Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.cer
File:                     A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.cer (raw, json)
Hash identifier:          MVmk1l7HhsR5ICRJISkeZDa5PqXdV+82Tcnptk35lCA=
Subject key identifier:   A8:32:2B:46:0E:AB:5F:E9:E7:55:5A:B2:A3:86:7A:74:FA:84:EB:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       15AFC335821C209EEA7560E5FC7661EC5C4E3B1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Jul 2026 19:48:07 +0000
Certificate not after:    Wed 14 Jul 2027 19:53:07 +0000
Subordinate resources:    AS: 61748
                          IP: 45.230.232.0/22
                          IP: 131.100.52.0/22
                          IP: 168.181.192.0/22
                          IP: 170.245.96.0/22
                          IP: 2804:1bc4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:af:c3:35:82:1c:20:9e:ea:75:60:e5:fc:76:61:ec:5c:4e:3b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 15 19:48:07 2026 GMT
            Not After : Jul 14 19:53:07 2027 GMT
        Subject: CN=A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:a0:d1:4a:c9:56:f2:82:ab:e0:d7:d1:e9:
                    41:6b:5c:f6:eb:94:59:0f:0c:b1:d9:5e:45:92:9c:
                    6d:5b:09:cf:dd:3f:2a:72:8a:76:f3:dc:86:e7:1c:
                    88:20:07:38:12:cd:d2:99:df:ae:fe:33:59:06:3c:
                    35:7a:36:e2:bf:43:16:57:84:8e:9b:86:c1:7b:54:
                    06:0d:fb:5f:80:41:b4:cd:67:df:d5:20:fb:0e:60:
                    1e:b2:6d:ae:ad:48:83:d8:9c:c6:bb:7c:22:93:94:
                    30:0e:7e:93:36:7a:13:26:ee:c6:9b:a6:ea:4d:f7:
                    4b:eb:9a:8d:24:07:7d:fe:b0:27:13:ec:20:93:e2:
                    c7:ae:11:cc:75:3b:be:a7:91:be:4e:50:7f:18:2b:
                    e9:fd:19:5e:97:6e:b2:ad:39:a1:74:8e:b5:a5:59:
                    bd:41:6a:ee:9f:48:a8:e6:0a:2e:aa:e0:45:df:bb:
                    f0:bd:90:7e:1b:fe:35:68:30:7e:dd:22:4b:59:fa:
                    34:a1:47:c6:53:df:9e:4b:b0:2d:df:b7:f1:3a:78:
                    7f:9e:38:d7:e6:51:57:bd:15:58:89:bd:f1:1f:dd:
                    79:d3:47:4b:c9:3a:e2:10:d9:53:7e:e5:23:44:68:
                    2e:6a:37:a3:96:b4:85:da:ca:7e:f7:9d:f4:42:40:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:32:2B:46:0E:AB:5F:E9:E7:55:5A:B2:A3:86:7A:74:FA:84:EB:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.232.0/22
                  131.100.52.0/22
                  168.181.192.0/22
                  170.245.96.0/22
                IPv6:
                  2804:1bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61748

    Signature Algorithm: sha256WithRSAEncryption
         02:3d:23:8f:ee:34:09:d2:de:fa:51:c7:5b:02:36:27:e5:b3:
         dd:16:c1:ee:2f:f7:f1:4d:c7:fd:b5:c5:51:9b:da:0b:27:66:
         d1:ff:40:c7:68:f8:b6:9a:c2:cd:ba:c2:48:49:12:87:0a:a5:
         be:6c:c9:a9:ee:9f:65:ab:ba:1f:b6:39:a9:0c:02:4a:dd:37:
         23:14:89:01:66:a9:4a:4c:06:10:db:dc:12:7a:03:59:3f:d4:
         28:c5:2e:73:3f:fe:78:fa:7b:d3:06:a1:87:97:c5:41:18:3c:
         e5:f6:a4:4f:2e:b7:00:79:45:30:ea:ab:53:b0:ff:05:94:02:
         fc:15:91:50:35:92:53:23:88:42:c8:24:38:06:c4:ff:e5:c8:
         b6:87:bc:7b:23:e6:33:8b:f0:4e:5c:c4:9f:63:47:8a:21:d4:
         5b:d2:b8:4d:ba:8c:a3:16:d0:6b:94:2c:72:ee:e3:83:1a:8d:
         61:a9:fe:e7:a7:00:53:a4:d5:c4:28:fd:67:74:46:d6:7f:aa:
         b7:36:9c:c7:36:f1:d0:64:f8:00:7f:7a:80:20:5f:a3:26:78:
         ad:4c:76:8c:41:9f:68:2c:77:3e:5e:a2:38:70:7d:5e:48:2f:
         b2:46:18:eb:ed:f6:b8:f8:73:62:c6:3b:ce:00:df:05:b9:98:
         7d:1a:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:23:05 2026 by rpki-client