Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer
File:                     208F84112F1A4B695E56F4EB839321D9C18D523D.cer (raw, json)
Hash identifier:          ereTzB0YjXc88N7sif8337OvySOIl8sSHFdG1UCajh8=
Subject key identifier:   20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       16508841A28437CE1BA29A61A36B68679C4A7F51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 May 2026 09:44:38 +0000
Certificate not after:    Wed 12 May 2027 09:49:38 +0000
Subordinate resources:    AS: 270258
                          IP: 45.191.12.0/22
                          IP: 2804:6940::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:50:88:41:a2:84:37:ce:1b:a2:9a:61:a3:6b:68:67:9c:4a:7f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 13 09:44:38 2026 GMT
            Not After : May 12 09:49:38 2027 GMT
        Subject: CN=208F84112F1A4B695E56F4EB839321D9C18D523D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:7a:46:b7:e8:55:07:95:f3:3b:fe:9a:ed:
                    3a:63:d5:7e:9c:17:91:38:ea:19:30:5e:7a:28:fc:
                    e0:f3:af:bc:58:9c:db:2d:0c:f0:10:f8:7c:4f:aa:
                    a5:90:f4:77:27:06:d0:90:75:3f:67:03:40:97:06:
                    53:d2:ab:fd:e3:6b:65:6b:96:15:80:c5:2e:29:ed:
                    75:7f:5c:6b:5a:2c:0b:f1:d5:5c:6d:7f:1b:e1:ab:
                    fa:f5:3f:2a:2c:11:14:7d:3c:e5:10:af:a3:66:10:
                    20:4a:98:63:81:5c:da:af:b7:ba:b4:01:99:9b:f4:
                    65:75:18:44:4d:16:c3:be:7b:ef:e7:7b:f2:fc:1f:
                    f2:0f:f0:c1:e5:12:cf:56:ab:49:8f:a2:a2:52:6b:
                    6f:26:b8:77:e8:79:08:cd:af:82:72:bd:0f:b2:07:
                    ea:bd:2d:d7:b5:2a:65:ba:b6:52:07:a4:ac:21:61:
                    94:c0:47:cc:81:6a:d2:57:0a:12:c7:13:17:bf:2b:
                    97:2f:85:45:eb:c8:f5:f0:fa:7b:64:3e:7d:75:c5:
                    0c:45:b7:65:44:22:b8:69:c9:60:3c:31:69:7a:fe:
                    0d:dd:81:9d:27:57:ad:57:fe:da:72:3c:0b:0e:87:
                    6e:85:3c:67:94:6f:c8:aa:88:f2:03:32:9c:72:ff:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.12.0/22
                IPv6:
                  2804:6940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270258

    Signature Algorithm: sha256WithRSAEncryption
         c7:da:20:25:f3:6b:be:3f:5d:9c:bd:6c:c3:3c:3b:10:26:94:
         51:21:13:e4:9a:39:ee:c8:ae:e8:98:0b:3f:9d:ed:d0:6c:7f:
         bc:ae:37:b9:ed:58:a1:5f:9b:94:d7:4d:d4:6c:29:22:36:47:
         08:56:6f:ec:f1:fe:6d:03:b6:52:e9:6a:e3:62:85:6a:9d:b7:
         bb:26:f6:5a:c0:00:de:9c:a8:2e:b0:9a:c3:58:b4:37:27:0d:
         d7:29:a9:39:aa:cf:93:e4:aa:9e:42:35:a3:4c:2e:6f:45:98:
         a9:ec:63:be:9e:d9:2b:56:e4:db:4d:88:8f:2b:2e:d5:66:38:
         23:60:c6:de:db:bd:78:5c:57:0f:37:51:8a:b2:84:1b:59:18:
         2b:f9:2f:09:5c:77:c2:3c:e1:97:43:5b:2f:ed:61:96:d5:4a:
         3b:10:a6:e9:f7:5b:44:2f:bb:e9:3c:e5:45:0f:45:73:db:02:
         f2:08:9a:c8:26:7c:f5:f2:b7:02:59:a8:c4:9e:89:ba:ab:3a:
         01:7a:67:ab:97:06:fa:f1:1f:0b:8c:c4:72:85:54:43:63:c8:
         27:35:6e:eb:f2:85:ef:eb:bc:0c:9d:71:6d:71:86:4f:61:24:
         4b:a2:f8:fe:8b:ce:b8:7b:b5:1f:36:16:8e:4a:77:a8:af:ea:
         60:8f:7c:6f
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUFlCIQaKEN84boppho2toZ5xKf1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA1MTMwOTQ0MzhaFw0yNzA1MTIwOTQ5MzhaMDMxMTAvBgNV
BAMTKDIwOEY4NDExMkYxQTRCNjk1RTU2RjRFQjgzOTMyMUQ5QzE4RDUyM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1U3pGt+hVB5XzO/6a7Tpj1X6c
F5E46hkwXnoo/ODzr7xYnNstDPAQ+HxPqqWQ9HcnBtCQdT9nA0CXBlPSq/3ja2Vr
lhWAxS4p7XV/XGtaLAvx1Vxtfxvhq/r1PyosERR9POUQr6NmECBKmGOBXNqvt7q0
AZmb9GV1GERNFsO+e+/ne/L8H/IP8MHlEs9Wq0mPoqJSa28muHfoeQjNr4JyvQ+y
B+q9Lde1KmW6tlIHpKwhYZTAR8yBatJXChLHExe/K5cvhUXryPXw+ntkPn11xQxF
t2VEIrhpyWA8MWl6/g3dgZ0nV61X/tpyPAsOh26FPGeUb8iqiPIDMpxy/1cDAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgj4QRLxpLaV5W
9OuDkyHZwY1SPTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlNR
VEZoRktwUTVVSHNzOHNQRFRlVWhaTndXQTlEdlZFZVljSHU0RkRFZHMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JT
UVRGaEZLcFE1VUhzczhzUERUZVVoWk53V0E5RHZWRWVZY0h1NEZERWRzLzAvMjA4
Rjg0MTEyRjFBNEI2OTVFNTZGNEVCODM5MzIxRDlDMThENTIzRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLb8MMA0EAgACMAcDBQAoBGlAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQfsjANBgkqhkiG9w0BAQsFAAOCAQEAx9ogJfNrvj9dnL1s
wzw7ECaUUSET5Jo57siu6JgLP53t0Gx/vK43ue1YoV+blNdN1GwpIjZHCFZv7PH+
bQO2Uulq42KFap23uyb2WsAA3pyoLrCaw1i0NycN1ympOarPk+SqnkI1o0wub0WY
qexjvp7ZK1bk202Ijysu1WY4I2DG3tu9eFxXDzdRirKEG1kYK/kvCVx3wjzhl0Nb
L+1hltVKOxCm6fdbRC+76TzlRQ9Fc9sC8giayCZ89fK3AlmoxJ6Juqs6AXpnq5cG
+vEfC4zEcoVUQ2PIJzVu6/KF7+u8DJ1xbXGGT2EkS6L4/ovOuHu1HzYWjkp3qK/q
YI98bw==
-----END CERTIFICATE-----
Generated at Wed May 13 16:38:06 2026 by rpki-client