Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A53FE92903C6526E635E10A7D8B723AD16687836.cer
File:                     A53FE92903C6526E635E10A7D8B723AD16687836.cer (raw, json)
Hash identifier:          51Ufi16BIiAO9MWrUAsx7XetVM4a4t0e5JwJKnpAuj8=
Subject key identifier:   A5:3F:E9:29:03:C6:52:6E:63:5E:10:A7:D8:B7:23:AD:16:68:78:36
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0922B9F79B0F0017D42D1B5197AB018893EB086A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/A53FE92903C6526E635E10A7D8B723AD16687836.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Mar 2026 01:21:17 +0000
Certificate not after:    Tue 23 Mar 2027 01:26:17 +0000
Subordinate resources:    AS: 267366
                          IP: 45.234.132.0/22
                          IP: 2804:4c5c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:22:b9:f7:9b:0f:00:17:d4:2d:1b:51:97:ab:01:88:93:eb:08:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 24 01:21:17 2026 GMT
            Not After : Mar 23 01:26:17 2027 GMT
        Subject: CN=A53FE92903C6526E635E10A7D8B723AD16687836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:3b:0d:5f:27:e1:3a:9a:43:ec:9c:c6:88:
                    a1:90:92:2d:07:58:c1:8a:06:a7:ae:ae:f6:91:6f:
                    f2:bb:8e:27:a2:33:88:17:4a:94:da:12:6e:d9:8b:
                    1a:b0:dd:68:18:1a:f5:50:57:76:9f:83:30:c1:04:
                    35:64:5c:a9:2e:7b:43:22:4d:13:27:59:c7:be:b7:
                    e4:53:4a:17:60:7c:d8:a5:f9:c2:9c:0d:a4:83:40:
                    d6:f9:ba:80:a8:f0:85:55:1e:b1:3f:72:2b:5e:a0:
                    d2:ad:62:37:5a:68:0e:46:ff:95:a3:74:bd:6b:bd:
                    a9:09:fb:64:f5:73:7a:d2:94:1f:b6:01:4e:b4:e8:
                    0d:cb:4d:de:ea:a1:58:b6:f3:7e:c4:a5:eb:0d:84:
                    d4:7d:43:ee:e9:78:ac:6e:e3:7d:f7:bb:a8:38:b9:
                    d8:4f:99:77:80:18:8c:62:29:32:37:dc:8f:eb:d6:
                    e2:93:75:ea:c5:ac:bf:d8:9c:a5:3a:e0:5e:c5:c5:
                    13:3f:49:b5:6d:50:60:c0:26:b3:0d:70:8e:cd:0a:
                    bf:1f:26:aa:e5:ac:2d:8b:f8:59:53:55:1b:3e:90:
                    75:3d:c7:cc:53:0d:02:86:36:2c:90:22:d9:a0:d5:
                    0e:c2:d0:4c:a0:4f:cd:b7:e1:6f:bf:4f:d5:1e:1b:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:3F:E9:29:03:C6:52:6E:63:5E:10:A7:D8:B7:23:AD:16:68:78:36
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/A53FE92903C6526E635E10A7D8B723AD16687836.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.132.0/22
                IPv6:
                  2804:4c5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267366

    Signature Algorithm: sha256WithRSAEncryption
         6f:74:a1:bd:2f:04:ba:c4:51:ef:c8:3e:9a:12:36:22:0a:f7:
         23:53:ff:e3:08:e4:c3:a5:41:6a:06:d1:84:f6:33:f4:0c:3c:
         a1:72:e6:f8:f6:da:5b:4e:f6:1f:ae:5b:f0:89:d0:00:df:0d:
         da:9e:01:de:3e:24:0e:33:08:65:7b:b1:d5:fa:75:06:96:d6:
         4e:24:df:9b:a0:14:77:e1:89:74:5f:d5:d3:32:10:05:9a:85:
         7c:38:74:fb:7b:e7:b1:38:ce:0d:a8:ca:de:34:30:60:64:28:
         0e:b2:9e:fc:5e:77:61:5b:d1:a1:5b:0b:ac:38:0e:0b:23:5a:
         82:55:70:7a:e6:71:8e:7d:e6:32:a6:5e:aa:26:c2:8c:cf:29:
         44:20:38:4e:ef:9a:94:f9:f6:a7:2a:d3:27:fc:ec:f7:5d:00:
         91:0a:1c:a6:89:5b:ee:ad:b8:2d:09:8c:ba:d2:72:84:02:a7:
         95:a5:9d:ef:cd:dd:2f:7a:f4:4b:9e:33:66:21:45:1a:28:50:
         12:a0:66:54:16:09:a8:3b:af:c7:58:a9:16:83:44:ab:07:75:
         c1:2b:f0:7e:02:d6:2a:b6:e6:52:6b:e0:c9:df:d9:c0:7e:81:
         6a:55:9d:a8:e5:79:9c:f4:d0:1e:af:6e:6f:5f:3b:ef:fc:64:
         56:2f:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:34 2026 by rpki-client