Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/A9A5DFB43987480BBB355C5728B68951A16DE5BE.cer
File:                     A9A5DFB43987480BBB355C5728B68951A16DE5BE.cer (raw, json)
Hash identifier:          X6yGeFVBj/ysn8I2sfi6n7FtizUOaj/qYaj9clFn3pI=
Subject key identifier:   A9:A5:DF:B4:39:87:48:0B:BB:35:5C:57:28:B6:89:51:A1:6D:E5:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2FBFAE422E522962384772C902A2FB10039A984C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/A9A5DFB43987480BBB355C5728B68951A16DE5BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Sep 2026 14:43:24 +0000
Certificate not after:    Mon 20 Sep 2027 14:48:24 +0000
Subordinate resources:    AS: 266357
                          IP: 170.239.208.0/22
                          IP: 2804:3694::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:bf:ae:42:2e:52:29:62:38:47:72:c9:02:a2:fb:10:03:9a:98:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 21 14:43:24 2026 GMT
            Not After : Sep 20 14:48:24 2027 GMT
        Subject: CN=A9A5DFB43987480BBB355C5728B68951A16DE5BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:3a:d6:bc:95:55:df:48:5d:f0:f1:86:2c:
                    23:8c:64:37:83:87:e0:0c:76:47:df:d5:83:2f:3d:
                    e1:ab:0a:8c:50:e0:b8:29:e4:41:b4:36:98:ce:bf:
                    65:74:ee:69:76:d7:d8:fa:27:41:da:fa:c8:b8:a0:
                    9e:81:49:c9:d0:ee:47:b9:63:9f:29:2a:22:46:56:
                    68:fe:f4:00:66:ef:a8:17:68:5d:fd:ab:6f:90:f0:
                    6e:c7:85:cb:04:ce:d8:a2:d5:f5:4a:55:c3:d7:73:
                    43:33:01:b7:f8:dd:9d:48:5d:87:3f:f3:dc:b6:d4:
                    62:44:72:7b:71:46:e5:e4:9f:e9:80:95:43:9c:c0:
                    b7:29:5f:19:cc:d7:60:4a:5b:ba:77:6f:cc:21:a2:
                    c6:ab:ac:e1:5e:ee:fc:2d:74:1e:0d:c3:ab:e9:f0:
                    7c:f6:b0:41:82:38:cb:7b:d6:1e:54:ef:9c:97:51:
                    8e:80:62:06:56:ae:c2:92:6e:07:d5:ef:89:b9:34:
                    95:81:75:80:6b:47:5a:25:1a:cb:1e:94:7a:cc:a6:
                    c2:f4:53:7d:e2:5a:50:a1:75:d1:ee:b6:31:bf:5c:
                    f4:71:73:66:c9:01:0b:d6:d1:91:4a:ac:8e:e5:06:
                    57:29:ca:91:1a:4a:a4:56:f4:7b:dd:10:a4:38:7c:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:A5:DF:B4:39:87:48:0B:BB:35:5C:57:28:B6:89:51:A1:6D:E5:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/A9A5DFB43987480BBB355C5728B68951A16DE5BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.208.0/22
                IPv6:
                  2804:3694::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266357

    Signature Algorithm: sha256WithRSAEncryption
         53:ca:0e:0d:38:11:ad:3e:4c:45:aa:ed:00:2a:c7:b5:51:8c:
         b2:db:2d:b9:4e:41:09:42:03:7f:48:6e:57:fd:02:89:fb:0f:
         3e:41:89:85:5d:a9:8d:f9:57:22:00:62:ad:e3:5d:d2:ad:4b:
         a9:85:f3:f8:b4:f3:c0:71:cc:37:ed:c4:ee:55:55:cb:c0:77:
         73:2a:c2:ee:22:c4:dc:c8:e2:92:ac:9b:8a:f1:b4:34:2a:58:
         dd:fa:0e:cc:b6:d8:22:0d:60:49:63:4e:fa:13:fc:1e:2c:92:
         2d:08:19:8f:a9:dc:6f:8b:54:47:cb:46:0b:2d:3c:5a:cd:58:
         3d:3a:d5:22:1c:56:55:dd:5f:27:74:58:1d:2a:96:f3:0e:de:
         99:af:51:d8:7d:40:a9:04:a5:7e:6a:02:b3:95:6e:e5:9d:44:
         75:ea:17:0e:40:07:b6:8b:af:48:9b:5d:a7:72:33:a5:5d:89:
         60:09:50:ce:47:14:8c:73:e2:84:56:4a:f3:a3:a1:c2:6f:5f:
         97:02:9b:a5:35:fd:e3:23:04:df:1b:a3:92:99:f3:74:dd:8b:
         f3:c9:02:af:66:d3:9a:50:5a:0e:09:5c:69:d2:2b:dc:94:3b:
         35:2e:49:23:a7:a9:ad:85:3b:b6:a2:73:9d:43:26:e9:58:12:
         ff:4f:08:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:29:44 2026 by rpki-client