Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/03D890B77B1AF14678B0086207AFAF22FA681661.cer
File:                     03D890B77B1AF14678B0086207AFAF22FA681661.cer (raw, json)
Hash identifier:          n4fIcRWZOSdpCtOReh6XNAtWQATgSk/+LxDa4MLchUI=
Subject key identifier:   03:D8:90:B7:7B:1A:F1:46:78:B0:08:62:07:AF:AF:22:FA:68:16:61
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A6CE1416AC15649FF477110A64CE27DC2F4823D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/03D890B77B1AF14678B0086207AFAF22FA681661.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 Sep 2025 18:26:37 +0000
Certificate not after:    Sun 27 Sep 2026 18:31:37 +0000
Subordinate resources:    AS: 268713
                          IP: 45.170.24.0/22
                          IP: 2804:599c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6c:e1:41:6a:c1:56:49:ff:47:71:10:a6:4c:e2:7d:c2:f4:82:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 28 18:26:37 2025 GMT
            Not After : Sep 27 18:31:37 2026 GMT
        Subject: CN=03D890B77B1AF14678B0086207AFAF22FA681661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5a:8b:f1:51:b4:9f:21:90:54:bc:52:ab:af:
                    d9:11:f1:6a:24:42:79:1b:0c:d4:52:97:da:8d:0f:
                    6c:4a:11:d4:e4:b2:42:4b:64:23:24:43:6f:c6:a3:
                    81:80:7b:97:84:a2:1c:5d:e4:6c:d1:2d:1c:af:fb:
                    95:a5:e8:78:0d:f8:57:4f:9a:c6:9e:aa:b5:76:35:
                    1b:3b:e8:4a:c2:b0:c3:4d:15:c8:c4:79:43:38:8b:
                    bc:52:f6:50:72:db:fe:14:50:7a:52:25:31:54:df:
                    ef:ac:4c:a4:0c:6e:5e:ae:ea:d3:75:fc:c6:93:63:
                    ff:79:f0:84:02:66:ca:0d:38:25:95:ad:99:88:65:
                    8c:d8:4c:5c:8a:0e:69:6d:dc:a9:6f:44:7e:69:7f:
                    f4:5d:01:8e:fc:2d:42:a9:5b:1d:76:74:f6:e8:74:
                    64:14:f6:ce:9d:81:cb:87:09:57:6f:40:ed:04:fb:
                    b9:97:92:6c:4b:a3:9c:f4:d6:c2:18:9c:31:dd:39:
                    97:8f:b4:61:24:03:b6:ab:04:f2:d2:04:f7:cd:93:
                    e1:d6:e9:b1:93:e8:88:ef:35:58:65:3a:fa:e5:25:
                    c7:73:3f:8b:c7:23:06:6c:1b:19:3a:d9:11:a1:91:
                    19:a4:30:86:3f:d2:8d:77:38:91:ba:d4:07:0f:34:
                    3f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:D8:90:B7:7B:1A:F1:46:78:B0:08:62:07:AF:AF:22:FA:68:16:61
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/03D890B77B1AF14678B0086207AFAF22FA681661.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.24.0/22
                IPv6:
                  2804:599c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268713

    Signature Algorithm: sha256WithRSAEncryption
         d5:32:f1:20:34:b2:8e:75:56:99:09:83:2b:df:51:09:bb:9f:
         28:0b:a6:7c:46:84:13:4c:7c:46:31:ed:de:29:9f:86:05:18:
         ee:7f:d5:95:bc:8a:42:f7:0c:d7:c6:4c:96:23:67:e8:09:f9:
         3d:a5:6a:f7:5d:98:1d:6e:6a:c3:35:f9:c2:89:b0:92:6a:d9:
         66:a0:59:0a:44:b0:c1:bb:94:0f:d4:d9:ee:04:9f:1a:4b:a9:
         93:d0:61:5d:37:61:12:a0:09:4c:75:70:a0:b1:93:d7:27:f2:
         3e:b3:46:a0:89:b6:f8:03:a1:c1:90:67:2c:1f:6f:9c:ec:9e:
         b5:e5:7b:80:f1:14:33:f6:99:0f:95:b1:59:02:2b:ab:44:71:
         3b:46:da:df:db:70:07:15:2e:e0:f0:72:ed:c2:28:ce:04:cc:
         7b:d5:51:79:65:c1:4c:d6:57:28:e9:e6:d8:f1:06:05:d3:f7:
         2e:2e:e7:99:d6:81:e8:68:92:f8:a4:b9:82:ac:96:95:86:2c:
         c4:52:e3:b6:20:08:c3:77:26:7c:06:b2:f9:17:2a:a5:af:6d:
         06:c4:ad:2d:a2:67:6f:30:c6:87:a3:96:ae:8d:23:33:f8:d7:
         b1:2c:7e:7f:6e:8d:f9:50:a3:04:e9:e2:64:8c:dd:b8:9d:76:
         c5:39:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:50:42 2025 by rpki-client