Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.cer
File:                     CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.cer (raw, json)
Hash identifier:          U/L33BFg1BbHf6tV86gng35C2aq4cQAL1PS2fympOGI=
Subject key identifier:   CE:2F:C0:BE:A1:95:DA:BA:38:7B:E8:AB:04:EB:FD:68:2C:2E:F1:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A5E3CB99E55A7B55CBFAA637EDB5225A519BD2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.mft
caRepository:             rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Sep 2026 11:15:24 +0000
Certificate not after:    Wed 22 Sep 2027 11:20:24 +0000
Subordinate resources:    AS: 267048
                          IP: 45.228.44.0/22
                          IP: 2804:475c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 Oct 2026 16:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5e:3c:b9:9e:55:a7:b5:5c:bf:aa:63:7e:db:52:25:a5:19:bd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 23 11:15:24 2026 GMT
            Not After : Sep 22 11:20:24 2027 GMT
        Subject: CN=CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:4e:f3:0c:27:54:8a:63:27:e0:72:b2:77:
                    e9:b3:06:3a:a3:b9:1b:d0:c2:3f:a1:08:ac:a3:54:
                    82:fa:c8:83:c4:d4:5a:b8:32:fc:54:3c:74:99:6e:
                    4d:ef:9f:3b:bc:6e:27:da:4f:09:4e:51:0a:7f:f3:
                    3c:93:6e:ce:99:30:8b:93:7b:96:3a:f8:4e:03:30:
                    a3:39:e3:e9:90:89:98:7e:26:2d:77:e3:ca:0e:9d:
                    2b:d9:66:40:cb:ab:55:71:a1:13:b8:2c:7a:74:91:
                    2b:6d:9b:b9:b9:a5:28:59:9d:58:a4:9e:58:06:2f:
                    98:98:70:dc:49:49:b9:76:5b:48:36:20:d9:4d:85:
                    df:16:f7:8d:d2:4d:76:6f:d6:d9:5f:1a:76:83:19:
                    99:d3:89:75:30:9c:e2:60:68:e2:0c:22:c1:17:79:
                    12:b4:c5:fb:d5:f2:7e:10:36:26:6d:8f:48:0f:b4:
                    16:36:9d:2c:13:ce:22:a7:96:bf:e2:b4:f6:24:ac:
                    b2:ce:e8:7d:bf:a2:dd:36:0d:b7:16:fc:f4:e2:13:
                    11:b0:5e:29:db:a4:e8:35:cf:7e:ca:60:a6:65:ab:
                    a1:dd:29:9e:e8:d9:b6:98:f0:24:dd:46:5e:2d:c5:
                    24:18:eb:d3:f3:c5:fb:d5:cc:61:46:b8:99:42:f8:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:2F:C0:BE:A1:95:DA:BA:38:7B:E8:AB:04:EB:FD:68:2C:2E:F1:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.44.0/22
                IPv6:
                  2804:475c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267048

    Signature Algorithm: sha256WithRSAEncryption
         91:7c:f8:96:79:d9:9d:e7:6e:f6:5e:f6:9a:32:6c:ee:e0:8a:
         7e:60:d4:88:ea:7e:f7:11:20:56:d6:25:7d:9d:ca:c3:f7:d1:
         36:8e:61:c2:ae:7d:c9:9a:45:c2:f9:62:a1:f4:49:ac:c5:ae:
         57:e2:d1:f1:b3:a6:61:06:e4:5d:f3:14:ad:8a:8a:94:ee:38:
         c9:ec:ce:da:5e:1a:3e:a1:03:e8:a4:1c:ee:6e:67:cb:c7:c6:
         eb:cf:25:8e:66:26:15:91:b3:be:8c:c2:67:2a:9f:22:e9:89:
         e4:3c:37:16:54:01:2f:a9:61:f2:3e:20:39:57:da:dc:83:ef:
         32:e6:cc:70:db:f1:7f:27:ca:b8:a5:c2:cc:2b:7c:62:13:fc:
         3c:b9:fb:47:cd:ab:9f:ff:a9:f1:3b:14:7b:bb:bf:1c:e6:77:
         ab:e9:62:75:3c:cf:c5:74:b2:30:ff:89:d7:69:a1:ac:1a:2c:
         2e:a3:7b:9a:6b:ad:e5:d2:a2:41:a2:b4:b6:1c:23:4c:cf:f7:
         42:0a:b3:d6:ad:44:dd:4c:4a:f5:09:ba:cd:75:35:1d:3f:f3:
         8d:37:13:bb:d9:cd:f9:00:6e:bb:06:6f:82:7b:08:c9:9e:26:
         b7:d3:16:84:67:be:b3:f6:06:83:b2:92:e0:8f:72:d1:3e:f3:
         1f:f8:82:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:59:23 2026 by rpki-client