Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/09DAE02ABB15EA82CD5E3EF2C78D20AC12F3B9C5.cer
File:                     09DAE02ABB15EA82CD5E3EF2C78D20AC12F3B9C5.cer (raw, json)
Hash identifier:          3fDV62zUUlFZ4izqBo+OffM7Kv3hJD8CfU1W9ikuHJM=
Subject key identifier:   09:DA:E0:2A:BB:15:EA:82:CD:5E:3E:F2:C7:8D:20:AC:12:F3:B9:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       60A3E958C258924D8E8946835D3E494F059B008E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/09DAE02ABB15EA82CD5E3EF2C78D20AC12F3B9C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 19 Jul 2026 04:28:02 +0000
Certificate not after:    Sun 18 Jul 2027 04:33:02 +0000
Subordinate resources:    AS: 266616
                          IP: 128.201.44.0/22
                          IP: 2804:3eb4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a3:e9:58:c2:58:92:4d:8e:89:46:83:5d:3e:49:4f:05:9b:00:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 19 04:28:02 2026 GMT
            Not After : Jul 18 04:33:02 2027 GMT
        Subject: CN=09DAE02ABB15EA82CD5E3EF2C78D20AC12F3B9C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:8d:86:86:dd:62:47:98:23:0e:33:02:1f:
                    b0:b2:32:69:6a:18:f5:59:83:1b:69:a9:55:b5:55:
                    c5:a2:00:de:41:bf:39:9d:0e:3a:31:2c:97:d4:12:
                    72:24:88:d1:29:78:d5:92:dc:6a:07:93:5b:21:23:
                    26:44:e1:55:f8:cf:9c:83:f5:e5:57:dc:0f:ea:fd:
                    19:e9:dd:11:9b:a8:91:57:ed:64:4e:2b:e7:36:86:
                    fd:ed:60:2d:40:cf:38:e5:6f:1a:f4:20:f4:18:1f:
                    ae:f3:33:8e:64:68:12:92:b8:4c:5b:3d:36:f3:99:
                    df:47:07:7c:98:46:d8:23:c6:0f:f9:15:44:f2:76:
                    cf:e0:9b:d0:61:dd:9b:7a:ab:85:5b:30:ca:db:37:
                    d2:57:8c:a2:c3:76:54:29:49:2f:89:06:77:a1:7c:
                    f2:7b:f8:dd:84:4f:d9:68:9d:6d:18:0f:25:df:31:
                    b8:02:53:37:b0:96:25:89:e3:94:9c:ec:92:49:f5:
                    1e:f9:4d:8a:5e:e7:de:6d:9d:16:c5:0c:65:6e:06:
                    c6:c9:c1:b8:87:9c:7b:6f:bf:4a:48:72:5e:16:b5:
                    1f:9b:91:8b:e5:f2:4f:85:06:2e:6c:e6:b3:ef:76:
                    fc:38:07:0d:64:c6:b1:37:24:42:d8:ed:10:c9:b7:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:DA:E0:2A:BB:15:EA:82:CD:5E:3E:F2:C7:8D:20:AC:12:F3:B9:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/09DAE02ABB15EA82CD5E3EF2C78D20AC12F3B9C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.44.0/22
                IPv6:
                  2804:3eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266616

    Signature Algorithm: sha256WithRSAEncryption
         97:6c:4c:b4:f9:6a:12:ce:27:bf:d1:96:3a:6c:13:28:34:7e:
         cc:c6:b0:12:76:de:28:e9:50:2c:27:03:6e:72:44:8b:bd:5f:
         07:9b:a5:98:4f:9f:d1:f9:c8:cf:1b:35:f1:31:02:b7:fc:ec:
         ef:57:4d:6f:4b:cd:aa:6d:4f:cc:ac:d3:08:72:9c:63:47:4e:
         d9:90:5b:77:54:8b:0c:b5:8f:52:44:fb:b9:e1:73:c5:e6:66:
         32:ad:81:9f:18:f6:e4:9d:07:ff:06:3c:07:59:aa:56:d4:f1:
         5f:d2:c7:1c:cd:7f:1b:9f:11:09:43:01:ee:ed:62:be:67:95:
         93:41:bd:04:0c:2f:35:d4:d8:04:6d:96:62:a8:93:c1:52:26:
         df:e8:86:d0:3d:99:8f:dd:e3:81:60:84:9e:85:9a:ba:48:2b:
         b7:1c:48:4d:0e:3b:dc:16:83:a9:e4:2b:d6:fa:bd:89:de:7f:
         fe:05:a8:42:f5:14:26:40:1b:a0:ab:be:9c:c1:ed:e0:19:73:
         04:b0:dc:8e:f2:4d:52:7d:d5:02:4a:0c:20:f3:97:03:8b:0a:
         95:e3:c9:c8:81:29:bd:20:9c:d5:9b:2d:67:a6:f5:23:2c:3e:
         22:16:65:f5:4f:21:fe:11:21:46:e4:fa:6c:ca:9c:dd:d0:b3:
         b2:a8:90:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:59:13 2026 by rpki-client