Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8898A858F32A18B4216D9DC482B230666EAD0A61.cer
File:                     8898A858F32A18B4216D9DC482B230666EAD0A61.cer (raw, json)
Hash identifier:          nX1Ltyog6wZg9nIMtuBMLLFWvMsBZ87CtpQ+6fjBfao=
Subject key identifier:   88:98:A8:58:F3:2A:18:B4:21:6D:9D:C4:82:B2:30:66:6E:AD:0A:61
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5081B6020B7A9AD4EA991DB5B4C65D969D67F2A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/8898A858F32A18B4216D9DC482B230666EAD0A61.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Mar 2026 17:49:12 +0000
Certificate not after:    Thu 18 Mar 2027 17:54:12 +0000
Subordinate resources:    AS: 263419
                          IP: 177.185.152.0/21
                          IP: 2804:15f0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:81:b6:02:0b:7a:9a:d4:ea:99:1d:b5:b4:c6:5d:96:9d:67:f2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 19 17:49:12 2026 GMT
            Not After : Mar 18 17:54:12 2027 GMT
        Subject: CN=8898A858F32A18B4216D9DC482B230666EAD0A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:a0:f4:f8:ba:19:f2:d5:dd:30:1b:ee:89:
                    cd:ce:65:7c:64:26:bd:ba:2e:ac:b5:49:9b:11:bc:
                    65:3c:56:e9:7c:50:4f:57:07:a4:59:ae:cd:6f:c1:
                    c9:3f:4e:41:2c:27:8c:9a:53:9f:aa:f2:ef:5b:d2:
                    20:99:70:93:a5:f9:fc:f9:d1:06:d5:c3:9f:f1:92:
                    da:a9:81:0f:15:bb:43:d5:f1:33:88:bc:36:f5:60:
                    d0:41:bc:ad:bd:02:b7:4b:c8:b9:2c:43:0e:4c:9c:
                    50:ac:e7:3a:e1:ba:98:8f:40:74:0f:95:48:7b:62:
                    e6:a6:b8:1c:c6:a7:a1:15:7d:52:1a:20:01:ea:70:
                    48:6d:19:9e:45:75:59:e9:7c:09:dc:a0:93:bd:39:
                    e2:1a:10:f1:e6:98:a2:d6:04:3f:38:86:0c:60:62:
                    8b:88:9a:f1:69:8b:fc:4e:8d:81:96:f4:f2:df:30:
                    fd:bd:fd:76:5b:0f:39:98:ab:c3:b6:14:1f:a1:2d:
                    9c:b6:c3:78:4e:85:7d:0e:a6:70:8b:1d:4e:75:63:
                    fc:88:6a:97:36:dd:a1:d9:60:82:e2:01:c4:89:53:
                    55:4a:fc:0d:0d:e0:9a:c9:b1:02:bc:75:12:26:3b:
                    3c:7d:09:d3:09:98:6e:0a:f9:ba:e9:b0:36:9a:99:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:98:A8:58:F3:2A:18:B4:21:6D:9D:C4:82:B2:30:66:6E:AD:0A:61
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/8898A858F32A18B4216D9DC482B230666EAD0A61.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.152.0/21
                IPv6:
                  2804:15f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263419

    Signature Algorithm: sha256WithRSAEncryption
         40:2c:eb:14:2b:21:15:f2:56:1e:63:cc:25:d6:c1:ae:e9:36:
         dc:0c:b1:f1:43:2b:02:49:15:ce:fb:b7:f5:b5:b6:02:68:f7:
         d9:6b:89:38:77:e2:e0:e5:0a:4f:c4:03:48:3b:03:34:b5:02:
         ad:65:b2:fa:d3:6a:86:41:75:ba:24:77:6d:4c:e3:e7:fa:11:
         a1:37:7b:e5:9b:3b:53:31:4f:ef:e3:6e:c6:3e:33:f1:f8:42:
         c6:18:d1:77:5a:98:5b:2f:8b:d9:f8:1a:8f:1d:c5:2b:27:00:
         08:4f:45:69:16:7c:c1:7d:ac:67:fa:3a:ab:ba:e0:5f:66:0a:
         75:44:04:2d:85:a4:cb:c9:63:98:9d:93:42:a9:e8:6f:22:2d:
         c1:68:dd:4d:dc:cc:fd:ce:26:19:eb:d3:7d:4f:26:96:07:d8:
         88:dd:7b:c6:0b:38:48:d1:d2:d0:98:5d:e0:41:59:04:22:84:
         75:42:ca:78:03:bc:2e:70:76:97:3c:e1:cd:9f:a7:b2:07:b8:
         08:bc:11:db:32:7c:f7:9c:07:25:f9:6d:db:cf:70:13:ff:3a:
         e0:e1:6e:3a:9a:68:d9:d4:0f:57:76:02:ec:44:de:c4:20:91:
         b9:78:45:03:ef:13:c1:3a:e8:54:f6:26:4e:4c:83:4c:b4:f6:
         f9:6f:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:44 2026 by rpki-client