Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DBFB5B14FE52FD99D231D815C08ABF45E15373D0.cer
File:                     DBFB5B14FE52FD99D231D815C08ABF45E15373D0.cer (raw, json)
Hash identifier:          nM+sMp3m92g2rCnHxxOeocxe7GHFldwKmS/+AmDgpGw=
Subject key identifier:   DB:FB:5B:14:FE:52:FD:99:D2:31:D8:15:C0:8A:BF:45:E1:53:73:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4EC4794E863C187FC406E4C4796A2CD7D37793B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/DBFB5B14FE52FD99D231D815C08ABF45E15373D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jun 2026 13:28:49 +0000
Certificate not after:    Tue 29 Jun 2027 13:33:49 +0000
Subordinate resources:    AS: 267048
                          IP: 45.228.44.0/22
                          IP: 2804:475c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c4:79:4e:86:3c:18:7f:c4:06:e4:c4:79:6a:2c:d7:d3:77:93:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 30 13:28:49 2026 GMT
            Not After : Jun 29 13:33:49 2027 GMT
        Subject: CN=DBFB5B14FE52FD99D231D815C08ABF45E15373D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:45:7b:6a:48:ae:b0:94:00:5d:a3:af:79:
                    c4:da:4d:3d:b6:15:d4:de:cb:29:14:10:d5:74:f1:
                    a4:de:ed:a5:38:ab:1e:07:7b:3e:5e:2d:30:53:1e:
                    1e:50:37:d4:6e:ae:ac:b3:5c:17:78:c8:08:1d:f8:
                    a4:d1:46:0d:c9:30:ea:f6:88:a8:64:64:ed:fd:d4:
                    37:06:eb:5f:41:fe:34:f7:ed:e7:b4:20:cf:b4:fa:
                    c9:85:ec:d3:b3:b2:41:a8:be:c8:ca:b8:2b:dc:ac:
                    67:34:cc:25:bb:14:a0:8c:bf:cb:0b:68:02:13:2e:
                    59:b9:0b:83:51:9e:84:10:22:20:6f:5f:ff:73:bb:
                    57:24:e0:f6:77:4b:09:e9:db:7f:d8:8b:3f:41:eb:
                    43:7e:89:ad:25:62:91:db:eb:f8:ba:e6:4f:0f:33:
                    a6:50:eb:0d:d7:7d:34:01:f7:ca:f3:7d:82:4b:b8:
                    02:e6:9c:5b:d1:4e:ef:1e:54:03:fd:a4:1f:77:d0:
                    33:61:f3:09:cb:fb:99:dd:4b:6c:a8:c5:06:fd:31:
                    c1:d6:c5:a8:dd:af:ea:84:d4:91:be:6e:70:ea:ab:
                    40:c4:23:05:ff:f2:f6:b5:e8:d6:55:2b:89:5e:43:
                    62:28:3f:d7:c0:c9:ac:db:c1:0f:71:04:f2:98:5b:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:FB:5B:14:FE:52:FD:99:D2:31:D8:15:C0:8A:BF:45:E1:53:73:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/DBFB5B14FE52FD99D231D815C08ABF45E15373D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.44.0/22
                IPv6:
                  2804:475c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267048

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:78:a0:95:1b:d0:af:aa:8b:a8:b0:ca:b6:fa:dc:54:a0:
         47:aa:41:d7:b7:8b:08:ab:3a:df:5e:12:37:cc:38:97:67:c3:
         2d:08:86:f5:be:a1:6f:5a:7c:6e:1d:fb:ef:dd:62:64:20:89:
         2c:08:c1:e8:53:6a:2b:d2:9f:6a:6e:38:9b:0a:8d:b9:d3:ff:
         48:45:4d:35:b9:af:ac:62:46:38:49:4a:a4:96:13:0d:48:31:
         3c:5f:00:f2:62:40:bb:db:74:7c:62:18:eb:9e:c4:a9:c3:a2:
         20:7d:77:30:04:2c:03:7b:e1:02:0e:3a:40:e6:b2:d3:62:4b:
         88:9f:f0:3a:24:cd:9e:54:48:eb:e5:e2:86:bd:84:65:67:b4:
         a5:97:fc:1c:9f:a6:f2:12:d2:90:54:b6:73:25:32:8c:e4:c4:
         8e:88:a1:6f:87:79:26:f3:65:15:e0:19:f6:93:a2:d6:3f:93:
         b1:54:89:c9:0c:09:32:08:97:35:d1:5f:2c:15:b2:a3:25:58:
         be:24:17:a2:09:c7:82:b1:3a:5d:49:a2:41:8b:ae:38:39:02:
         06:33:ca:12:c6:d8:fe:31:e3:46:8f:02:c0:31:be:cb:d3:36:
         30:56:bd:7c:ce:6c:8d:e5:41:c0:d7:a0:a1:5a:4a:f6:d8:b9:
         9d:85:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:21:06 2026 by rpki-client