Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/702838DD0B14B4FF3D09CE89247C34EBD427D264.cer
File:                     702838DD0B14B4FF3D09CE89247C34EBD427D264.cer (raw, json)
Hash identifier:          3dnjZsWBjHJH+zoJOGmAtccuiBskHXYAfzkedfbG5gc=
Subject key identifier:   70:28:38:DD:0B:14:B4:FF:3D:09:CE:89:24:7C:34:EB:D4:27:D2:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B1FA647B42EACD0370F6A57E8621DFAE5B20A18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Oct 2026 22:27:42 +0000
Certificate not after:    Fri 01 Oct 2027 22:32:42 +0000
Subordinate resources:    AS: 273332
                          IP: 45.4.179.0/24
                          IP: 2804:8d10::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 00:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1f:a6:47:b4:2e:ac:d0:37:0f:6a:57:e8:62:1d:fa:e5:b2:0a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  2 22:27:42 2026 GMT
            Not After : Oct  1 22:32:42 2027 GMT
        Subject: CN=702838DD0B14B4FF3D09CE89247C34EBD427D264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ba:58:99:78:f7:69:b5:df:93:69:10:65:5b:
                    0d:fe:99:a9:6f:21:a4:58:51:3f:19:88:06:62:46:
                    8c:98:44:02:d7:be:2e:76:aa:a6:b9:86:98:bd:2e:
                    64:42:21:45:76:dc:65:b8:b4:18:41:14:34:1f:c2:
                    50:c0:aa:7f:57:f9:c8:39:98:e8:4c:a3:2a:a1:10:
                    f4:d0:ec:ca:15:79:d8:92:f7:e6:b4:fe:98:4f:a2:
                    17:98:bf:5c:6b:9d:6c:35:dd:57:ec:32:26:72:05:
                    b5:c4:18:d2:e3:1a:e6:b3:9b:47:69:f0:81:74:4b:
                    99:ad:61:87:0f:d0:41:a2:58:c5:1f:be:e7:42:e5:
                    a1:fd:55:4f:49:4e:1c:ac:6d:0d:7b:0f:f5:28:fd:
                    d1:3a:68:6c:53:24:53:b0:f0:ae:4f:99:ec:6b:0f:
                    52:51:7e:20:1c:a5:eb:fe:d9:f1:61:e9:93:40:77:
                    10:db:3e:e7:d4:b7:0a:fa:02:33:8c:dd:ca:6e:ee:
                    3e:94:16:08:5f:d5:e9:be:3a:a8:f3:92:87:8c:94:
                    5d:94:1d:80:dc:44:12:97:d1:2e:a8:69:87:fb:ba:
                    8d:28:ee:7a:0c:0b:65:9a:59:99:1a:77:67:31:5b:
                    5d:4d:11:34:a5:4a:1f:91:5c:18:b3:c0:2f:9a:d8:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:28:38:DD:0B:14:B4:FF:3D:09:CE:89:24:7C:34:EB:D4:27:D2:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.179.0/24
                IPv6:
                  2804:8d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273332

    Signature Algorithm: sha256WithRSAEncryption
         95:4b:ca:30:32:1b:4d:88:49:b6:56:bb:a3:63:0f:07:08:78:
         a7:9a:00:06:63:14:36:0e:37:ba:37:7c:a3:2d:df:40:a1:66:
         25:2b:4f:06:e0:88:59:c3:cc:41:b5:6d:99:94:98:ce:66:4f:
         ec:c5:86:3d:4a:2d:d3:15:13:4c:f6:01:6b:e2:c4:fd:ba:9e:
         1f:37:5c:7a:7c:09:91:44:58:50:2c:64:ad:36:e2:fc:fe:0a:
         65:82:08:a6:25:3f:c7:82:94:f1:17:9d:cc:b8:79:42:dc:3a:
         ca:65:a0:b5:80:ad:ca:f0:64:7b:74:97:10:50:28:5b:07:ec:
         00:2b:46:6f:ca:06:50:68:db:e3:6d:d2:5b:70:09:dc:3b:89:
         4e:a9:36:67:35:63:e4:29:e5:b3:03:18:99:3f:83:49:c4:77:
         2a:f4:2a:4a:e3:33:fa:44:df:0d:2b:eb:ed:8e:a4:78:58:a2:
         57:92:5f:84:4a:ff:6a:66:da:2a:86:3a:08:77:4a:dc:30:ca:
         78:c4:c3:56:7c:6e:bd:c3:d1:30:47:7e:00:b4:a5:5d:30:c2:
         72:95:fe:89:6a:e5:64:f7:46:75:00:da:77:2e:e1:94:be:9b:
         7e:b6:27:26:08:15:bd:f2:76:b9:77:26:d7:60:54:5e:cc:c3:
         83:cc:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:48:33 2026 by rpki-client