Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer
File:                     62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer (raw, json)
Hash identifier:          V84UTF5w0lYVTJK9lO0zi8i05BpOzC77sGm0Cep11R8=
Subject key identifier:   62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       221A11ECB646238BA9553EFDD429D7AB8687162F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Oct 2026 11:57:17 +0000
Certificate not after:    Tue 05 Oct 2027 12:02:17 +0000
Subordinate resources:    AS: 265229
                          IP: 168.0.52.0/22
                          IP: 170.247.208.0/22
                          IP: 2804:2c98::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Oct 2026 22:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1a:11:ec:b6:46:23:8b:a9:55:3e:fd:d4:29:d7:ab:86:87:16:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  6 11:57:17 2026 GMT
            Not After : Oct  5 12:02:17 2027 GMT
        Subject: CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:b4:94:4b:b8:35:91:10:af:40:b2:e2:42:
                    5b:19:4c:ae:60:60:8e:9e:e1:14:0f:96:7f:80:2b:
                    22:d3:96:9a:58:a8:66:85:bd:0c:ed:16:11:c4:99:
                    dd:15:d6:8b:cc:55:9b:53:d1:0d:55:54:13:ae:61:
                    6b:d1:98:4e:27:8d:22:d1:96:7b:08:32:81:5f:3b:
                    a7:33:4a:89:4c:ed:be:a1:e9:72:39:76:56:3d:81:
                    cc:84:ff:32:87:59:2a:8b:14:2a:d1:0f:70:7e:cd:
                    4d:76:3a:a3:f1:d2:aa:35:2f:d6:7c:c0:7d:83:3c:
                    34:6e:5b:5b:98:7b:fb:c8:f4:bd:7a:0c:96:18:b2:
                    f8:6a:1e:16:f9:b5:2e:44:7f:29:53:f5:a3:da:43:
                    5a:eb:92:76:0f:fa:5a:ed:9e:f9:37:5f:e2:a9:7d:
                    70:cf:07:49:42:bc:ab:bb:07:0f:bc:c8:2f:38:b5:
                    02:6c:46:3a:c6:55:28:81:e8:fd:8c:36:5c:6b:e9:
                    69:d9:0f:60:ab:51:fe:e7:f1:25:6c:f2:21:1e:23:
                    3d:8b:f7:6d:0c:66:42:91:f0:0f:5b:9c:10:ed:60:
                    6b:aa:29:48:e8:97:af:e0:99:e4:02:d9:c3:0c:19:
                    94:e2:73:be:d9:e7:27:b2:d0:1b:ab:67:4f:69:04:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.52.0/22
                  170.247.208.0/22
                IPv6:
                  2804:2c98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265229

    Signature Algorithm: sha256WithRSAEncryption
         da:a2:59:b8:39:9c:53:9e:e8:cb:ac:67:bd:7c:c6:a5:21:ed:
         2f:a8:eb:63:6d:d7:17:28:04:a1:8c:32:29:97:ed:0f:75:9d:
         70:bb:f4:77:a1:c6:93:7e:a3:eb:c9:5c:f6:16:c4:a8:08:98:
         c7:57:14:c4:80:06:ff:75:b4:12:ea:69:47:8f:2a:5d:b2:04:
         30:51:cb:f9:cb:84:23:28:4e:c6:aa:f9:09:f4:54:a8:17:85:
         22:6b:12:e8:23:98:0a:40:cc:73:26:4a:80:0b:96:c1:1b:35:
         b1:26:8c:c3:1a:45:4e:a1:90:22:27:e8:1b:94:17:a8:54:57:
         56:cb:86:e8:1d:52:31:23:c4:0f:e3:c6:93:f2:10:42:df:01:
         a2:68:d1:09:6b:5b:a5:5d:61:d8:04:47:e4:7c:91:12:f9:f9:
         d3:b5:e4:1e:b1:62:86:6e:53:d3:74:05:a6:89:19:1a:ae:68:
         2a:62:3a:0c:9d:16:0a:d7:59:68:fa:e5:c4:9b:b7:53:cf:e0:
         7d:19:f5:8d:81:55:60:6f:d5:a2:0e:ff:33:46:e2:f3:ec:80:
         75:c7:5d:b5:d2:ba:41:9c:d0:9c:aa:fb:46:fb:83:a7:69:b5:
         cb:97:4f:6b:f2:ea:da:cf:99:f6:8d:ea:8d:a3:ee:8d:44:f1:
         c9:48:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:47:56 2026 by rpki-client