Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer
File:                     96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer (raw, json)
Hash identifier:          YtGCDvL0FZ1GyH7iEHpF9xYr5x3sVHCLDMAkii5yM18=
Subject key identifier:   96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55C1653820885A67C5214546473822899F1C622F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 31 Oct 2026 06:20:27 +0000
Certificate not after:    Sat 30 Oct 2027 06:25:27 +0000
Subordinate resources:    AS: 267535
                          IP: 192.141.104.0/22
                          IP: 2804:42e4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 01:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c1:65:38:20:88:5a:67:c5:21:45:46:47:38:22:89:9f:1c:62:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 31 06:20:27 2026 GMT
            Not After : Oct 30 06:25:27 2027 GMT
        Subject: CN=96BD1D118248F01A383BC9530F7DDC4CBBB94C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:73:b8:5c:50:05:f4:76:90:3c:9d:fd:02:
                    57:7b:06:f4:84:11:5e:fa:62:22:6c:fc:cd:00:67:
                    66:b7:a4:cb:af:c5:52:d5:db:68:5b:09:4c:2b:ca:
                    3c:08:f0:f9:88:eb:2c:53:4d:60:df:71:c9:a0:8b:
                    b5:2a:5f:7c:38:08:39:54:31:92:ca:a7:8c:fb:8b:
                    7b:7f:a4:cf:2e:c2:e9:3d:b7:78:50:e1:fa:2b:3c:
                    8d:df:47:7f:7f:27:61:a8:1d:ea:c9:4b:a5:4f:85:
                    8c:20:5f:1a:08:7d:63:1a:9d:72:93:d9:b0:16:b0:
                    71:99:66:dd:d8:2b:4c:03:b6:56:5a:0d:aa:76:b3:
                    1d:98:3b:8d:2d:cc:5e:03:3f:7c:87:02:ce:ea:92:
                    8c:a8:3a:d1:0d:57:36:bc:ae:02:6e:ef:31:69:5b:
                    46:34:02:ab:7d:22:9f:94:79:d7:f0:89:6b:41:a6:
                    c3:ff:bd:9e:30:8c:f6:8b:73:55:15:66:fa:d0:72:
                    01:d5:8b:88:0b:c4:11:21:ef:a6:13:5f:92:95:0c:
                    59:c5:9b:83:d7:c2:53:18:72:6b:4f:14:a0:18:a7:
                    02:f0:25:da:bb:ca:76:0e:72:90:b3:6c:e0:da:19:
                    cc:7a:f6:46:d8:36:cf:9f:02:76:4a:a2:89:e1:f8:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.104.0/22
                IPv6:
                  2804:42e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267535

    Signature Algorithm: sha256WithRSAEncryption
         91:bc:5b:3c:ed:33:91:ac:d7:bc:10:e7:d9:9b:ff:c9:35:a6:
         1f:22:32:30:b9:e8:31:0a:70:bc:63:c3:d6:72:95:d5:88:b5:
         e5:b1:43:9e:ac:d9:02:f5:6a:6c:e7:07:ec:b9:92:b4:d0:63:
         cb:eb:82:6a:bf:ee:bf:99:cf:11:d8:78:d6:98:fc:be:3c:83:
         49:23:8e:81:3d:1a:da:13:33:8f:3d:bc:c1:ee:f6:57:87:09:
         14:fa:8f:a9:46:64:56:dc:fd:7d:c1:65:e5:17:44:9e:0c:16:
         a2:52:7b:fe:0f:37:66:cf:c5:e9:30:93:ed:b7:f5:45:92:6a:
         03:b7:c0:fe:3f:51:89:ec:d6:a2:be:7a:08:91:d0:f2:af:c7:
         36:da:f0:cd:eb:e6:94:86:32:81:42:09:e9:21:ec:d3:7a:18:
         60:26:67:b7:d7:36:53:67:6e:4a:56:83:6d:38:99:49:9a:2c:
         9b:dd:3f:d0:8b:7c:31:b1:6b:e0:73:c1:a7:df:ea:b6:83:e6:
         92:2a:4a:c8:40:5f:07:63:fc:e7:78:a1:02:07:98:a8:6b:28:
         b1:a6:74:ef:3a:0a:b5:59:f6:5b:06:4d:f4:4c:a5:fc:a1:9a:
         96:52:6d:9f:29:66:05:27:4b:01:4b:3e:a0:a9:b1:91:2b:8b:
         f4:6e:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:19:07 2026 by rpki-client