Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer
File:                     B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer (raw, json)
Hash identifier:          ndX5fyla1iKOvjwrKkku0ola8jBFeLhdrqN1g3BFe3M=
Subject key identifier:   B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8
Authority key identifier: 2D:92:3A:37:E0:45:2F:AD:8B:69:D8:07:D1:18:1B:A5:67:FA:5B:6D
Certificate issuer:       /CN=2D923A37E0452FAD8B69D807D1181BA567FA5B6D
Certificate serial:       777A4B76739AB6FD396B9BE5E76BD935C3E29BB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.cer
CRL Distribution Point:   rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.crl
Manifest:                 rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Nov 2026 21:41:07 +0000
Certificate not after:    Wed 10 Nov 2027 21:46:07 +0000
Subordinate resources:    AS: 263155
                          IP: 45.162.16.0/22
                          IP: 45.238.32.0/22
                          IP: 191.242.244.0/22
                          IP: 2804:17c0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Nov 2026 01:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7a:4b:76:73:9a:b6:fd:39:6b:9b:e5:e7:6b:d9:35:c3:e2:9b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D923A37E0452FAD8B69D807D1181BA567FA5B6D
        Validity
            Not Before: Nov 11 21:41:07 2026 GMT
            Not After : Nov 10 21:46:07 2027 GMT
        Subject: CN=B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:f6:f3:6c:c5:84:30:5d:5b:93:1f:6c:45:
                    dd:e6:d9:d0:ad:d4:e5:a4:5a:1c:0c:1b:13:bf:91:
                    c5:50:18:7b:28:55:74:3b:81:40:ca:15:1e:37:1e:
                    bb:c8:13:0d:d3:c9:2c:e9:37:7f:2a:86:39:bb:e8:
                    a2:15:8b:b9:53:44:48:4d:fd:96:28:b5:7b:b5:35:
                    aa:6a:b0:39:3a:0e:a9:aa:87:5d:84:23:bc:79:38:
                    05:3b:c2:74:0a:3c:43:22:00:df:f1:49:fe:2c:8b:
                    28:c9:38:70:3a:38:71:83:9c:22:8f:c9:d2:cb:02:
                    7a:6e:a5:2e:1c:99:4e:b2:5b:17:2e:93:5d:d5:1b:
                    05:ac:c0:f9:53:bd:2b:38:63:a0:24:b7:28:09:93:
                    aa:0d:b2:47:0a:b7:35:cd:d3:3f:12:94:6f:3d:a2:
                    66:2a:3d:d5:83:e2:63:1e:62:f7:3b:2b:25:16:c6:
                    4f:0b:49:9d:7c:99:27:ac:06:d7:05:e1:13:4d:a7:
                    43:f1:0b:36:87:9b:c6:43:09:68:12:08:64:f4:f2:
                    b5:52:e5:40:92:bd:4e:35:a4:ba:d2:ba:86:d3:9d:
                    37:1e:46:35:54:35:3b:a5:70:88:97:de:56:92:78:
                    20:d1:2e:3f:c1:8d:fc:46:ad:a9:8f:9d:d6:d2:c9:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8
            X509v3 Authority Key Identifier:
                keyid:2D:92:3A:37:E0:45:2F:AD:8B:69:D8:07:D1:18:1B:A5:67:FA:5B:6D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.16.0/22
                  45.238.32.0/22
                  191.242.244.0/22
                IPv6:
                  2804:17c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263155

    Signature Algorithm: sha256WithRSAEncryption
         6e:53:1a:e2:25:40:20:d4:a8:c3:5b:79:79:e3:2b:2b:b6:bd:
         d2:81:85:95:a9:e8:b8:b3:a3:0e:4d:e6:87:57:3d:9c:07:46:
         e1:d9:8b:01:ce:4b:6a:dd:90:b2:39:79:0e:3e:26:e3:0f:e0:
         b9:45:fb:44:cc:f6:07:dc:3d:de:46:3d:f2:99:07:ac:42:68:
         ac:c4:ac:e3:07:9f:ed:d3:60:dc:42:fb:86:6d:55:af:81:e0:
         75:3f:f3:17:03:af:95:bd:5f:16:42:2d:49:f2:3d:36:48:d9:
         b7:a8:6a:5d:97:69:cd:2f:e2:fe:f8:9f:a7:4c:64:b0:14:78:
         6c:cd:bc:af:3f:3e:e8:0a:76:8f:fb:b8:ad:6f:7c:d2:7b:00:
         e3:81:89:8c:7d:5d:9b:80:84:d3:71:10:3f:73:45:f7:cc:82:
         90:d1:8b:53:ea:55:23:c7:45:ce:b6:dd:ba:0d:4e:2f:fa:30:
         5f:5f:32:ba:7b:73:4e:4e:26:ee:aa:15:b1:9d:1a:61:72:df:
         58:13:d2:c3:2c:3a:3c:2b:e2:76:a3:5b:1f:9f:f2:2e:17:5b:
         6e:c0:4b:ca:8a:d3:05:b8:fb:5c:f6:d2:a3:a1:53:33:46:d9:
         70:8a:52:11:a7:9a:37:b7:7c:09:81:40:ff:d2:ab:cd:55:72:
         47:ca:24:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:43:36 2026 by rpki-client