Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer
File:                     08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer (raw, json)
Hash identifier:          GnQgHttsbhJwOtuFD56unkILLgvwQwWbwEkz81J8QH8=
Subject key identifier:   08:DD:DD:3D:95:49:20:46:DE:5D:DF:0A:80:DF:A4:07:6B:24:B1:9A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C70AF9B2DD10DB4FDF0EFD284E87FE1308FC413
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Sep 2025 23:25:12 +0000
Certificate not after:    Fri 18 Sep 2026 23:30:12 +0000
Subordinate resources:    AS: 270699
                          IP: 200.187.108.0/22
                          IP: 2804:6ffc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:70:af:9b:2d:d1:0d:b4:fd:f0:ef:d2:84:e8:7f:e1:30:8f:c4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 19 23:25:12 2025 GMT
            Not After : Sep 18 23:30:12 2026 GMT
        Subject: CN=08DDDD3D95492046DE5DDF0A80DFA4076B24B19A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:71:41:9d:53:4a:35:5f:f1:e3:f6:2d:58:b7:
                    b0:3f:0c:66:eb:24:20:5a:9d:28:e1:1f:88:84:31:
                    44:41:54:3e:84:29:b8:e9:41:73:3c:be:84:8e:a3:
                    f9:a5:d5:38:b6:da:09:95:d3:68:f6:69:92:63:33:
                    bd:a0:b4:a6:5d:d6:5a:19:ce:ba:24:e8:c5:44:68:
                    08:94:cc:64:54:da:90:fe:da:4b:54:f8:a2:f5:5e:
                    bb:72:38:3e:51:9c:33:95:d4:2c:9e:74:1a:b6:28:
                    56:2d:11:32:8e:e2:17:46:66:07:32:f0:be:4f:df:
                    d7:fd:de:9f:18:17:01:84:15:26:61:ea:12:7b:98:
                    04:80:61:83:c7:0b:bd:d6:f7:53:79:97:ad:79:0e:
                    d8:6a:ee:d2:3b:0a:e5:aa:d6:4c:7a:cb:36:54:45:
                    e9:5c:a7:35:12:71:90:41:00:45:9f:b7:ec:f8:59:
                    0d:a6:b1:ee:d6:34:69:20:7a:76:d6:84:9e:56:d3:
                    8e:d3:b9:6b:22:5b:c5:2d:7a:97:e2:ce:76:d5:92:
                    03:bd:03:7d:27:8b:2a:d6:1c:14:86:9e:1e:1b:7a:
                    f5:13:db:a7:a8:c4:50:5d:7a:13:82:f6:4d:64:fe:
                    4a:35:b4:e0:ec:6e:b5:c8:29:51:f9:22:62:c3:9e:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:DD:DD:3D:95:49:20:46:DE:5D:DF:0A:80:DF:A4:07:6B:24:B1:9A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.108.0/22
                IPv6:
                  2804:6ffc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270699

    Signature Algorithm: sha256WithRSAEncryption
         6b:2f:4d:f3:9b:62:c9:b8:1e:05:94:4b:ed:81:67:ea:10:b9:
         48:e8:5c:24:72:a6:0a:e9:fa:09:0d:a2:ee:e5:77:6b:a5:fb:
         15:24:b6:c0:ff:bb:3f:3c:5a:45:94:08:dd:93:23:b2:53:6a:
         48:6d:1c:9d:c8:30:0f:fa:1e:45:f1:70:99:b4:1a:20:53:0c:
         fa:21:fd:1a:67:a8:88:eb:3d:4c:f4:2c:64:3a:af:85:27:56:
         45:82:61:f0:09:f1:bf:a4:4c:ba:76:43:05:7b:2b:0b:1e:61:
         93:87:8d:18:cc:70:f9:ee:38:a0:c0:e5:17:70:79:ac:1b:23:
         b1:1d:74:52:06:a2:78:dd:10:60:63:ec:70:ea:22:41:49:95:
         6d:48:c1:66:75:da:13:60:ca:03:c6:6b:c0:71:3b:d8:1b:68:
         f6:35:95:69:a3:0f:92:b7:ec:b0:3b:ce:03:d7:d8:6a:59:63:
         1a:4b:ca:bc:3f:e3:f5:52:d5:18:f2:ae:9e:a1:24:e3:e5:a3:
         d3:7d:58:88:13:00:9f:df:85:02:f4:e5:b4:6c:20:c8:a6:9f:
         fe:94:7f:ac:20:a3:98:cb:6f:a1:3f:e0:59:86:c5:d7:5d:b2:
         3b:41:7c:47:0d:90:a0:21:dc:0b:18:11:93:a3:11:ca:de:4e:
         5a:0f:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:07:05 2025 by rpki-client