Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/297EBBF297F0FF42CC6CBA1F3EB8BFAA36F9A64A.cer
File:                     297EBBF297F0FF42CC6CBA1F3EB8BFAA36F9A64A.cer (raw, json)
Hash identifier:          HOtp5JiMAR7ttuMAj6MXP9zsN482A3Umo4L0d3PD3d0=
Subject key identifier:   29:7E:BB:F2:97:F0:FF:42:CC:6C:BA:1F:3E:B8:BF:AA:36:F9:A6:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AA5D2A901ACC8AF223638BCD3DA8AD904A1E97F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9sLv5HMaDMzH1uNLyGS9L2inT1pFPaa42W8EcmzrYvpU/0/297EBBF297F0FF42CC6CBA1F3EB8BFAA36F9A64A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9sLv5HMaDMzH1uNLyGS9L2inT1pFPaa42W8EcmzrYvpU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Jul 2026 19:24:40 +0000
Certificate not after:    Thu 15 Jul 2027 19:29:40 +0000
Subordinate resources:    AS: 270589
                          IP: 187.0.44.0/22
                          IP: 2804:6e54::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a5:d2:a9:01:ac:c8:af:22:36:38:bc:d3:da:8a:d9:04:a1:e9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 16 19:24:40 2026 GMT
            Not After : Jul 15 19:29:40 2027 GMT
        Subject: CN=297EBBF297F0FF42CC6CBA1F3EB8BFAA36F9A64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:a9:6e:2c:a4:d7:cd:f8:9d:55:b2:ed:06:
                    32:37:c4:78:38:f6:04:4c:04:1d:be:e5:fe:5a:af:
                    62:7e:b6:3c:5d:13:69:da:50:4b:16:a8:69:8c:34:
                    f8:f1:10:f5:4d:21:a0:81:67:fb:a0:ec:6c:f0:0f:
                    a8:e8:41:d3:58:2b:4d:59:60:88:9e:52:4d:91:eb:
                    83:40:ff:59:50:70:cd:bf:1e:ad:ec:35:ee:46:9f:
                    56:e6:6a:04:07:d0:a6:53:9a:55:79:85:f1:cb:ed:
                    65:be:a4:7e:2b:0a:f9:59:b7:fe:a4:e1:11:2a:bc:
                    33:67:5c:e5:8e:66:a7:43:ba:cd:68:86:75:54:90:
                    e5:ca:7a:d6:12:21:70:48:6c:c7:c2:d3:a4:1a:e2:
                    71:84:45:d9:bc:f9:38:07:45:31:7e:4e:e1:4a:67:
                    87:33:b2:80:98:10:27:18:e3:20:06:84:2d:80:eb:
                    db:08:8d:ea:01:01:b4:5a:ba:51:33:0f:74:8d:6e:
                    50:fe:a2:f8:da:a2:6a:30:89:66:5f:e7:63:1b:ed:
                    20:6f:f9:dc:3e:44:0e:e3:8e:a1:81:97:c4:ff:20:
                    b3:57:56:f6:82:50:89:7b:fe:9e:17:c8:29:7a:6b:
                    0d:ad:7f:36:94:dc:6a:eb:ef:b1:bf:3b:31:5b:a2:
                    65:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:7E:BB:F2:97:F0:FF:42:CC:6C:BA:1F:3E:B8:BF:AA:36:F9:A6:4A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9sLv5HMaDMzH1uNLyGS9L2inT1pFPaa42W8EcmzrYvpU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9sLv5HMaDMzH1uNLyGS9L2inT1pFPaa42W8EcmzrYvpU/0/297EBBF297F0FF42CC6CBA1F3EB8BFAA36F9A64A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.44.0/22
                IPv6:
                  2804:6e54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270589

    Signature Algorithm: sha256WithRSAEncryption
         9a:c6:e2:a9:34:aa:d0:ea:a5:bc:ad:25:b5:59:84:e3:5c:ef:
         25:62:c4:a7:87:62:08:f1:21:b9:fb:4c:14:13:1d:fe:1a:eb:
         15:a7:b3:b8:bf:68:bc:57:b9:ac:43:82:a5:68:c9:f6:05:be:
         b3:41:0f:e7:5b:f9:e4:64:01:89:5c:58:4e:44:1d:e8:39:75:
         9e:e2:fd:2b:c0:17:e2:aa:10:d9:36:3a:a5:27:6b:47:41:be:
         78:b7:82:89:fd:94:8a:a4:b9:b0:8d:0c:96:3e:2d:89:45:8e:
         dd:95:50:34:cc:2c:af:d2:ca:9a:a7:b6:b5:d3:8e:5e:4c:cf:
         e6:82:a2:54:1a:b9:e9:2e:19:92:fb:57:af:2d:8c:5e:b0:ab:
         fb:60:8f:88:79:fe:c5:23:51:10:ca:1c:a7:57:1d:ae:da:63:
         9d:f7:04:a2:1a:ce:c8:03:24:5d:2e:b5:9f:66:7b:11:fe:ba:
         2a:5c:4a:43:ca:df:88:cf:a8:8d:36:d5:3f:dc:a9:ac:e4:1b:
         d3:81:0b:49:36:f3:84:f4:5f:41:83:93:27:69:06:4f:54:01:
         ff:d1:ad:3b:cb:e7:8b:db:46:25:ba:39:8a:db:12:98:e8:b1:
         5a:9b:64:7f:9f:b9:37:6d:aa:09:c9:2d:9f:4c:be:5f:80:6a:
         4d:f8:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:24 2026 by rpki-client