Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FC85D8FA6ED7ABC2934EBE175615AFAFD695DF4.cer
File:                     4FC85D8FA6ED7ABC2934EBE175615AFAFD695DF4.cer (raw, json)
Hash identifier:          KGpMOcNIXhEBSCAXdmkh0+mrN1nXszjBAnHncerRYEQ=
Subject key identifier:   4F:C8:5D:8F:A6:ED:7A:BC:29:34:EB:E1:75:61:5A:FA:FD:69:5D:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       01C18CD949F068B2025790F26489CCFC050B325B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/4FC85D8FA6ED7ABC2934EBE175615AFAFD695DF4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 May 2026 18:05:33 +0000
Certificate not after:    Mon 03 May 2027 18:10:33 +0000
Subordinate resources:    AS: 265131
                          IP: 143.208.220.0/22
                          IP: 2804:2b04::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c1:8c:d9:49:f0:68:b2:02:57:90:f2:64:89:cc:fc:05:0b:32:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  4 18:05:33 2026 GMT
            Not After : May  3 18:10:33 2027 GMT
        Subject: CN=4FC85D8FA6ED7ABC2934EBE175615AFAFD695DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:46:83:f8:94:d6:5d:ed:86:e2:b3:94:0d:
                    41:9c:70:16:6a:14:da:80:a7:5c:0f:ef:50:e2:11:
                    a1:9c:b7:2e:ee:19:74:2b:4a:dd:cd:2a:da:09:7d:
                    e5:3c:d7:20:b4:8b:9f:d9:52:68:40:59:91:40:5f:
                    53:b9:5f:bd:a6:eb:0c:84:e8:c8:ef:18:56:5d:29:
                    07:7e:a2:fa:cc:e0:3e:67:9a:b7:7f:4b:5d:bd:21:
                    a0:d9:8b:10:66:48:89:4c:0d:b3:37:b7:bd:c8:53:
                    29:7e:aa:93:b3:d8:56:2c:db:65:d8:06:eb:f5:d3:
                    15:95:57:e3:2d:5a:0e:7c:43:f8:2d:7b:35:54:ba:
                    53:72:eb:98:47:23:84:d3:58:af:fa:6d:0a:d8:d9:
                    3e:b6:a5:5d:0c:09:d1:39:02:e0:70:8c:40:62:59:
                    c3:de:90:3e:1e:83:7b:23:e6:2f:96:1a:af:9c:8e:
                    37:6b:c7:04:1b:19:eb:e5:9a:5d:8a:21:8e:a2:62:
                    74:1f:7c:f3:46:51:dc:f4:26:66:7b:6c:05:b1:2b:
                    fc:e5:d1:c8:27:17:58:55:93:9c:71:6b:21:d5:56:
                    42:4c:b9:ba:6b:9b:ce:49:50:3e:88:65:e9:25:19:
                    9b:41:18:f3:60:c8:6f:fd:37:0d:6c:c3:0e:16:5e:
                    c7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:C8:5D:8F:A6:ED:7A:BC:29:34:EB:E1:75:61:5A:FA:FD:69:5D:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/4FC85D8FA6ED7ABC2934EBE175615AFAFD695DF4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.220.0/22
                IPv6:
                  2804:2b04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265131

    Signature Algorithm: sha256WithRSAEncryption
         76:76:31:b6:f5:f1:99:4b:69:fd:93:f8:b9:cc:49:11:99:12:
         0e:98:0e:b3:27:ef:82:74:f7:87:86:94:58:85:2e:6c:dd:b3:
         76:0d:8e:28:cd:b0:99:b6:ee:b2:84:1e:fe:56:fb:ef:4c:ed:
         be:b7:eb:3b:29:fc:91:b5:ca:ac:44:0e:89:6a:83:f9:b3:e3:
         ca:66:77:28:5c:22:ae:d7:db:da:f6:9a:da:1b:8d:be:6a:f3:
         fd:3e:41:ad:f5:2e:8f:16:1c:f7:f7:f5:b4:5a:09:db:5f:fe:
         4c:8c:0e:87:be:12:7f:e9:5c:ce:39:25:bc:de:23:f8:8f:66:
         ad:3b:45:d0:fd:98:26:97:75:1f:95:0f:21:0a:c8:29:b7:3d:
         8a:3e:d5:ec:4c:4a:43:4f:7c:c0:b2:b2:84:62:be:39:90:84:
         49:72:56:1c:6c:8c:b5:e1:7e:60:5e:ba:1c:cc:a3:de:00:63:
         95:6d:e5:c4:9b:45:32:83:42:c1:ab:0c:73:96:7f:f7:a6:5c:
         29:52:81:15:f7:16:b2:3e:e6:0c:31:03:18:65:84:40:5e:03:
         94:cb:6f:23:8c:07:32:0b:73:86:03:9f:f1:83:04:8a:63:32:
         14:a0:37:3f:f0:d0:9c:e2:b2:61:7f:f6:bb:54:4e:1a:39:ea:
         ca:58:81:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:09 2026 by rpki-client