Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer
File:                     928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer (raw, json)
Hash identifier:          gKO+JHk3RVCr5FbjPQL92J1E7vJvZcBqcSh0FEyooHI=
Subject key identifier:   92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       67D9A170B296B41E6BC5C987F3E89056D7BEEC3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Sep 2026 08:21:39 +0000
Certificate not after:    Fri 10 Sep 2027 08:26:39 +0000
Subordinate resources:    AS: 273392
                          IP: 45.168.94.0/24
                          IP: 2804:8df4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 18:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d9:a1:70:b2:96:b4:1e:6b:c5:c9:87:f3:e8:90:56:d7:be:ec:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 11 08:21:39 2026 GMT
            Not After : Sep 10 08:26:39 2027 GMT
        Subject: CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:02:af:0a:f4:71:8d:4c:19:15:57:2f:32:
                    7a:62:53:2b:90:c6:9d:46:65:26:54:99:ff:6b:6e:
                    c9:90:c8:95:27:f4:12:cf:73:f3:0d:fa:28:70:45:
                    db:b3:ab:21:91:ec:5d:bf:1e:eb:c8:7f:e0:3e:a5:
                    6a:dc:2b:6a:b3:4a:58:98:3a:fe:d1:9f:5b:a1:2e:
                    02:64:a8:ef:88:0b:b2:15:ce:1e:d3:1e:18:1e:81:
                    a9:a5:de:b7:71:33:77:b3:0b:fa:8d:f8:15:58:ca:
                    fd:3d:67:3e:18:10:30:7d:52:46:b3:bc:52:05:38:
                    e7:73:3a:f5:a5:1f:06:63:38:d4:2f:e8:04:a4:ce:
                    01:26:19:c9:a1:ca:6e:92:ec:2b:19:93:91:f3:dc:
                    44:4f:bb:19:c7:82:f3:6b:03:0d:f7:c2:e4:0b:5a:
                    0c:5f:5a:1b:b1:9e:f3:78:09:cc:5e:93:34:a9:4b:
                    f4:9a:c0:99:de:93:d1:7d:51:8a:ea:f9:05:4c:26:
                    6d:17:ae:6e:70:c5:f6:e3:a4:23:36:46:35:e6:5c:
                    f9:98:c0:9f:58:20:90:8a:62:17:42:b6:c3:4b:1a:
                    11:65:f0:63:73:c3:b0:ee:94:d8:8c:34:ee:3c:b1:
                    a8:49:0f:72:7a:de:03:18:bd:94:cb:61:c3:33:a7:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.94.0/24
                IPv6:
                  2804:8df4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273392

    Signature Algorithm: sha256WithRSAEncryption
         98:53:0f:95:05:47:5a:1b:a4:be:7b:3c:9e:69:b1:a0:60:94:
         82:5d:8a:d6:8b:f3:3b:7a:bc:e4:0c:19:2b:16:92:ca:6a:ad:
         07:9d:4b:78:56:1e:4e:20:f7:e6:5d:08:f6:08:9c:dd:22:60:
         d7:01:fc:9b:05:b4:63:2a:4f:e3:53:15:7b:8a:d3:b9:b3:2b:
         9f:ce:76:e4:f1:f1:38:78:24:93:fd:6e:d2:57:b0:1b:de:5b:
         c9:b5:2a:71:49:90:50:41:c5:72:18:1f:ff:41:08:89:55:e3:
         aa:08:36:10:e4:c8:c0:28:7d:b7:d6:21:42:c4:11:59:20:b9:
         71:cd:41:35:d3:7d:e7:7d:8b:95:9d:94:92:ea:7c:02:72:3c:
         81:46:ab:90:72:27:c7:4e:02:bf:8b:ed:fd:b9:a8:87:fc:38:
         cf:65:a0:34:59:96:7a:bd:e8:2b:3c:7a:6e:4d:c8:5d:7b:13:
         d0:89:ea:a0:97:c6:a3:17:7c:08:9b:ee:62:c6:b6:f6:e0:1f:
         cf:51:f1:e6:eb:8a:9d:7d:70:1f:d6:06:a6:6e:8a:ad:a1:37:
         db:9b:0a:d5:7a:21:48:f8:0f:8d:88:7b:08:87:0d:8f:d6:0c:
         65:32:80:47:3b:4c:ff:a8:61:60:e4:a7:a4:ec:6e:73:1b:08:
         1f:88:9b:b0
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZ9mhcLKWtB5rxcmH8+iQVte+7DswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA5MTEwODIxMzlaFw0yNzA5MTAwODI2MzlaMDMxMTAvBgNV
BAMTKDkyOEYzRTVGQ0Y3NEIyNDc5ODI5REVGMEIyNThBOEY5MDdFNTAwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0gKvCvRxjUwZFVcvMnpiUyuQ
xp1GZSZUmf9rbsmQyJUn9BLPc/MN+ihwRduzqyGR7F2/HuvIf+A+pWrcK2qzSliY
Ov7Rn1uhLgJkqO+IC7IVzh7THhgegaml3rdxM3ezC/qN+BVYyv09Zz4YEDB9Ukaz
vFIFOOdzOvWlHwZjONQv6ASkzgEmGcmhym6S7CsZk5Hz3ERPuxnHgvNrAw33wuQL
WgxfWhuxnvN4CcxekzSpS/SawJnek9F9UYrq+QVMJm0Xrm5wxfbjpCM2RjXmXPmY
wJ9YIJCKYhdCtsNLGhFl8GNzw7DulNiMNO48sahJD3J63gMYvZTLYcMzpxu1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSjz5fz3SyR5gp
3vCyWKj5B+UAjDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDVZ
V3VOVDFEMnFEU0Q0QThNSnpBYlQ3WXRQaUJoNlkxcmJRUGdBeHRSSFcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g1
WVd1TlQxRDJxRFNENEE4TUp6QWJUN1l0UGlCaDZZMXJiUVBnQXh0UkhXLzAvOTI4
RjNFNUZDRjc0QjI0Nzk4MjlERUYwQjI1OEE4RjkwN0U1MDA4Qy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQALaheMA0EAgACMAcDBQAoBI30MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQr8DANBgkqhkiG9w0BAQsFAAOCAQEAmFMPlQVHWhukvns8
nmmxoGCUgl2K1ovzO3q85AwZKxaSymqtB51LeFYeTiD35l0I9gic3SJg1wH8mwW0
YypP41MVe4rTubMrn8525PHxOHgkk/1u0lewG95bybUqcUmQUEHFchgf/0EIiVXj
qgg2EOTIwCh9t9YhQsQRWSC5cc1BNdN9532LlZ2Ukup8AnI8gUarkHInx04Cv4vt
/bmoh/w4z2WgNFmWer3oKzx6bk3IXXsT0InqoJfGoxd8CJvuYsa29uAfz1Hx5uuK
nX1wH9YGpm6KraE325sK1XohSPgPjYh7CIcNj9YMZTKARztM/6hhYOSnpOxucxsI
H4ibsA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 18:40:43 2026 by rpki-client