Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/DF5544872C443C58D03B8CE6CDC22E4013C5854A.cer
File:                     DF5544872C443C58D03B8CE6CDC22E4013C5854A.cer (raw, json)
Hash identifier:          9oiYOyMF0dV5Vzjc4dOXPL8nKzFFr8laBDPLp1yekx4=
Subject key identifier:   DF:55:44:87:2C:44:3C:58:D0:3B:8C:E6:CD:C2:2E:40:13:C5:85:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       708A0883A943D4B15956935F9E01509038C84292
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5kUtUHD4paSXvAGWVLSad1YKtBFm6HiCawkiCSf3JBoL/0/DF5544872C443C58D03B8CE6CDC22E4013C5854A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5kUtUHD4paSXvAGWVLSad1YKtBFm6HiCawkiCSf3JBoL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 27 Sep 2026 20:28:36 +0000
Certificate not after:    Sun 26 Sep 2027 20:33:36 +0000
Subordinate resources:    AS: 275779
                          IP: 2804:9970::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 02:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8a:08:83:a9:43:d4:b1:59:56:93:5f:9e:01:50:90:38:c8:42:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 27 20:28:36 2026 GMT
            Not After : Sep 26 20:33:36 2027 GMT
        Subject: CN=DF5544872C443C58D03B8CE6CDC22E4013C5854A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:3f:b1:73:18:5f:5e:bc:52:98:ff:02:d6:
                    24:c2:a6:29:8d:0a:bd:bc:e3:5f:2b:d1:ee:b0:59:
                    0c:d8:ad:c4:67:08:ae:80:91:61:bb:a7:23:d5:69:
                    5a:d8:b3:5b:92:b4:4c:58:75:96:84:ab:74:cd:66:
                    e4:12:04:de:ae:54:59:84:ee:d2:4d:2d:93:73:21:
                    a2:65:04:89:22:33:ca:15:28:ec:44:c9:bc:6b:cc:
                    99:50:61:e9:82:b2:52:20:7c:d5:1a:c0:04:21:eb:
                    15:d9:5f:b9:a1:a4:a4:ff:ec:4d:77:e7:c4:64:67:
                    bd:de:77:df:f7:51:d3:55:ec:44:26:39:9c:30:1f:
                    47:27:40:8a:03:d1:48:6c:76:60:13:6f:f0:4c:b0:
                    73:0b:21:b7:83:d6:08:6e:28:20:be:69:a3:77:83:
                    55:4c:4e:3e:18:53:fe:72:9a:d1:85:93:b1:e4:4f:
                    8e:4e:72:e9:0a:3f:f7:60:a9:3b:3c:b8:48:08:6f:
                    d5:ae:b4:f1:86:57:81:c8:05:d6:24:70:bb:33:94:
                    0b:02:63:77:6d:be:0e:46:f9:76:19:cb:85:4f:77:
                    35:07:36:91:61:e5:bb:ce:f8:b2:25:61:9e:26:3b:
                    7a:c3:33:66:d9:0b:7a:11:40:e4:73:b8:85:35:f7:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:55:44:87:2C:44:3C:58:D0:3B:8C:E6:CD:C2:2E:40:13:C5:85:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5kUtUHD4paSXvAGWVLSad1YKtBFm6HiCawkiCSf3JBoL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5kUtUHD4paSXvAGWVLSad1YKtBFm6HiCawkiCSf3JBoL/0/DF5544872C443C58D03B8CE6CDC22E4013C5854A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9970::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  275779

    Signature Algorithm: sha256WithRSAEncryption
         b2:6b:0a:d4:04:8d:9a:6a:c6:ca:6e:ea:ed:5f:8b:36:16:32:
         20:ce:b7:29:a0:85:72:8f:c9:4e:6c:b5:ab:4d:05:a7:43:e3:
         56:85:bb:af:f1:ba:44:f2:9a:f6:0d:ea:4d:83:c7:2f:30:88:
         52:d7:70:b7:c6:d7:12:0e:aa:30:5d:1b:82:fe:e8:83:73:60:
         ae:8c:8b:f1:bd:58:16:8c:e3:eb:34:73:1c:1c:c3:f9:59:bd:
         8c:ce:72:8e:52:a1:13:bc:83:9f:c4:3b:f1:51:1e:ac:65:43:
         68:a8:19:20:98:93:02:db:21:69:22:da:41:fa:c3:06:36:c0:
         38:a2:d0:98:e8:cc:cf:b5:45:d0:6d:99:4b:1b:15:57:a9:18:
         a9:02:5d:db:fd:b7:6f:2c:17:47:cb:1b:3c:bd:6b:a9:d4:cf:
         96:fc:be:d5:c7:fd:3a:bd:58:31:ed:3b:f8:72:58:10:7c:af:
         e0:0c:f7:65:7e:45:b0:ec:32:e8:a0:e4:e1:4a:05:ab:ad:06:
         53:cf:2b:db:ad:db:63:4f:ff:d9:35:c1:59:fd:7e:4f:b6:2d:
         c4:7a:07:8f:0d:3d:2f:69:fa:3e:02:6f:9d:1f:6d:eb:53:f2:
         b1:80:84:2f:72:e1:be:5f:ef:3a:a6:0f:65:a8:54:fd:67:69:
         f4:7a:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 01:05:31 2026 by rpki-client