Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.cer
File:                     EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.cer (raw, json)
Hash identifier:          L/qCzjpGWd8M2S3MQp+FXiXRLB0n4IQij00iKiDHUls=
Subject key identifier:   EA:23:AB:40:E4:81:E8:BE:E7:FD:B7:F6:D7:BD:7D:60:CD:62:57:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37DB1BA45C28CFA1D0E8DC162BB9BF05FAD5D447
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Aug 2026 12:28:15 +0000
Certificate not after:    Mon 09 Aug 2027 12:33:15 +0000
Subordinate resources:    AS: 266648
                          IP: 128.201.204.0/22
                          IP: 2804:3f40::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:db:1b:a4:5c:28:cf:a1:d0:e8:dc:16:2b:b9:bf:05:fa:d5:d4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 10 12:28:15 2026 GMT
            Not After : Aug  9 12:33:15 2027 GMT
        Subject: CN=EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:a5:17:68:c4:61:02:13:a3:87:db:c8:c1:
                    c9:6d:72:12:87:5a:43:ca:c1:c8:07:8e:ea:7b:5a:
                    6c:f6:fc:46:43:ec:3a:7b:62:74:50:ef:9c:8e:fb:
                    49:98:35:77:a1:e4:13:dc:88:6a:7a:d2:9b:f2:c8:
                    36:27:28:e8:5f:79:3b:01:4b:16:0b:ad:85:3b:af:
                    dc:e2:48:7c:28:10:8a:cb:f7:09:bb:23:c8:6b:50:
                    f3:94:bd:df:d0:4f:be:f3:43:ab:45:34:86:e1:13:
                    0e:6b:d9:29:54:67:b2:d5:6b:ac:ea:e7:49:b6:6b:
                    c6:be:9c:9e:1c:8d:c6:38:9a:79:68:4b:03:74:47:
                    61:f3:79:49:8f:38:42:86:43:85:21:d3:ac:29:61:
                    cc:39:19:5c:15:ab:b7:61:b4:61:3f:6b:4d:ee:08:
                    d7:d2:9c:24:95:e2:9a:92:fd:63:4e:bf:42:ee:f3:
                    a6:b3:54:8f:df:6c:b3:cb:03:2d:07:c1:ba:58:86:
                    b4:5f:b6:83:fc:be:3b:f3:3a:ca:b4:92:96:f6:dd:
                    a8:f8:85:54:71:2b:f4:39:41:63:b9:07:6a:7f:02:
                    b5:17:ec:b7:2f:4a:26:e5:f9:e8:11:8e:17:bd:86:
                    a6:1d:8d:c0:21:e7:66:10:df:cb:7e:f6:e4:08:29:
                    d5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:23:AB:40:E4:81:E8:BE:E7:FD:B7:F6:D7:BD:7D:60:CD:62:57:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.204.0/22
                IPv6:
                  2804:3f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266648

    Signature Algorithm: sha256WithRSAEncryption
         a2:b6:b1:c7:f3:01:db:48:8b:d2:80:1f:f1:07:53:b9:12:70:
         a3:01:ee:4e:21:56:b4:dc:29:b5:63:e6:00:38:e3:94:a9:dd:
         e0:c3:45:ad:23:d7:8b:5e:72:58:ef:c4:06:69:8b:ab:10:d4:
         65:e8:dd:27:00:35:6e:42:55:31:96:db:4d:55:08:1e:f9:3f:
         6d:7d:26:86:ca:80:09:c8:a4:b6:49:9a:90:1c:c7:1e:30:4b:
         a2:79:d4:5e:ca:e1:d1:05:ae:b6:eb:7c:69:4d:a5:7e:2f:83:
         84:4e:8b:bf:63:b9:17:dc:46:4c:22:3a:34:67:41:20:1c:70:
         92:64:44:17:f2:2b:79:8a:50:9b:46:87:c9:2b:44:1a:98:60:
         41:1b:e2:cb:6b:5a:87:07:e2:34:17:2d:c7:dc:4d:b4:4b:69:
         1f:a2:87:7f:98:70:0a:93:9e:eb:03:66:87:fb:1e:96:ff:4b:
         d8:46:c7:33:58:bd:b4:31:df:85:cb:18:e8:b8:f7:c5:c7:07:
         3a:89:0c:ef:e9:29:6a:16:55:dd:50:2b:1c:fb:14:97:b7:13:
         27:72:40:ae:4e:56:0e:97:71:7d:71:18:4e:ec:90:02:15:5d:
         27:34:4a:c7:03:7a:86:90:70:9b:40:c5:9a:72:85:1b:d4:37:
         19:69:0b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:14:51 2026 by rpki-client