Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer
File:                     8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer (raw, json)
Hash identifier:          eDKWiANvIqhwR4hLF0hJ3y5GqWm3l0hTAIsDeQDyI/g=
Subject key identifier:   8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       32DD1B6306C360A37E154918F123F4D0A40DC473
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 Jun 2026 14:12:06 +0000
Certificate not after:    Sun 27 Jun 2027 14:17:06 +0000
Subordinate resources:    AS: 270333
                          IP: 189.113.176.0/22
                          IP: 2804:6a64::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:dd:1b:63:06:c3:60:a3:7e:15:49:18:f1:23:f4:d0:a4:0d:c4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 28 14:12:06 2026 GMT
            Not After : Jun 27 14:17:06 2027 GMT
        Subject: CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:77:9b:31:fe:0c:c7:f1:07:b6:4c:ed:a8:
                    81:64:ee:7b:1c:f2:4d:83:6d:57:43:68:d0:bb:92:
                    5a:33:d8:c7:cd:12:76:0d:81:4a:ca:1d:65:7c:46:
                    27:6b:e9:72:32:ec:7d:92:3a:2d:be:11:dd:24:b5:
                    60:3a:37:85:da:f5:66:b1:bc:8f:06:dd:e9:b8:cf:
                    e8:50:a5:02:6e:e2:bc:d3:79:ac:70:b5:e7:f8:8c:
                    37:ad:5c:ec:eb:2d:55:05:74:ba:27:96:02:e6:6d:
                    37:92:01:b4:40:aa:36:6a:4f:55:3f:2f:4d:86:38:
                    5f:2f:5a:22:fc:e6:b8:0f:ac:ed:47:0c:6a:6c:5f:
                    52:71:e3:ec:b8:cb:92:f7:0f:32:df:c5:a0:a3:a6:
                    0a:88:65:97:00:48:f7:b6:f5:6b:94:be:75:90:ee:
                    30:2e:11:66:e5:8c:00:55:b7:1c:e3:d6:25:4e:34:
                    a8:33:ad:e5:7a:a2:c6:97:c1:62:0f:15:f3:06:d7:
                    18:14:26:b4:b5:77:4e:13:43:8a:b5:81:86:e6:21:
                    f1:a2:9f:da:5f:96:44:eb:22:aa:50:95:cd:53:97:
                    db:b0:4d:dc:c5:78:86:65:14:bc:b2:0c:77:7d:eb:
                    3b:b8:d9:ec:a4:f7:52:9f:2a:cf:de:b1:e8:36:c9:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.176.0/22
                IPv6:
                  2804:6a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270333

    Signature Algorithm: sha256WithRSAEncryption
         c1:a7:54:5b:e8:3d:27:5b:4d:e5:64:d7:de:11:1f:53:3d:57:
         17:1f:cb:92:82:8e:8f:51:d5:2f:3c:c7:f3:a2:9f:6b:31:4d:
         86:d9:3a:a4:eb:e7:d7:12:d1:f5:1a:d8:9b:ec:ab:e8:ed:e8:
         90:b4:18:c4:6e:66:5e:8b:56:8c:c7:4a:92:6c:a3:c6:2d:4c:
         e2:d6:e3:80:e1:de:3a:9b:14:46:cd:87:54:c0:25:41:d7:20:
         96:2c:99:37:56:24:24:18:26:78:92:15:83:82:6c:c6:44:ec:
         fb:ea:c4:e8:b4:64:e3:21:ce:bf:5f:cf:1c:53:d6:b6:af:72:
         5e:a8:ff:79:aa:1a:b5:76:59:f5:4a:09:d7:91:e3:a7:22:5b:
         3f:fd:78:4e:1c:fc:9b:40:6d:cc:1d:5f:ec:04:67:db:b7:e7:
         dd:a3:43:c1:73:4a:dd:40:6a:9c:94:95:ac:84:ad:9f:f7:11:
         03:dc:0c:3e:57:48:44:73:9a:97:a4:60:af:f9:69:4c:3e:f8:
         1b:45:b2:95:60:00:27:5b:d3:e0:e8:15:94:5d:47:59:6f:e3:
         f9:aa:ba:19:fb:31:2b:f6:5f:4b:e4:05:6c:6b:68:2b:f9:32:
         4b:49:d3:7b:f7:8b:9e:81:db:d2:6d:d3:eb:54:68:4a:3f:9c:
         60:7b:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:24:40 2026 by rpki-client