Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
File:                     D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer (raw, json)
Hash identifier:          A15zmV4laI+p2gtaQ5KjwRVZXN9E88OxWkGioa3dLS0=
Subject key identifier:   D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       32525E456718911F95A03B3C4EA2CF5A2C642F14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Feb 2026 06:09:59 +0000
Certificate not after:    Fri 19 Feb 2027 06:14:59 +0000
Subordinate resources:    AS: 266962
                          IP: 45.226.124.0/22
                          IP: 2804:4604::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:52:5e:45:67:18:91:1f:95:a0:3b:3c:4e:a2:cf:5a:2c:64:2f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 20 06:09:59 2026 GMT
            Not After : Feb 19 06:14:59 2027 GMT
        Subject: CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:f2:3a:17:bb:11:bf:a5:66:76:91:05:ee:
                    a2:7f:85:eb:8d:4d:02:d9:f1:0c:73:2d:0b:dc:08:
                    88:93:b9:c5:cd:74:65:99:f8:c3:bc:f8:f7:a6:b6:
                    cb:a1:95:04:04:64:8a:ce:9b:13:d9:41:7d:bb:4e:
                    15:d6:11:fc:52:b5:35:ce:aa:3b:a7:eb:0f:d4:4d:
                    35:57:40:be:d1:84:06:7b:93:7d:87:fe:90:27:de:
                    aa:53:49:57:ac:38:6a:be:ec:d8:3b:c8:d0:ca:5a:
                    5c:41:89:0e:e4:fc:7e:d4:78:bd:82:c9:cd:61:89:
                    a6:26:61:11:07:a0:c7:af:96:aa:1f:8a:3e:ac:a1:
                    7b:dc:06:a1:f7:c4:29:f5:32:eb:08:f2:92:4e:1c:
                    59:d2:77:fc:e5:ea:e8:9f:82:0a:84:05:21:bb:c0:
                    75:2d:11:71:1b:0f:e4:2b:b4:3d:cc:5d:66:01:c1:
                    2c:33:6c:01:7b:bb:e0:8c:f1:66:b0:dd:be:55:51:
                    b7:82:8d:b6:4b:81:8f:0c:54:b1:af:19:ff:d4:d7:
                    84:50:a4:13:90:a2:82:43:59:87:7f:e5:b3:8d:ac:
                    c2:73:9c:fb:f6:a0:27:c0:be:4e:7b:bb:c1:7a:03:
                    a2:44:0d:7c:1c:3f:ba:12:a4:00:ac:3c:46:78:ac:
                    78:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.124.0/22
                IPv6:
                  2804:4604::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266962

    Signature Algorithm: sha256WithRSAEncryption
         13:46:5e:a3:4f:ec:bf:5d:02:0d:dc:f7:70:4d:8e:c9:1f:bb:
         6e:97:25:41:cf:bf:fa:2b:7a:62:a3:9f:6e:0a:71:20:ad:9b:
         36:8c:70:c6:19:17:27:4f:80:d7:d1:b9:91:20:dd:78:cd:a0:
         4c:b4:72:51:e5:3e:cc:ca:83:0a:b6:49:32:d6:26:c5:aa:72:
         ca:dc:08:88:ea:d9:b0:00:93:e2:81:2d:d4:8b:c2:10:2e:5e:
         9e:72:d5:dc:74:2d:36:47:4d:72:76:f7:3d:6c:9b:8c:f9:87:
         2b:81:b6:4c:24:20:fa:71:ed:60:ef:fe:72:ea:c4:3a:78:4e:
         05:6b:22:7c:1a:72:9d:f2:7c:1e:5b:66:5e:55:8f:e7:6f:ab:
         37:1b:6c:56:7b:8b:06:12:9b:f8:76:33:f1:34:7e:e6:05:a7:
         28:0f:43:66:f0:bc:6b:8b:06:64:b4:2b:94:90:2b:aa:19:f7:
         0f:3a:f4:3b:49:9f:43:b3:85:f8:32:e9:33:20:fe:d2:b3:dd:
         a5:6d:9b:b3:b5:5f:da:76:40:0a:d5:90:45:f2:7f:91:99:be:
         7c:48:ea:cd:65:b1:80:0d:0c:f5:1b:cd:12:95:02:aa:a0:b3:
         b2:c8:6b:5a:de:59:ae:f5:6a:9e:f7:02:76:62:d9:53:a4:20:
         3c:4c:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:46:45 2026 by rpki-client