Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/DA0301A990242DD7C44B8AECC975443CE24B0791.cer
File:                     DA0301A990242DD7C44B8AECC975443CE24B0791.cer (raw, json)
Hash identifier:          4CfaADTjeXH7aF+E1aLdqJE7wXeLI2Za3qI5fQTEdMs=
Subject key identifier:   DA:03:01:A9:90:24:2D:D7:C4:4B:8A:EC:C9:75:44:3C:E2:4B:07:91
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30248247C52A73F1C23B004605C3F517089B9E80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/DA0301A990242DD7C44B8AECC975443CE24B0791.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Aug 2026 00:22:10 +0000
Certificate not after:    Tue 10 Aug 2027 00:27:10 +0000
Subordinate resources:    AS: 52708
                          IP: 138.118.100.0/22
                          IP: 177.84.40.0/22
                          IP: 2804:2504::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:24:82:47:c5:2a:73:f1:c2:3b:00:46:05:c3:f5:17:08:9b:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 11 00:22:10 2026 GMT
            Not After : Aug 10 00:27:10 2027 GMT
        Subject: CN=DA0301A990242DD7C44B8AECC975443CE24B0791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:a6:63:b6:9b:47:b2:0c:c5:c0:10:74:61:
                    fc:7b:70:60:c7:0e:3f:28:6d:42:d3:96:0d:5e:26:
                    3c:a1:a5:b2:c0:72:9f:29:ad:af:ec:b0:e5:89:93:
                    4c:0f:ba:04:b6:72:4e:15:42:16:5c:6e:d7:d1:02:
                    7f:6d:88:0f:63:e1:55:ce:9d:31:a3:ef:9b:05:15:
                    2a:2e:5e:fd:db:39:24:c2:aa:7a:b1:53:e6:83:46:
                    df:45:98:17:1a:49:cf:49:ef:61:05:86:76:11:4a:
                    c1:ba:37:04:40:16:28:fe:20:5f:a8:8d:fb:60:e0:
                    02:fb:a4:df:fe:ad:f1:0c:e0:2b:e0:ee:6a:68:26:
                    b7:fb:80:2a:e7:26:d7:b7:cf:8c:23:11:08:ad:fa:
                    f0:cb:33:35:f8:dc:a3:85:f4:56:55:98:c2:9e:37:
                    be:53:ea:e4:f6:03:6d:52:d1:7d:94:e1:da:3b:89:
                    6f:59:9f:9d:c8:fd:db:57:13:12:fa:ef:ef:5b:3e:
                    cc:16:6b:cf:82:40:84:ac:50:49:bf:31:67:89:ea:
                    ae:7f:47:48:e8:90:2c:a6:87:86:04:c2:6d:00:7b:
                    7e:15:36:47:61:69:fc:e2:b0:26:9d:d8:95:28:eb:
                    62:b3:91:6d:1c:87:91:1d:29:8f:05:83:b2:a7:61:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:03:01:A9:90:24:2D:D7:C4:4B:8A:EC:C9:75:44:3C:E2:4B:07:91
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/DA0301A990242DD7C44B8AECC975443CE24B0791.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.100.0/22
                  177.84.40.0/22
                IPv6:
                  2804:2504::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52708

    Signature Algorithm: sha256WithRSAEncryption
         ab:6d:3b:b1:a4:cc:be:f3:05:55:7f:0d:04:71:a2:88:57:95:
         bb:9b:56:4f:62:74:f3:61:4e:c0:71:95:16:93:e6:fb:01:4e:
         e2:32:0f:43:d7:f5:53:3f:72:b0:07:93:6a:61:a3:49:75:e8:
         fd:a1:41:42:7e:15:d2:ae:34:7a:7d:d8:45:b5:bc:ec:6d:76:
         19:f4:61:52:51:8f:49:8b:f1:e5:4d:98:88:f5:86:e2:3c:3d:
         71:88:8f:8b:c6:41:33:ac:cf:2a:31:57:ca:18:e4:f3:84:6a:
         fd:76:d9:e8:64:b8:48:bf:b3:5f:9d:48:85:cb:4a:f1:a1:54:
         96:35:67:ce:a1:ba:58:5e:46:dd:ef:c6:01:df:34:7b:d5:a9:
         c5:97:3a:2f:dd:28:b4:73:e1:20:dc:74:1f:01:cc:4f:1d:a2:
         fa:c5:f9:1c:be:57:25:1d:59:61:9b:77:c2:b8:f6:e0:1c:72:
         3a:24:75:76:cc:03:9f:e1:15:9a:e4:0d:64:f8:10:45:77:42:
         83:66:31:3f:63:28:5e:fe:c4:54:90:2b:ad:48:cb:40:af:20:
         d9:6e:4c:0b:f3:58:31:8a:28:3b:40:3d:15:a6:1f:25:8b:ca:
         64:4c:34:2f:81:5d:db:ff:04:29:81:f0:b3:a7:06:c9:a0:ba:
         ef:17:86:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:54:15 2026 by rpki-client