Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
File:                     D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer (raw, json)
Hash identifier:          nHUbNOmy1Iwc5xD1uNOm/k6QtYCcOD2Cl51a+BvxVoA=
Subject key identifier:   D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       620339D1A7F174E6A47F99CE6C997DF6D8F25602
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Sep 2026 20:07:54 +0000
Certificate not after:    Fri 10 Sep 2027 20:12:54 +0000
Subordinate resources:    AS: 61754
                          IP: 131.100.40.0/22
                          IP: 143.202.52.0/22
                          IP: 170.83.68.0/22
                          IP: 186.196.209.0/24
                          IP: 2804:1be0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 Oct 2026 13:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:03:39:d1:a7:f1:74:e6:a4:7f:99:ce:6c:99:7d:f6:d8:f2:56:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 11 20:07:54 2026 GMT
            Not After : Sep 10 20:12:54 2027 GMT
        Subject: CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:90:9a:bd:ae:f6:e3:8d:2b:54:b4:08:f1:
                    0c:01:9b:e1:0f:29:cb:c5:a5:52:fe:20:c3:83:fe:
                    38:de:64:13:6a:1b:f9:77:7d:ba:e7:29:9e:af:d1:
                    c8:c5:c8:91:39:c5:c5:30:02:6c:6b:b3:99:c7:9a:
                    7a:0b:52:f0:99:79:e6:55:f7:0b:ba:e6:55:34:c3:
                    9c:02:2f:c5:93:e5:f7:62:ed:f5:78:4a:b5:5f:bb:
                    0b:a3:76:c5:16:48:df:4e:de:20:ed:04:25:44:3a:
                    8e:95:81:9e:aa:f8:9f:8b:73:48:c0:40:59:e3:db:
                    59:ee:11:86:cd:c0:29:8b:c2:69:69:6e:c2:07:5f:
                    da:b4:48:8e:8f:68:c0:b2:d6:04:56:af:70:ce:ea:
                    1a:9b:e6:51:99:62:b7:da:f5:93:c1:c2:14:d8:59:
                    f3:9f:cd:c7:58:da:85:10:2e:5f:bd:cb:62:f0:2f:
                    08:39:cd:1c:a5:5a:f4:78:45:f6:f8:38:b7:c9:4d:
                    48:bd:08:b8:ce:86:3d:8c:26:df:03:9f:02:2c:68:
                    f0:c5:2a:71:47:e0:fb:60:d6:f8:d6:e0:43:65:53:
                    c3:1c:cb:46:f8:c8:7b:70:dc:d3:4f:e7:90:18:ed:
                    0c:81:71:9c:30:2c:f1:fe:df:91:3d:95:9a:d2:f9:
                    6d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.40.0/22
                  143.202.52.0/22
                  170.83.68.0/22
                  186.196.209.0/24
                IPv6:
                  2804:1be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61754

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:dd:eb:4f:25:69:20:da:7b:26:b3:4a:73:ce:a4:57:fc:
         55:37:40:7f:b3:e8:70:1f:a6:f9:1f:e5:ca:7b:22:3f:2e:1e:
         a8:81:48:e4:62:5a:3c:19:a2:7b:60:4d:e9:71:ab:5f:8c:3e:
         5c:fe:96:52:30:34:e9:44:6e:08:86:2d:6f:5e:48:f6:b8:db:
         0f:fe:19:95:b8:49:a2:43:cb:d3:f1:72:67:fe:0e:4e:21:6a:
         0c:12:4d:fa:86:c3:eb:a4:9b:db:76:d9:5f:0a:eb:b8:73:a9:
         1a:34:38:0f:03:45:c1:8f:32:54:2e:0c:51:b4:45:25:aa:8c:
         77:3f:b6:48:2e:40:a3:02:40:55:05:39:22:40:5e:1c:64:5f:
         5c:3b:49:69:14:f6:fb:9e:18:5f:95:be:fb:81:c1:a7:4f:2d:
         73:84:d1:a3:e6:4e:52:57:ff:88:81:0d:be:c9:1e:a8:6e:20:
         96:44:f7:40:dd:ed:1e:87:73:d8:47:59:18:67:1d:51:30:43:
         29:70:2d:b9:d6:48:e9:bb:73:32:1f:9c:cf:ef:ce:69:80:0f:
         6d:9f:b6:70:56:30:66:99:fd:9d:ee:50:cf:ca:13:37:8a:e4:
         7f:88:03:f5:ab:55:5a:e3:ea:df:64:dc:64:f1:9d:60:1a:29:
         f0:56:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:12:01 2026 by rpki-client