Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
File:                     C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer (raw, json)
Hash identifier:          hBQWKsMrWiPmkSjFmG+vLN1zrZVoxh2Sqj+cpKnjKTg=
Subject key identifier:   C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19EFCC757343A9FF115E93C330048818D4D2739F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Jul 2026 16:58:22 +0000
Certificate not after:    Wed 28 Jul 2027 17:03:22 +0000
Subordinate resources:    AS: 262979
                          IP: 131.255.208.0/22
                          IP: 138.186.232.0/22
                          IP: 168.197.64.0/22
                          IP: 186.226.48.0/21
                          IP: 2804:9a8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ef:cc:75:73:43:a9:ff:11:5e:93:c3:30:04:88:18:d4:d2:73:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 29 16:58:22 2026 GMT
            Not After : Jul 28 17:03:22 2027 GMT
        Subject: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:bc:de:ce:d5:19:f6:e7:21:2e:3b:16:b1:
                    f3:f1:d5:ae:da:86:76:67:35:03:dc:ec:69:55:10:
                    69:28:69:fc:27:c3:a4:9b:e0:6c:a9:37:e7:9d:bd:
                    18:34:99:dd:53:f2:05:5e:e2:8b:ae:23:bb:8a:22:
                    88:d5:35:d3:92:00:16:fe:a0:de:b5:35:7b:6a:8d:
                    b4:b1:ed:90:5a:cc:8b:33:25:23:e2:5b:6a:4e:5d:
                    d3:09:33:fd:16:2f:e0:ad:d8:35:9c:d6:f6:35:9c:
                    f0:f5:16:25:84:ad:91:e6:36:01:c2:16:e3:0c:ab:
                    b7:c0:3b:83:8d:8a:ff:86:e1:97:10:e2:e9:d3:34:
                    63:cf:92:51:b6:ae:7e:09:73:5a:67:46:e5:44:46:
                    be:64:53:c0:55:bf:23:23:bf:b9:39:1d:16:b2:6b:
                    1a:53:ba:ba:12:e9:b0:42:c9:e7:79:b0:56:25:83:
                    a5:47:de:52:6f:76:57:91:cf:d6:a0:ce:85:e7:62:
                    dc:78:c6:1a:2d:a4:f0:b5:10:f3:9b:5d:ae:5d:da:
                    df:24:06:0e:72:2c:81:71:ee:bc:79:7e:b5:c7:76:
                    ed:ea:bf:34:b6:f0:7a:0d:92:82:b2:ca:b3:42:8d:
                    10:41:29:70:c5:d6:8c:e4:00:f0:96:ff:ad:55:80:
                    4a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.208.0/22
                  138.186.232.0/22
                  168.197.64.0/22
                  186.226.48.0/21
                IPv6:
                  2804:9a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262979

    Signature Algorithm: sha256WithRSAEncryption
         bf:4d:32:d1:7b:e5:b2:d1:26:df:ce:b2:af:7e:fc:91:e9:fa:
         d5:7d:25:0b:28:b7:e0:be:ee:e2:cc:0e:5c:bd:7d:de:cb:68:
         3c:82:60:c8:7b:ff:8b:58:fd:8a:dc:93:f0:ae:ec:4d:f9:04:
         be:c7:90:a5:cf:7d:f0:a3:57:51:31:d0:86:79:5c:5f:8f:e0:
         33:84:ef:0c:46:00:32:e3:37:f4:56:61:01:5d:9d:4f:ef:e8:
         37:b7:0b:fe:e5:5b:1a:1d:a7:dc:c4:e2:90:9d:e5:eb:11:e1:
         d4:65:9f:2d:82:a5:bf:0b:4c:83:e5:34:fc:01:55:a4:16:cf:
         c6:48:e8:91:70:a6:90:13:db:b8:8f:f7:f6:8d:e7:ec:93:f5:
         f7:1c:63:85:b6:63:fa:1e:f1:48:96:e5:c2:0e:8b:19:f9:89:
         bc:f2:72:c1:2d:3e:37:82:ae:e5:98:f5:e6:e4:b4:d9:09:77:
         e7:1e:74:54:e6:b8:22:e5:04:e7:82:52:79:9d:72:9f:79:a1:
         ba:3e:72:f7:54:5c:8f:eb:cf:3f:95:24:28:10:51:85:5b:33:
         03:d6:ae:71:5b:1c:fd:3f:a6:e9:7c:cc:fd:13:04:78:03:db:
         c0:fc:1c:db:ff:2b:16:d2:69:f3:2b:3a:6d:71:a0:82:98:54:
         7f:66:ed:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:11:59 2026 by rpki-client