Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
File:                     23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer (raw, json)
Hash identifier:          6GhE39AMb/5CVJ5o74EGQXJwBxCBApA0jmBd/8KLf5U=
Subject key identifier:   23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F253C5A327956E2982258D50E3B4470F81F2F57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 19:23:40 +0000
Certificate not after:    Mon 10 May 2027 19:28:40 +0000
Subordinate resources:    AS: 266650
                          IP: 128.201.216.0/22
                          IP: 2804:3f48::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:25:3c:5a:32:79:56:e2:98:22:58:d5:0e:3b:44:70:f8:1f:2f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 11 19:23:40 2026 GMT
            Not After : May 10 19:28:40 2027 GMT
        Subject: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:c4:36:1c:38:19:ad:e8:2c:06:e3:f6:a4:
                    01:c7:d0:a0:2c:16:6b:06:0a:51:1c:cc:ed:e7:b0:
                    05:52:a3:9c:83:7a:3e:0b:3a:9d:4b:e5:a9:b0:51:
                    7c:3d:54:e1:70:34:e5:e1:6e:ca:cd:81:4a:df:cc:
                    ea:4d:f7:92:c6:76:31:0e:94:0b:70:a5:ca:6f:01:
                    8d:e3:22:72:24:7b:25:f9:3b:3b:4a:e4:3d:96:d9:
                    2e:07:85:e3:13:9f:8e:68:75:e0:68:4d:0a:82:9d:
                    57:9c:54:07:3e:a8:f3:00:95:70:cb:88:a6:8f:06:
                    7b:0d:19:c7:1a:62:b0:fa:71:a5:e8:63:39:25:f6:
                    f5:66:42:f8:34:a1:67:88:39:07:cf:43:cd:13:7f:
                    1a:81:06:69:00:86:63:a8:c6:9b:cf:08:07:c1:4b:
                    de:52:02:bf:38:df:a5:c4:b7:2d:5c:99:95:1d:9d:
                    6a:55:f9:b6:ab:7d:56:fc:39:b2:02:d0:aa:2b:ed:
                    18:85:4b:23:3e:c2:4d:4b:2c:21:10:17:2c:e0:21:
                    6d:76:5c:5a:34:8a:6b:97:44:27:4c:cc:4d:cd:36:
                    5f:24:6d:d8:c4:ad:47:ca:d4:ac:aa:b6:34:31:cb:
                    c9:8a:84:58:21:db:de:a1:0c:0d:e0:b0:71:6f:a7:
                    46:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.216.0/22
                IPv6:
                  2804:3f48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266650

    Signature Algorithm: sha256WithRSAEncryption
         ce:8a:ce:1d:91:56:be:22:1a:20:ac:f5:0f:32:06:a8:d3:39:
         46:c3:b1:40:4e:01:c2:42:3a:87:c0:87:cc:c0:0b:a9:53:d5:
         b9:e2:16:66:4b:72:35:a2:00:2a:7d:b7:2d:ef:fa:f9:c3:75:
         66:ef:e1:15:41:a8:73:81:7b:a9:14:bc:43:76:3a:7f:77:93:
         8d:87:f2:ed:ba:75:11:aa:7e:34:d8:a8:02:9f:22:c7:c3:f8:
         cc:a7:4f:5c:91:33:d5:1d:5c:dd:2d:59:d4:7a:52:2c:9a:d2:
         00:83:7d:65:b0:d3:06:4d:3f:2b:e0:6b:89:a1:63:1a:61:4e:
         c0:7c:f9:f2:82:e2:74:71:a0:23:80:bb:9c:31:1b:5e:69:86:
         e5:e5:d0:59:c7:8e:a7:a9:78:0c:92:a3:97:7d:c4:0f:1b:7d:
         cc:a0:36:1f:4a:fd:f1:b9:d8:20:34:f6:aa:cd:e9:8d:0a:b0:
         70:82:15:fa:b9:a7:a5:76:9f:97:57:22:d8:d6:06:e2:fa:40:
         a1:be:2e:8b:62:17:77:92:d7:42:40:31:65:cc:f1:ae:43:e0:
         ad:2a:a0:73:c7:07:af:33:82:6b:5b:80:38:ee:46:d1:f0:f4:
         e5:19:05:df:62:ca:88:98:ae:48:3b:f2:67:7b:88:45:fc:d1:
         83:e5:1c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:51:27 2026 by rpki-client