Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer
File:                     90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer (raw, json)
Hash identifier:          jHDK1XPv1SLS6W8tIzPiDlfMBAyZevSjxHwpp8MlISo=
Subject key identifier:   90:F2:56:A3:90:CB:1B:26:04:BC:80:BB:DB:AE:6E:82:49:A1:B9:A6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       06E8C3E20EDD41DF07122D80289903A8E2198EE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Mar 2026 18:08:45 +0000
Certificate not after:    Thu 04 Mar 2027 18:13:45 +0000
Subordinate resources:    AS: 271702
                          IP: 190.9.100.0/22
                          IP: 2804:7fac::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e8:c3:e2:0e:dd:41:df:07:12:2d:80:28:99:03:a8:e2:19:8e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:08:45 2026 GMT
            Not After : Mar  4 18:13:45 2027 GMT
        Subject: CN=90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:54:9e:58:a8:9d:61:7f:2d:85:d2:2e:8b:
                    7a:85:a4:5d:ad:b7:60:43:c4:08:eb:98:aa:7e:4e:
                    c9:43:57:40:86:9e:d1:f2:25:4e:22:46:d5:67:5e:
                    a3:6a:7a:2b:c8:71:d8:f8:93:91:03:07:3d:b7:ad:
                    9b:0e:8e:6d:a4:b7:1a:66:fe:65:f7:9e:21:5e:d3:
                    f8:ae:5d:af:9d:cf:a0:82:67:d3:46:ca:50:ab:4b:
                    b3:48:bc:ab:22:71:10:e5:12:62:d8:f1:47:92:83:
                    ea:d2:7d:d4:45:05:29:08:bd:0b:77:21:46:6a:1b:
                    e0:1c:d7:c6:67:ab:68:d2:43:ba:44:5c:3e:d8:88:
                    e7:73:2f:97:ca:aa:d5:15:d3:59:a1:53:70:ed:51:
                    fc:df:d3:a3:5e:6b:1c:b1:61:60:a4:bf:12:dd:89:
                    7e:bf:63:91:9d:bf:d7:4f:10:b1:47:3d:8f:98:a6:
                    a0:d0:ea:5a:cc:c3:b2:bc:51:a6:d9:ba:10:5b:a4:
                    a8:58:94:e4:fe:1b:37:80:22:44:c7:cc:32:86:65:
                    8f:b1:7d:f2:52:5d:51:6e:0d:bb:1b:9c:84:46:63:
                    91:01:10:10:f3:d2:fc:08:29:6a:80:2a:58:2d:f8:
                    32:bf:bb:b3:74:92:5a:5b:01:92:2d:f6:48:ce:6e:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:F2:56:A3:90:CB:1B:26:04:BC:80:BB:DB:AE:6E:82:49:A1:B9:A6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.100.0/22
                IPv6:
                  2804:7fac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271702

    Signature Algorithm: sha256WithRSAEncryption
         d5:99:32:32:9e:b8:4a:06:11:ee:28:68:39:ed:0f:19:ba:e8:
         f0:0b:8a:ff:0d:4d:cd:91:0f:21:9e:d6:d4:a1:05:bf:77:38:
         24:a0:36:fc:79:7a:ee:c3:3e:2d:d0:06:49:0f:9f:4c:d7:c5:
         9c:02:a8:6c:32:ee:67:60:5e:fc:c1:6e:1c:27:0b:26:cd:1c:
         18:70:4a:c1:b4:44:e8:5d:ea:e3:cb:4c:e4:37:ab:63:ac:dd:
         16:8d:eb:8d:b0:1b:77:17:38:da:c0:24:a8:67:a4:79:df:b4:
         20:4c:d7:cb:01:9a:ae:40:37:63:1a:b7:05:32:c4:98:e8:a7:
         6f:b1:02:55:57:19:80:c5:d4:14:d4:41:43:c5:ed:24:d9:e0:
         5c:1f:4f:24:03:9e:6d:c5:e8:ef:3a:36:b8:53:7c:e0:6b:af:
         c9:f1:f7:1b:6a:af:41:55:69:eb:84:e3:6b:28:b4:fd:0d:10:
         5b:07:2e:1b:03:93:a9:86:e3:71:c3:32:e2:d4:70:15:7f:2e:
         2e:77:a8:2b:eb:04:d3:27:6a:bd:3f:ba:12:9e:f7:77:2f:3f:
         53:a6:97:8b:54:ac:8c:08:56:fa:55:ec:12:96:6e:39:6a:e6:
         39:ad:88:29:65:0a:15:1a:43:a0:8c:99:b8:a1:2a:b7:e6:a0:
         c9:f0:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:29:56 2026 by rpki-client