Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.cer
File:                     494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.cer (raw, json)
Hash identifier:          f1v91FcTxVjrx660yUF+Kt1bP6Uts686hXo2lEbN2wY=
Subject key identifier:   49:40:69:E5:7B:43:B0:EF:0F:AF:4C:C7:D3:98:9B:C9:18:9B:A9:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5CF31FA97FB4CBEDD65D38A22258AF64F80F0750
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Oct 2026 22:06:43 +0000
Certificate not after:    Mon 04 Oct 2027 22:11:43 +0000
Subordinate resources:    AS: 268088
                          IP: 45.168.100.0/22
                          IP: 2804:57d0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 19:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f3:1f:a9:7f:b4:cb:ed:d6:5d:38:a2:22:58:af:64:f8:0f:07:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  5 22:06:43 2026 GMT
            Not After : Oct  4 22:11:43 2027 GMT
        Subject: CN=494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:01:15:34:d2:e5:18:6f:b7:5c:33:92:66:
                    70:66:c0:d7:7f:3d:e9:54:1e:ad:00:cb:e6:be:24:
                    a4:78:ba:85:69:6b:ac:a3:6f:ac:30:2c:ba:d2:0c:
                    1c:db:c3:9d:59:b3:63:ff:5a:5f:d4:1e:72:f2:7f:
                    3f:3f:5c:6d:d2:51:0c:61:fb:16:b7:66:35:10:23:
                    44:8d:6a:47:28:5f:f5:11:93:d6:21:89:26:19:c3:
                    43:b5:33:19:62:55:5d:73:93:1f:9e:9d:7b:2e:31:
                    b4:c2:ca:a7:d6:6b:db:24:6f:8d:77:0d:9b:35:3d:
                    e2:00:70:72:39:42:ae:92:51:a7:f3:dc:71:5d:46:
                    0d:33:38:90:3d:ed:ea:c6:02:67:99:be:c9:6f:ad:
                    43:49:9a:d4:36:38:7a:ea:5f:7b:7f:63:b4:7c:0c:
                    a2:bc:e4:4f:97:b0:ce:49:8a:cf:1b:5c:71:fd:2f:
                    1e:ed:19:ca:c0:01:a2:d5:f0:5c:1c:2d:96:dc:42:
                    ff:45:8f:63:2a:d1:40:45:57:1a:6a:fa:94:e6:ba:
                    cf:28:c7:e3:9e:f5:a6:75:22:63:ef:09:9e:dd:22:
                    cb:ae:54:a7:59:9e:a2:04:00:35:8a:31:93:28:c7:
                    bc:8b:5d:39:29:8f:94:63:ab:97:db:5c:1c:96:b7:
                    a5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:40:69:E5:7B:43:B0:EF:0F:AF:4C:C7:D3:98:9B:C9:18:9B:A9:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22
                IPv6:
                  2804:57d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268088

    Signature Algorithm: sha256WithRSAEncryption
         b8:44:2e:d4:34:64:b5:c8:f4:78:21:36:bd:1b:85:27:87:e1:
         43:a6:c6:65:d2:55:82:05:93:07:40:b4:c8:92:2c:39:8f:31:
         7f:26:81:98:7a:bf:99:a6:e8:4d:43:27:84:37:03:5d:f0:08:
         ee:a5:95:39:b5:ec:fd:81:57:48:32:44:68:29:1a:e4:04:16:
         bf:aa:58:15:18:eb:b4:a4:70:ae:78:fd:58:d2:4b:46:82:78:
         81:89:99:c1:4a:56:8e:41:87:cf:88:a5:ff:6c:a8:db:03:7c:
         d8:33:dd:8c:cc:a2:35:ef:b4:a5:44:ca:be:1a:9c:14:2e:8d:
         99:82:f1:75:6c:00:71:d6:76:74:65:1f:70:75:91:29:f0:40:
         2e:96:60:0a:7b:3c:e2:31:40:5a:dd:0a:34:9a:9f:00:b4:bd:
         dd:eb:3e:00:95:08:ad:92:d5:4d:24:cd:b7:28:78:e2:76:cd:
         02:7b:c5:c5:12:e6:b2:04:65:62:e5:22:7c:81:b9:97:ff:75:
         50:b9:05:3f:c4:44:c5:09:c7:0e:b1:7d:6f:89:b6:97:ff:73:
         18:87:1a:0e:7b:7b:c5:c5:e7:19:4b:dd:42:11:14:9c:1b:9b:
         46:a3:55:4f:0e:5d:e1:85:cc:c2:88:4b:65:f0:a8:ae:18:ea:
         a2:d4:cc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:48:01 2026 by rpki-client