Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
File:                     501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer (raw, json)
Hash identifier:          +OqHXenzA92jV2sOFWJry0UQgFZZODQiWc6trRWJXTs=
Subject key identifier:   50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       28668A69F35A2A644B1165FC192B5074AB635102
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Oct 2026 05:47:55 +0000
Certificate not after:    Mon 11 Oct 2027 05:52:55 +0000
Subordinate resources:    AS: 28299
                          IP: 177.12.160.0/20
                          IP: 177.185.192.0/20
                          IP: 187.1.128.0/20
                          IP: 189.38.80.0/20
                          IP: 191.6.192.0/19
                          IP: 2804:10::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 08:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:66:8a:69:f3:5a:2a:64:4b:11:65:fc:19:2b:50:74:ab:63:51:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 12 05:47:55 2026 GMT
            Not After : Oct 11 05:52:55 2027 GMT
        Subject: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:a5:88:f9:8b:5d:3e:c1:11:61:6b:ce:29:
                    67:1f:b4:bf:83:76:d5:ad:e7:62:20:33:58:fa:25:
                    21:d1:1e:6e:77:ca:93:72:4d:e6:23:eb:ad:db:a2:
                    b3:c3:10:f3:be:fe:86:5d:bb:a8:ec:9e:03:86:ad:
                    5c:66:35:f9:ea:89:0a:9d:e8:93:75:1a:49:8a:dc:
                    ce:e6:47:3f:71:8d:b4:a0:1c:9b:8e:9e:5d:3c:d8:
                    15:bd:4b:66:6b:85:04:12:bf:53:28:4d:45:da:73:
                    84:bc:4b:92:e5:fd:a2:fd:7c:b6:44:eb:92:ea:7e:
                    1d:c2:4d:52:9c:e2:5c:08:69:d1:de:00:3c:87:e8:
                    ce:b7:57:41:a2:e2:1d:a1:62:39:b1:8f:4f:0d:92:
                    df:1f:08:26:b3:ba:8b:7f:c7:56:01:4a:e8:74:b1:
                    5f:da:02:90:a5:e2:4f:12:ce:70:ad:91:c3:09:e8:
                    0a:ac:c6:4f:1f:b7:40:f0:b9:dc:c6:9c:ff:62:1f:
                    1a:6c:14:b8:56:d4:b8:0b:dd:29:f5:98:d5:08:fd:
                    c1:16:9c:e1:a3:e6:e8:1d:75:f8:ff:5c:b2:6a:91:
                    2c:a9:36:39:cf:77:79:f4:ac:77:64:1d:8b:bb:16:
                    14:28:ad:22:e9:47:0e:71:eb:95:90:98:af:96:bc:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.160.0/20
                  177.185.192.0/20
                  187.1.128.0/20
                  189.38.80.0/20
                  191.6.192.0/19
                IPv6:
                  2804:10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28299

    Signature Algorithm: sha256WithRSAEncryption
         20:51:53:77:91:bf:83:b3:94:f3:4f:52:7b:28:c7:3b:31:d9:
         aa:d9:ee:b3:d3:13:f4:5d:ad:92:33:a1:c8:30:8d:d0:83:36:
         82:7c:85:cb:cf:af:55:1b:90:f0:b8:3a:5b:b6:01:21:c5:7c:
         2d:c3:2d:c2:a8:11:88:aa:45:59:e5:bc:6a:1a:1b:66:21:26:
         b4:66:ff:9e:3d:17:a7:fb:6c:67:a3:30:bd:35:95:a7:ae:df:
         28:7b:c2:c6:5e:ca:41:56:83:b3:3c:a0:83:2c:89:7b:73:fa:
         f8:f7:6b:1e:ba:8a:d3:72:1f:3b:ea:d3:8b:62:f6:58:21:c8:
         56:e1:26:fa:b3:1c:d0:15:88:44:b0:e6:a5:61:a4:c6:b3:c2:
         ac:00:b0:f7:8d:6f:80:b3:e9:f6:29:36:1c:45:da:7f:27:e7:
         78:31:71:ac:3c:18:5c:9c:87:cd:23:8c:23:f7:7a:e7:f0:79:
         d9:18:b6:4c:10:05:2a:d1:e9:3e:1e:ee:3d:a7:15:ba:3e:c5:
         23:a4:72:23:f2:3a:93:33:ea:c6:5f:7b:61:9a:ac:e4:b6:ce:
         f5:02:4f:9b:d8:c2:31:37:33:9c:f2:0b:53:0f:1c:f4:aa:61:
         db:16:58:41:59:a4:71:74:9f:65:3d:7f:13:a7:5a:9d:e3:25:
         ce:03:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:12:37 2026 by rpki-client