Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.cer
File:                     B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.cer (raw, json)
Hash identifier:          WZqL1NMZKlQvrH+F3q6fEU2uoq5jYrfMmeuXzBslRGU=
Subject key identifier:   B2:EB:FA:8E:17:F5:E2:58:7A:A1:69:3B:02:99:D1:EC:AF:F3:2F:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46A046CC701E5E169E9E163F6FC82A696C6A6952
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jan 2026 18:37:42 +0000
Certificate not after:    Mon 25 Jan 2027 18:42:42 +0000
Subordinate resources:    AS: 268384
                          IP: 45.239.80.0/22
                          IP: 2804:505c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a0:46:cc:70:1e:5e:16:9e:9e:16:3f:6f:c8:2a:69:6c:6a:69:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 26 18:37:42 2026 GMT
            Not After : Jan 25 18:42:42 2027 GMT
        Subject: CN=B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:f9:6f:ef:30:e1:22:01:06:9b:05:33:83:
                    39:2c:7c:5c:46:69:1c:af:7e:14:d3:b8:f3:2d:7a:
                    1f:da:22:bc:7e:c8:78:61:39:46:55:5c:fa:87:80:
                    31:c5:53:1f:87:43:e7:86:3e:6b:5c:00:86:9f:15:
                    2e:a1:8d:c2:6b:e0:ec:b3:71:95:b6:81:ae:0a:af:
                    53:59:85:4d:53:02:89:5f:54:6f:aa:12:b4:e6:4b:
                    ae:1c:94:23:a9:66:fd:3b:36:e4:49:69:7d:51:6d:
                    34:c3:4d:a3:54:10:0e:7f:ae:5a:03:5a:1a:cc:e3:
                    59:ab:8b:f2:26:c7:63:af:4f:f9:ea:be:e4:18:81:
                    fa:32:76:ac:1c:54:cf:51:e1:f2:1e:6d:08:67:f9:
                    dc:fb:ec:d7:e3:a5:37:54:e2:22:3c:1b:0e:b0:f6:
                    54:5d:9b:68:89:44:96:d6:e1:bc:ce:8a:9a:d5:05:
                    0d:ff:f7:cb:da:a4:fc:29:b9:9c:95:1e:d1:f3:d6:
                    35:3c:0b:79:80:4c:8c:25:6b:38:c7:ca:41:3e:75:
                    33:14:f4:92:4c:9f:a0:f5:43:08:59:59:f5:85:a6:
                    cc:d7:41:87:5f:69:bc:6c:64:6e:24:0b:fc:7d:41:
                    31:1f:60:e4:8d:01:0f:96:de:79:d3:e9:96:01:e1:
                    8b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:EB:FA:8E:17:F5:E2:58:7A:A1:69:3B:02:99:D1:EC:AF:F3:2F:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.80.0/22
                IPv6:
                  2804:505c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268384

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:34:57:81:de:70:bc:4a:67:47:f7:90:25:3a:4f:e8:2e:
         76:0d:ee:ee:e0:2c:3f:b3:a3:00:e4:6c:21:89:b3:35:27:af:
         e1:76:b7:4d:4a:b6:27:6b:28:3c:d8:ad:7e:c2:36:ec:bd:e8:
         77:a5:2e:92:e0:f6:2f:23:37:9b:92:1f:1d:ec:7e:d4:c1:66:
         cf:fc:c2:10:cc:66:1f:cc:95:43:34:3a:62:bf:c4:63:db:b1:
         47:40:2a:84:0d:ab:8a:7c:ca:1b:f1:00:c3:89:fa:a7:29:e9:
         15:bb:b0:d2:1d:83:28:ee:ff:05:a9:e2:f2:7b:64:37:72:02:
         72:22:fd:4e:ff:cd:7c:42:44:de:e0:d6:ff:28:17:ed:af:ed:
         64:5f:8c:13:76:6a:0a:5b:52:40:4e:14:8c:4d:e0:8b:4b:97:
         93:db:7d:c8:ab:38:42:56:0f:f7:f9:46:44:be:5e:76:4a:74:
         b0:a0:32:66:9f:18:e3:29:60:90:06:b1:5a:92:bc:5f:64:99:
         bb:69:93:52:5d:e0:ad:6e:0a:d9:4b:6c:48:f6:d9:ff:0e:f3:
         a8:4e:04:fc:96:ce:7f:0a:0d:dd:43:60:35:fb:c8:0c:b1:db:
         65:12:40:11:c0:32:a8:0b:f9:86:02:d8:00:10:f9:fd:43:c9:
         bf:27:41:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:41:14 2026 by rpki-client