Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/040EF4179B818F193FC21E9010EDB21DD3FD6262.cer
File:                     040EF4179B818F193FC21E9010EDB21DD3FD6262.cer (raw, json)
Hash identifier:          2blrdAKzwaInHf7eTaYhkVOsdrUrLyx5pSDonD9FvVM=
Subject key identifier:   04:0E:F4:17:9B:81:8F:19:3F:C2:1E:90:10:ED:B2:1D:D3:FD:62:62
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       60CE7FF9ED8BCCE35771FEE95176445D772A95F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/040EF4179B818F193FC21E9010EDB21DD3FD6262.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Oct 2026 19:40:12 +0000
Certificate not after:    Tue 05 Oct 2027 19:45:12 +0000
Subordinate resources:    AS: 273362
                          IP: 2804:8d84::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ce:7f:f9:ed:8b:cc:e3:57:71:fe:e9:51:76:44:5d:77:2a:95:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  6 19:40:12 2026 GMT
            Not After : Oct  5 19:45:12 2027 GMT
        Subject: CN=040EF4179B818F193FC21E9010EDB21DD3FD6262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:e8:a7:d6:7f:6c:49:c1:97:a7:ac:90:71:
                    c9:c4:ee:57:7c:04:c2:2d:83:c0:ae:f2:66:ce:6b:
                    04:5b:dd:cf:39:c9:d5:f4:ae:58:b4:7e:70:bc:e8:
                    a5:5f:5c:34:4b:e3:6b:50:70:57:78:a9:fa:9a:36:
                    e5:b8:f1:4c:8b:f1:3c:dd:07:f6:6b:de:a7:4d:f4:
                    87:f1:3c:1d:13:01:83:a2:79:9a:50:1c:e5:45:f4:
                    c4:16:c8:10:56:ee:e8:2b:c7:1b:31:28:af:94:ef:
                    68:17:5b:3d:12:ac:ce:f4:c1:67:35:23:ad:57:8f:
                    f6:50:ea:e4:1c:08:69:e6:dd:a5:35:c5:1a:83:ce:
                    0b:53:32:ac:64:ad:58:36:c0:cd:a3:1d:17:5d:51:
                    54:7f:5d:e9:93:cf:a9:00:97:7d:8b:54:d2:2e:81:
                    c8:bc:df:28:da:4a:c3:a5:5b:9b:5f:0a:5d:9d:b6:
                    86:01:cd:64:b1:7e:a7:af:43:47:51:fc:cf:4b:f2:
                    ce:92:e4:a5:0e:ec:a0:db:ff:64:1c:7d:0b:0c:fb:
                    da:04:85:67:a7:e7:ed:25:37:e1:92:22:78:33:fc:
                    ae:ef:8f:b5:82:19:53:86:b3:aa:e4:07:c8:98:18:
                    dc:ce:29:7e:36:8e:95:4f:58:e2:a1:6b:e4:06:57:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:0E:F4:17:9B:81:8F:19:3F:C2:1E:90:10:ED:B2:1D:D3:FD:62:62
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/040EF4179B818F193FC21E9010EDB21DD3FD6262.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273362

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:bd:55:2d:11:48:77:bc:5b:ac:a1:20:db:98:d6:be:71:
         e9:85:32:fc:d1:c5:20:c5:68:85:5d:fd:58:66:36:bb:a4:74:
         86:ae:45:e1:91:ce:c2:5e:c4:44:ac:89:22:3f:44:e0:c0:5c:
         ec:01:2e:14:b4:3a:c0:8e:5c:be:ec:ac:a3:d1:88:ca:65:1d:
         00:29:2e:de:be:63:bc:d2:50:fa:cc:58:ba:bc:57:72:02:89:
         e3:cc:e4:f3:b4:40:1c:16:81:95:76:12:ec:53:15:c4:d6:97:
         ef:f7:09:12:35:6c:b7:26:80:2d:75:d9:7b:b0:ec:4b:96:57:
         4c:a9:5d:95:9c:81:64:31:8d:08:cb:6b:0c:c9:aa:fa:d0:ef:
         84:e7:c9:60:7c:fe:50:2c:28:53:3b:c7:6f:69:e1:18:a1:54:
         f8:94:0d:0e:08:9a:bd:82:86:1f:fc:ce:33:14:71:c5:11:6b:
         c4:1e:51:87:44:7c:35:1b:81:a9:e3:53:3f:ad:bc:f4:07:34:
         da:2d:2c:eb:ba:4d:bc:97:81:3b:83:ef:7f:df:95:a2:73:b6:
         a3:d7:0e:82:5f:ab:ce:75:41:f6:47:4d:ff:d3:a1:47:92:a6:
         88:7f:aa:8b:03:ab:60:69:45:c9:72:3b:0c:2b:9d:86:36:cb:
         82:e6:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 12:56:56 2026 by rpki-client