Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
File:                     BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer (raw, json)
Hash identifier:          tN9ZJv9LgsCA39CV8S7VwgMzTI782yX5lSN7cBEiZy8=
Subject key identifier:   BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       23824AB4828C852DF63D9138542C2A3E20A4B6D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Mar 2026 22:23:12 +0000
Certificate not after:    Mon 01 Mar 2027 22:28:12 +0000
Subordinate resources:    AS: 262424
                          IP: 177.44.128.0/20
                          IP: 2804:6164::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:82:4a:b4:82:8c:85:2d:f6:3d:91:38:54:2c:2a:3e:20:a4:b6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  2 22:23:12 2026 GMT
            Not After : Mar  1 22:28:12 2027 GMT
        Subject: CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:97:bd:55:9d:c0:8c:02:13:58:7b:d4:53:
                    43:3c:bb:27:bc:a6:60:ff:71:75:47:75:b1:31:67:
                    25:a9:fc:71:0e:9b:ae:dc:5b:72:31:9b:cc:a2:86:
                    ed:9e:6e:3d:31:ba:3e:fb:ef:40:8f:5b:0a:9e:ba:
                    17:9e:d9:75:97:39:d1:25:fd:71:b7:b1:b1:ae:e9:
                    32:49:28:54:bd:57:50:dc:18:df:98:ea:3f:9f:32:
                    7f:4c:11:70:37:f2:7f:a7:76:27:b8:ce:98:77:79:
                    a9:be:d0:89:97:f6:73:5c:35:23:87:95:21:22:8c:
                    b4:5f:cc:86:59:6e:b8:cd:f1:67:f3:28:10:06:d8:
                    e9:3b:39:43:17:ac:a9:95:64:bd:c5:7c:00:9b:54:
                    c5:d9:d0:96:f9:51:7b:e6:b2:15:8f:27:1e:5f:c1:
                    34:fe:c0:08:9e:65:74:10:4f:04:c2:99:93:e0:54:
                    30:c5:a7:b8:64:5a:12:d9:15:a2:29:39:77:af:ed:
                    80:5a:db:14:ea:9f:53:7e:d9:e3:89:16:09:08:1f:
                    40:a9:88:08:fc:39:45:96:09:86:83:01:22:a3:ab:
                    3c:99:a3:34:f7:55:02:d7:2f:d6:4b:c9:3a:56:9b:
                    f3:73:47:28:95:30:66:39:34:e5:1a:b4:09:52:e9:
                    ed:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.128.0/20
                IPv6:
                  2804:6164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262424

    Signature Algorithm: sha256WithRSAEncryption
         ba:38:64:4c:11:d4:52:af:0a:e1:f9:84:bd:1f:58:90:d6:7c:
         3e:e9:e4:07:3c:4d:50:59:84:49:ce:54:0f:14:11:4b:e0:ca:
         3f:07:b9:95:9d:29:8c:22:f7:95:13:c3:89:ea:81:a7:4a:34:
         11:4e:b9:0f:18:21:32:b2:e5:c1:8c:40:34:5b:8a:30:20:1d:
         60:07:d9:af:31:ff:5c:e8:8c:14:eb:1c:5c:7f:28:d5:2a:6c:
         d3:6d:61:0f:76:98:6b:4a:d0:fd:fa:96:4f:b3:70:66:e8:42:
         41:d2:b8:5a:a3:39:d2:33:58:2c:28:41:ae:29:92:6c:41:4d:
         43:57:77:6d:c4:02:89:05:86:3b:cb:a4:85:c4:e9:6e:89:87:
         e1:3b:7f:14:92:d4:65:6d:43:68:08:64:0e:1b:b8:c0:54:b9:
         27:c0:ec:00:81:12:2d:6a:55:fc:78:3d:8a:a5:dd:7b:64:b1:
         42:43:ac:24:39:61:dc:9d:89:b8:d6:76:80:4e:f6:79:86:0e:
         67:da:c8:27:e6:9a:f7:ce:0c:cb:18:7e:63:99:34:e7:56:a0:
         df:17:09:34:df:fa:fe:98:94:10:08:c3:7c:4d:2a:cf:64:bc:
         15:f0:06:bd:ff:85:b5:50:36:ea:4a:a7:e0:3a:54:96:16:cf:
         db:f6:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:30:02 2026 by rpki-client