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4b:16:66:23:53:66:91:be:71:95:18:c3:73:85:bb:2a:8b:61:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 13 03:41:21 2026 GMT
            Not After : Aug 12 03:46:21 2027 GMT
        Subject: CN=8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c2:c3:7d:b5:46:d4:fd:1e:2b:db:2e:b0:ac:
                    fb:be:53:c7:bb:a9:10:53:7d:9b:09:b2:eb:d9:e9:
                    2d:11:9b:e5:53:80:4e:fc:56:1e:aa:b3:93:33:92:
                    fa:01:61:b8:61:44:fd:e8:05:de:86:c4:80:dd:d8:
                    7d:87:73:64:b7:e2:a1:c2:c5:17:fb:6a:f8:04:08:
                    5f:18:7a:1b:c9:42:e4:c5:d0:51:c4:c2:13:33:86:
                    81:7f:c6:37:53:ba:17:fd:28:18:5f:ab:ce:08:33:
                    81:f0:32:90:02:c1:32:58:51:f2:72:c6:87:c5:ec:
                    ba:af:59:92:43:df:26:e7:98:7f:4f:c3:bf:75:e1:
                    2b:fa:c4:8e:9b:aa:3e:37:6a:41:0e:68:43:b2:f0:
                    3e:8f:b0:78:03:2f:15:1d:4b:ec:08:9c:89:35:d6:
                    f2:90:79:1b:35:36:47:42:34:e2:4c:c5:f3:9f:f7:
                    1c:88:3a:5a:62:8a:9c:20:00:f4:aa:f3:28:33:80:
                    f9:f5:93:2b:4e:50:07:73:2c:fd:7b:aa:cc:9e:02:
                    43:82:8d:c8:1e:63:16:ad:f7:ff:33:56:fe:a7:3f:
                    ad:6e:c5:d6:66:e4:a7:7a:71:57:66:45:1b:30:a6:
                    7e:35:25:1f:99:1f:2d:97:e9:0c:bb:bd:c9:ad:04:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.228.0/22
                  168.196.56.0/22
                  177.11.136.0/21
                  177.38.24.0/21
                  186.233.176.0/21
                IPv6:
                  2804:295c::/32
                  2804:4450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53209
                  267624

    Signature Algorithm: sha256WithRSAEncryption
         30:05:f6:c5:d2:ba:9e:30:b0:36:45:44:f3:e4:23:00:6f:1f:
         43:ab:46:c2:3a:6e:55:c5:74:20:78:01:bd:0d:f5:6a:fc:5e:
         b6:ad:41:8a:42:a0:da:34:9b:e3:96:eb:f1:50:bd:c8:72:c1:
         4d:40:89:1f:b1:38:fc:63:e3:98:3b:b1:e8:f1:c9:34:72:2f:
         f8:4a:cb:79:04:ca:64:0d:3b:7e:ff:2b:a5:a4:4e:b4:d7:6c:
         90:70:49:c3:65:6b:86:67:83:62:18:8f:17:25:ab:a4:0b:7b:
         2a:c1:59:18:ec:1f:eb:8c:73:9b:1c:ed:1a:6b:4a:7d:f3:9d:
         46:87:5e:83:2e:45:e8:a2:70:b1:92:92:60:d5:e9:0a:99:5d:
         13:44:fc:61:fc:14:74:93:d4:cc:de:79:60:57:a2:e8:ec:90:
         74:44:7e:7e:57:6e:77:b5:76:04:8d:29:b3:e5:93:82:ed:d2:
         c0:76:ac:6c:15:b5:4a:53:3f:97:b2:52:4b:4d:68:e4:c0:81:
         5b:5e:dc:4b:e3:3b:97:3d:6b:b8:89:f3:80:19:20:55:52:6c:
         d3:5f:e2:b4:22:11:c0:a8:1e:c1:41:e4:cb:08:7f:5e:43:9d:
         d7:21:62:ef:d3:62:c8:45:eb:5a:9b:42:58:21:8e:a1:e6:93:
         cb:e9:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:44:56 2026 by rpki-client