Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8FA6C9C794647CA6A63966B05F650C6F52374A28.cer
File:                     8FA6C9C794647CA6A63966B05F650C6F52374A28.cer (raw, json)
Hash identifier:          d9al4laA7PmEGxr/xnDyeNltNFFlalXh/ItWV/epXsE=
Subject key identifier:   8F:A6:C9:C7:94:64:7C:A6:A6:39:66:B0:5F:65:0C:6F:52:37:4A:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       053EC211EAFD3A0BAD51129D6C921E295B72C387
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/8FA6C9C794647CA6A63966B05F650C6F52374A28.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Sep 2025 16:54:45 +0000
Certificate not after:    Mon 31 Aug 2026 16:59:45 +0000
Subordinate resources:    AS: 269526
                          IP: 45.186.244.0/22
                          IP: 2804:65fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3e:c2:11:ea:fd:3a:0b:ad:51:12:9d:6c:92:1e:29:5b:72:c3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  1 16:54:45 2025 GMT
            Not After : Aug 31 16:59:45 2026 GMT
        Subject: CN=8FA6C9C794647CA6A63966B05F650C6F52374A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:71:29:13:77:33:70:f7:17:6a:71:5b:5c:d2:
                    a5:86:3f:2d:88:93:c3:b8:91:23:4b:1a:ce:70:ae:
                    3b:d9:99:37:81:72:27:79:b6:9d:11:dc:3a:f8:31:
                    7a:37:9f:7a:28:75:71:16:35:b9:73:ed:4f:fb:00:
                    d2:a6:fd:d5:27:be:9c:77:a9:a3:40:72:8f:dc:ce:
                    52:bd:31:0f:9e:ad:63:eb:04:f8:0d:58:43:df:9b:
                    87:4a:d4:6d:24:ec:14:89:08:6f:02:56:d2:3d:78:
                    76:40:20:b6:7a:0b:11:c6:ee:23:f6:f7:3a:d1:56:
                    c8:a5:5e:d9:d3:70:49:63:4c:8b:7c:89:1d:6c:57:
                    b1:7e:9c:45:ef:85:ad:25:bd:10:a1:dd:50:66:55:
                    53:ee:da:0b:c8:be:fc:85:a2:39:c8:ac:09:3b:d5:
                    92:98:85:49:65:d3:b4:c0:28:7f:48:d1:6d:2c:87:
                    aa:ca:34:da:66:cb:65:2d:7f:79:63:8a:a9:1d:0e:
                    59:fc:c8:2d:47:66:e8:b3:64:57:e6:ac:a9:b1:68:
                    ae:ed:8f:3a:9a:5d:81:1c:6e:54:f9:ea:ca:dc:2a:
                    3c:c2:ec:c4:a7:e6:60:e5:ca:1c:70:37:85:ec:8a:
                    6a:0c:ef:cd:e2:ec:96:74:18:9d:82:b6:fe:ac:cf:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:A6:C9:C7:94:64:7C:A6:A6:39:66:B0:5F:65:0C:6F:52:37:4A:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/8FA6C9C794647CA6A63966B05F650C6F52374A28.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.244.0/22
                IPv6:
                  2804:65fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269526

    Signature Algorithm: sha256WithRSAEncryption
         bf:2c:bd:13:0e:54:ad:e5:26:26:2b:bc:61:70:19:2c:a3:35:
         e5:90:ad:1c:e2:63:9c:44:1d:dd:b8:a4:e6:6a:8d:3a:32:d1:
         92:c1:c7:d6:fe:0b:ec:58:be:f3:ef:0a:93:3e:78:8a:84:10:
         45:ca:11:4d:b8:78:3a:fb:1f:3c:01:39:e0:6c:fa:e3:01:36:
         c1:9c:fd:4a:80:fc:8a:75:d6:3e:75:5a:86:da:dd:4e:d7:0e:
         53:f6:66:2c:75:53:9b:90:98:32:e6:06:18:0c:28:e0:62:0b:
         12:6e:ee:36:05:6c:22:02:cf:fa:96:d3:a9:9d:df:51:93:e9:
         ec:9e:4b:e0:7f:96:a4:e0:0e:d4:ac:23:d1:83:f6:37:85:af:
         b7:e6:89:c4:8b:05:9a:73:ec:bf:e5:a1:5d:20:ce:50:2e:b1:
         b3:10:97:a0:98:e8:bc:bc:cd:52:36:b5:02:6c:ff:06:af:f2:
         a1:65:e4:ec:21:95:6e:63:b3:f0:df:31:0b:b2:fb:2f:c8:94:
         10:99:d8:14:0e:7c:72:c3:bb:2f:2e:4a:a7:c4:d2:51:2d:04:
         d1:df:8f:c4:93:b4:c1:2d:97:22:1b:1e:61:11:68:ac:c6:ee:
         61:ac:f1:78:73:01:5b:07:38:aa:24:5d:18:b0:ae:4a:7f:af:
         2f:c1:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:32:27 2025 by rpki-client