Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
File:                     D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer (raw, json)
Hash identifier:          X99nlgzHj95s5IpWvqHSemclwlCxYnSwyXgcX7swxWg=
Subject key identifier:   D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       03B8F6AFC7866B0AD77C1483F58552D1CA9E0310
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Sep 2026 15:10:38 +0000
Certificate not after:    Wed 08 Sep 2027 15:15:38 +0000
Subordinate resources:    AS: 263022
                          IP: 186.249.16.0/21
                          IP: 2804:a18::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 11:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b8:f6:af:c7:86:6b:0a:d7:7c:14:83:f5:85:52:d1:ca:9e:03:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  9 15:10:38 2026 GMT
            Not After : Sep  8 15:15:38 2027 GMT
        Subject: CN=D55BE7005278F3F9252FA4D5C51715A6B1BF81E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:eb:d3:f4:73:30:6a:b4:14:c6:5c:04:8d:
                    aa:80:f5:89:cc:15:f3:b6:c3:f5:8f:29:c2:0f:c3:
                    b5:d1:8f:8f:d5:6e:9c:41:6e:e5:9a:58:92:bd:d6:
                    7b:fc:03:d4:2d:97:63:ec:86:39:a0:7f:e8:91:ea:
                    09:dc:35:0f:c9:b3:6f:b6:27:8c:86:7e:bf:71:5e:
                    e7:0e:cc:c5:70:5e:eb:c9:b0:18:52:2b:ec:48:9c:
                    1c:b5:1e:83:89:b9:80:29:ec:31:8d:28:c9:c6:df:
                    2c:52:15:21:e0:02:77:e6:bc:4b:6e:93:22:61:75:
                    1b:c6:df:13:d9:41:e7:47:7e:c6:96:4f:98:17:33:
                    b1:35:d1:2c:01:70:c9:39:a0:3d:49:1d:17:ad:97:
                    58:52:21:09:a6:f4:61:a8:31:37:52:ec:69:4b:df:
                    b3:db:67:22:60:72:1c:12:89:78:2f:54:56:96:69:
                    89:9d:05:57:1f:a2:fb:a5:dc:39:3b:cb:09:d2:20:
                    17:6b:6b:46:af:44:21:ba:ce:eb:a3:18:5c:86:cd:
                    e2:38:8f:06:9e:6a:ea:73:19:15:d0:97:46:90:78:
                    e2:0f:7c:47:70:d8:d6:1a:2b:88:ca:c2:ea:9e:dd:
                    41:7f:d4:ee:8a:9f:f4:51:5b:86:3f:08:75:e8:86:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.16.0/21
                IPv6:
                  2804:a18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263022

    Signature Algorithm: sha256WithRSAEncryption
         32:1c:5f:16:38:53:11:a3:f3:30:04:d2:ca:7f:ab:14:2d:c6:
         a4:43:14:df:1e:84:a7:70:94:d0:3b:1d:02:f1:e9:d6:8d:95:
         a6:7c:8c:b6:58:1f:e4:67:72:a0:da:0d:de:bf:6f:24:2c:dc:
         6d:05:e2:04:7e:60:7d:fa:a1:12:fc:58:e1:72:02:4a:b0:17:
         92:b2:af:d3:71:a9:df:c5:02:7a:0a:93:2c:01:69:4e:30:90:
         11:db:72:66:ab:ba:4d:2b:e9:cd:15:d8:cd:8b:1f:64:71:7d:
         81:1f:49:ce:1b:49:1c:f0:46:84:7b:42:13:1b:a0:14:b5:d0:
         e8:42:4f:63:6c:13:5a:f3:21:50:1a:8c:cc:7b:72:4e:8b:5f:
         eb:04:5e:7a:aa:03:d3:60:7a:6b:ad:8c:78:d1:59:9c:70:aa:
         1a:f5:03:3d:47:c9:a3:be:81:5b:c0:f7:06:d8:4c:1f:96:c9:
         20:e8:48:0a:c2:f3:e7:24:8f:02:b5:fc:79:10:ba:9f:4f:1b:
         f9:59:31:34:84:af:10:fe:15:33:15:78:94:58:cd:43:e5:13:
         2e:14:84:3e:68:7a:99:b3:39:fc:da:e6:49:15:56:2b:25:78:
         e3:cf:3c:50:e7:10:fb:b6:85:b5:c4:c7:9d:00:69:b8:6d:09:
         8b:5c:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:02:51 2026 by rpki-client