Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer
File:                     98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer (raw, json)
Hash identifier:          A1vypQGXljW1lYxOvT0AJhHmN8PjmeJ+Be5rCBxumf4=
Subject key identifier:   98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       40536DB9A1743369754BDBE2275A21B4DA05C50D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Aug 2026 14:34:22 +0000
Certificate not after:    Sat 21 Aug 2027 14:39:22 +0000
Subordinate resources:    AS: 270824
                          IP: 190.115.196.0/22
                          IP: 2804:71fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:53:6d:b9:a1:74:33:69:75:4b:db:e2:27:5a:21:b4:da:05:c5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 22 14:34:22 2026 GMT
            Not After : Aug 21 14:39:22 2027 GMT
        Subject: CN=98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:73:d2:94:8b:12:58:01:0d:3c:72:7c:67:
                    a8:13:dd:84:58:32:3c:9e:b5:9d:84:9c:c2:8c:e6:
                    6c:51:d9:69:ac:1e:71:1e:fb:8f:b9:15:fb:fd:76:
                    61:76:29:96:36:90:67:c9:56:8f:eb:7d:c2:4e:d8:
                    a8:e3:f4:bf:20:27:5d:2d:ee:ab:e1:01:c4:45:ee:
                    a7:12:bd:98:1c:6c:cb:86:b3:c0:2b:44:f1:4a:d2:
                    3e:cd:48:5b:17:c4:71:44:40:2f:a6:88:4c:c5:32:
                    4a:fe:b6:bc:8b:1f:e7:4a:13:9f:81:e0:09:84:30:
                    b8:d2:e8:1c:3d:dd:6f:dc:03:68:9d:e0:e8:bf:32:
                    e7:c5:31:e5:8c:84:a0:44:0b:aa:7f:3e:4e:4a:31:
                    e9:dd:fa:65:80:22:26:d5:1f:14:70:26:0a:e5:5e:
                    ad:e9:bb:eb:5c:08:b2:e8:0d:98:b3:3c:67:b2:a4:
                    da:99:0f:8b:51:74:8e:d7:c1:0d:fb:a2:69:c7:02:
                    ba:86:3d:b6:bc:71:ef:54:84:52:5f:b9:6d:31:86:
                    55:c8:82:6d:64:60:21:dc:dc:be:4a:ee:17:3c:ea:
                    aa:18:b8:b8:3e:bd:f7:ea:db:21:33:76:c2:41:b7:
                    c7:d9:df:0d:ec:32:9e:73:96:90:9c:3b:3c:7a:3c:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.196.0/22
                IPv6:
                  2804:71fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270824

    Signature Algorithm: sha256WithRSAEncryption
         b5:7d:d7:b0:90:58:43:75:9e:78:7b:e4:17:92:60:32:47:2b:
         39:63:e9:31:42:67:0e:ce:6a:a7:f4:80:12:2d:4d:77:1b:2c:
         45:cd:bd:ff:d6:ee:28:dc:81:85:8e:47:fe:9b:b8:25:1d:ed:
         26:60:67:99:77:f5:44:bb:9b:d9:30:4e:53:28:25:f3:40:f0:
         46:e4:e2:f4:d8:ca:22:fa:15:58:15:0f:b0:d8:49:c7:94:61:
         ea:28:84:29:9e:47:2e:bf:4b:bc:6b:a8:0f:75:c7:39:8e:95:
         0e:98:7e:f0:56:f3:b8:94:bb:d2:7c:d3:52:46:70:c4:b5:03:
         9c:41:9d:62:ce:04:e7:0a:63:bd:48:77:aa:07:95:06:b8:94:
         85:f8:a9:4e:0c:a2:cf:ad:af:da:c0:f0:b4:62:8d:ce:4e:6c:
         af:a0:68:ab:e2:30:d9:09:d2:a7:d9:0b:8d:ed:41:80:c4:2d:
         ce:e2:3f:5a:ce:29:94:4f:09:71:6f:a2:8c:b7:ea:86:4e:be:
         95:18:67:4b:d2:2a:90:53:e2:e7:ac:92:eb:a7:fe:9c:fe:19:
         56:cf:c0:75:34:11:c0:b7:d6:fa:f6:50:83:bb:6a:37:ca:a6:
         06:d4:87:09:68:60:7b:13:31:07:55:0c:e3:27:a8:0d:14:c7:
         df:cc:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:27:25 2026 by rpki-client