Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer
File:                     99C2A53A53B7161516985068CD39F465FE646938.cer (raw, json)
Hash identifier:          eWxczG3wjHc2fqTD274+cFb5qZqv1dbiYBzZveCCxTI=
Subject key identifier:   99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5183364CD6330D558AC5AD2C66317003DE66BB67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Oct 2026 07:04:49 +0000
Certificate not after:    Tue 26 Oct 2027 07:09:49 +0000
Subordinate resources:    AS: 28232
                          IP: 189.127.32.0/20
                          IP: 2804:7ed8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 01:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:83:36:4c:d6:33:0d:55:8a:c5:ad:2c:66:31:70:03:de:66:bb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 27 07:04:49 2026 GMT
            Not After : Oct 26 07:09:49 2027 GMT
        Subject: CN=99C2A53A53B7161516985068CD39F465FE646938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:92:f1:6d:df:bc:6f:ec:f8:22:6e:b9:24:
                    04:4d:02:2c:f8:8b:ab:74:7c:aa:e9:f9:71:fa:a6:
                    af:cc:e9:1a:15:a9:a0:45:ca:a6:91:f3:5c:f4:51:
                    65:f7:67:b5:fd:2b:03:37:e3:48:68:81:db:6d:d4:
                    ab:e1:c1:8d:e6:22:12:ba:bf:d6:83:0d:d1:6c:d9:
                    07:34:ac:d4:33:c3:59:6f:b4:a2:e5:62:c4:b9:a1:
                    bd:34:d8:28:07:a1:19:cd:c6:80:bb:bb:95:e1:70:
                    3b:57:3f:90:fe:fb:39:d6:9a:48:42:23:b9:7e:dd:
                    2b:79:41:db:68:ad:20:09:54:2b:4b:43:cf:c8:f9:
                    d4:69:84:8a:6e:4f:01:7b:b6:e8:d7:09:c2:bc:2a:
                    d9:f4:ba:d1:b6:c8:9a:b1:a0:2d:ec:ef:b7:00:be:
                    c3:ea:45:1e:e3:0d:f3:ae:92:1e:c5:e9:9e:e7:84:
                    46:6c:26:33:9f:5f:2a:23:e7:2a:3d:14:4e:e3:99:
                    7f:b0:3f:75:da:13:d1:04:1f:b1:01:e7:b7:af:24:
                    a7:cb:4a:4e:f0:44:5e:1a:d1:2f:74:68:ec:91:39:
                    d9:31:e3:88:33:13:22:90:5f:cd:eb:96:7e:70:d2:
                    7d:3d:73:58:cb:06:19:89:7f:56:4f:65:35:9c:8b:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.32.0/20
                IPv6:
                  2804:7ed8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28232

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:90:3e:e2:0f:e7:67:d3:c4:64:ef:61:75:da:0c:80:ec:
         90:93:db:ee:2a:14:f5:10:91:63:96:17:c6:fd:21:f7:74:5a:
         40:7a:7d:9a:66:6e:e5:03:29:cd:3d:87:6f:6d:00:51:54:e4:
         37:85:ed:e5:8c:9d:f6:48:91:02:ac:32:d3:61:82:a3:b9:e1:
         13:7e:85:fa:0f:ad:1f:9f:8e:c5:ea:6e:e5:1b:2e:f2:9d:fe:
         12:10:e6:91:ba:fd:fe:ab:b8:db:11:11:3c:05:ba:43:62:4d:
         cb:f4:17:e4:87:5f:8e:28:78:24:75:86:00:b1:cf:63:1f:96:
         89:b2:e5:0c:38:97:36:04:23:38:ad:20:b0:6a:06:8c:d1:72:
         e0:69:79:ca:5e:43:af:de:79:15:d9:90:5e:5c:8a:05:53:02:
         13:ca:b3:d2:46:fa:55:48:63:1d:0f:ad:bf:7f:3e:26:62:f1:
         43:ce:25:47:da:f6:e1:12:16:bb:6d:ba:7e:4c:e8:3b:79:a6:
         91:bd:1f:b6:93:f0:4a:fa:19:a7:b6:2c:ae:71:28:fe:7f:6f:
         f7:8d:c9:fa:df:59:8f:52:3f:8b:10:4a:b7:55:0b:83:05:58:
         ed:4c:cc:52:cc:7f:c5:bd:ca:d9:06:9e:8d:a8:f3:6b:e4:8b:
         e5:4d:92:8c
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUUYM2TNYzDVWKxa0sZjFwA95mu2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjEwMjcwNzA0NDlaFw0yNzEwMjYwNzA5NDlaMDMxMTAvBgNV
BAMTKDk5QzJBNTNBNTNCNzE2MTUxNjk4NTA2OENEMzlGNDY1RkU2NDY5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXIJLxbd+8b+z4Im65JARNAiz4
i6t0fKrp+XH6pq/M6RoVqaBFyqaR81z0UWX3Z7X9KwM340hogdtt1KvhwY3mIhK6
v9aDDdFs2Qc0rNQzw1lvtKLlYsS5ob002CgHoRnNxoC7u5XhcDtXP5D++znWmkhC
I7l+3St5QdtorSAJVCtLQ8/I+dRphIpuTwF7tujXCcK8Ktn0utG2yJqxoC3s77cA
vsPqRR7jDfOukh7F6Z7nhEZsJjOfXyoj5yo9FE7jmX+wP3XaE9EEH7EB57evJKfL
Sk7wRF4a0S90aOyROdkx44gzEyKQX83rln5w0n09c1jLBhmJf1ZPZTWci+UHAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZwqU6U7cWFRaY
UGjNOfRl/mRpODAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1pl
eGRzeGdGNDlMRDlDbTRYYmNSUWd1TlA1N3JSRUcxNW5IQjNMSHVnelovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzda
ZXhkc3hnRjQ5TEQ5Q200WGJjUlFndU5QNTdyUkVHMTVuSEIzTEh1Z3paLzAvOTlD
MkE1M0E1M0I3MTYxNTE2OTg1MDY4Q0QzOUY0NjVGRTY0NjkzOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEvX8gMA0EAgACMAcDBQAoBH7YMBkGCCsGAQUFBwEI
AQH/BAowCKAGMAQCAm5IMA0GCSqGSIb3DQEBCwUAA4IBAQAyxJA+4g/nZ9PEZO9h
ddoMgOyQk9vuKhT1EJFjlhfG/SH3dFpAen2aZm7lAynNPYdvbQBRVOQ3he3ljJ32
SJECrDLTYYKjueETfoX6D60fn47F6m7lGy7ynf4SEOaRuv3+q7jbERE8BbpDYk3L
9Bfkh1+OKHgkdYYAsc9jH5aJsuUMOJc2BCM4rSCwagaM0XLgaXnKXkOv3nkV2ZBe
XIoFUwITyrPSRvpVSGMdD62/fz4mYvFDziVH2vbhEha7bbp+TOg7eaaRvR+2k/BK
+hmntiyucSj+f2/3jcn631mPUj+LEEq3VQuDBVjtTMxSzH/FvcrZBp6NqPNr5Ivl
TZKM
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:59:25 2026 by rpki-client