Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer
File:                     B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer (raw, json)
Hash identifier:          xcAZ85Q3hP1w+52Dbj2o7e+fHjD4KBtqj/4D0+RDySY=
Subject key identifier:   B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       15BAAF0FB87670145DAF5F5078CD91F46C612E0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Mar 2026 02:18:56 +0000
Certificate not after:    Fri 26 Mar 2027 02:23:56 +0000
Subordinate resources:    AS: 52790
                          IP: 177.39.12.0/22
                          IP: 200.196.140.0/22
                          IP: 2804:18dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 14:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ba:af:0f:b8:76:70:14:5d:af:5f:50:78:cd:91:f4:6c:61:2e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 27 02:18:56 2026 GMT
            Not After : Mar 26 02:23:56 2027 GMT
        Subject: CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:db:2d:0c:79:4a:80:bf:d5:de:7f:51:72:9f:
                    0e:4e:90:63:31:d9:48:3a:3e:00:80:b6:bd:db:0c:
                    08:66:dc:8a:0a:41:06:b4:3b:60:d1:55:92:e2:9a:
                    d4:fb:a3:76:93:5c:55:b1:b6:fe:44:9f:22:ea:e4:
                    ee:2d:32:f3:bc:88:52:9f:f6:88:92:04:3c:06:ef:
                    8f:40:4b:33:3a:93:e7:50:b7:84:3e:d2:bf:b3:7e:
                    83:b2:b4:dc:35:42:f6:61:78:a3:9a:19:a1:dc:1f:
                    92:e1:ca:fe:64:23:d0:6c:90:3a:f0:05:6a:06:f9:
                    42:25:a0:00:c0:8b:d1:c8:b5:5d:3c:f8:98:62:d1:
                    f5:f3:87:15:00:a8:f2:80:7a:6f:81:66:fc:34:a5:
                    a3:6f:5c:87:b0:67:75:b7:d2:61:cd:e6:54:3b:af:
                    96:8b:0d:16:5a:9e:5a:eb:c1:e0:fc:91:34:9e:c0:
                    d5:75:d7:b5:40:d4:c7:66:cf:04:5b:e7:ad:02:86:
                    9e:6d:0e:44:8c:41:aa:d8:99:9f:9e:7a:db:56:91:
                    ae:ba:a9:53:35:4f:e6:ee:aa:4d:c4:11:73:f6:ff:
                    19:3a:f2:7f:f8:09:15:22:fc:80:72:a0:4e:51:c9:
                    ac:83:94:f4:e0:ce:86:c0:00:ca:20:dd:cb:bc:ea:
                    50:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.12.0/22
                  200.196.140.0/22
                IPv6:
                  2804:18dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52790

    Signature Algorithm: sha256WithRSAEncryption
         9d:4d:17:4f:08:5b:74:e5:7d:c9:39:65:9b:b5:a0:5a:3e:a1:
         87:d5:68:23:f2:ef:72:c0:cc:10:31:2e:d6:43:29:b0:3d:c7:
         91:51:42:9b:a6:b3:9d:b1:85:07:e4:61:d5:4c:4f:b8:c4:6a:
         ba:5f:40:9c:42:d3:a5:ec:be:0b:59:15:79:9e:2d:c8:4e:62:
         4d:25:b5:64:bd:e5:17:21:94:51:24:8c:b0:ac:c1:10:3c:7e:
         16:33:a6:5e:1c:cc:7a:c3:96:3c:a3:a7:f1:64:51:fb:c9:9b:
         67:49:8f:90:c5:51:53:b9:9c:66:f9:96:3a:f4:99:46:ad:1b:
         35:94:46:97:e4:b3:0c:3b:5e:31:97:24:41:f9:8b:dc:60:7e:
         d2:a9:b9:dc:f2:97:fe:ea:c5:19:bf:2d:ef:eb:7c:53:d2:f1:
         60:31:38:ec:8c:5f:38:5f:e4:e4:b3:0a:1a:b7:23:ce:86:03:
         73:a1:8a:5c:5c:0c:c5:83:e9:79:fc:8b:35:8b:06:f4:0c:28:
         80:66:89:1a:5b:32:fc:50:72:3e:b8:ee:07:38:b1:85:10:8c:
         ea:3d:b0:ea:af:3c:44:1d:3c:17:42:eb:10:d8:4b:3d:c5:e7:
         e4:63:d6:e5:21:0c:cf:4c:bd:8b:96:00:53:5f:00:c4:94:f4:
         13:2a:21:98
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUFbqvD7h2cBRdr19QeM2R9GxhLgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAzMjcwMjE4NTZaFw0yNzAzMjYwMjIzNTZaMDMxMTAvBgNV
BAMTKEI4QzQyMkY0RTdERUIyMkJGODQ0OUE0ODk2REE1QjYwNThERjY1QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2y0MeUqAv9Xef1Fynw5OkGMx
2Ug6PgCAtr3bDAhm3IoKQQa0O2DRVZLimtT7o3aTXFWxtv5EnyLq5O4tMvO8iFKf
9oiSBDwG749ASzM6k+dQt4Q+0r+zfoOytNw1QvZheKOaGaHcH5Lhyv5kI9BskDrw
BWoG+UIloADAi9HItV08+Jhi0fXzhxUAqPKAem+BZvw0paNvXIewZ3W30mHN5lQ7
r5aLDRZanlrrweD8kTSewNV117VA1MdmzwRb560Chp5tDkSMQarYmZ+eettWka66
qVM1T+buqk3EEXP2/xk68n/4CRUi/IByoE5RyayDlPTgzobAAMog3cu86lBLAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4xCL0596yK/hE
mkiW2ltgWN9lrTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmJR
amZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdjdU4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZi
UWpmQ1B3TG9mY1B1NVZieDdLRWRFc3AxdDVRSkV1clBjeVBhaVhnY3VOLzAvQjhD
NDIyRjRFN0RFQjIyQkY4NDQ5QTQ4OTZEQTVCNjA1OERGNjVBRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCsScMAwQCyMSMMA0EAgACMAcDBQAoBBjcMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDONjANBgkqhkiG9w0BAQsFAAOCAQEAnU0XTwhb
dOV9yTllm7WgWj6hh9VoI/LvcsDMEDEu1kMpsD3HkVFCm6aznbGFB+Rh1UxPuMRq
ul9AnELTpey+C1kVeZ4tyE5iTSW1ZL3lFyGUUSSMsKzBEDx+FjOmXhzMesOWPKOn
8WRR+8mbZ0mPkMVRU7mcZvmWOvSZRq0bNZRGl+SzDDteMZckQfmL3GB+0qm53PKX
/urFGb8t7+t8U9LxYDE47IxfOF/k5LMKGrcjzoYDc6GKXFwMxYPpefyLNYsG9Awo
gGaJGlsy/FByPrjuBzixhRCM6j2w6q88RB08F0LrENhLPcXn5GPW5SEMz0y9i5YA
U18AxJT0EyohmA==
-----END CERTIFICATE-----
Generated at Thu Apr 9 12:58:18 2026 by rpki-client