Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer
File:                     306F285229CADF2A417F8D22C75886C83340CA85.cer (raw, json)
Hash identifier:          83CV/Dx/pfbuMLu4aI33Lp2jC7r1OfE16to3bGyp2kI=
Subject key identifier:   30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       099562C5FB1AED8C3FF5FEB7FEB0E9E15D2785C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Sep 2025 13:17:11 +0000
Certificate not after:    Thu 24 Sep 2026 13:22:11 +0000
Subordinate resources:    AS: 271624
                          IP: 177.73.128.0/22
                          IP: 2804:7e70::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:95:62:c5:fb:1a:ed:8c:3f:f5:fe:b7:fe:b0:e9:e1:5d:27:85:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 25 13:17:11 2025 GMT
            Not After : Sep 24 13:22:11 2026 GMT
        Subject: CN=306F285229CADF2A417F8D22C75886C83340CA85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:0f:2b:02:f6:40:ae:c4:ea:3c:5e:6b:2a:
                    e0:65:d3:42:99:76:e6:2d:2e:fe:9c:24:cd:dc:ef:
                    3f:37:7e:7a:e6:5f:be:27:8c:88:f2:69:9e:25:2a:
                    66:89:ae:32:ac:17:ec:c8:ff:fe:01:e0:01:57:6b:
                    22:05:28:c9:e0:2b:2c:8e:8a:9f:44:06:c3:89:33:
                    7e:a8:38:40:1e:a9:19:78:99:48:b9:f8:6e:df:91:
                    26:1e:d5:f9:d2:a9:61:b7:30:e8:35:16:b2:52:cd:
                    9d:23:22:69:83:ab:29:35:fe:be:ee:69:ea:54:9e:
                    56:2f:64:77:48:16:9f:de:4d:58:f8:96:5f:c6:d5:
                    2d:a1:33:d5:da:17:2d:02:d4:d1:dc:34:84:dc:f4:
                    6d:e7:6c:26:5f:aa:d3:0a:2e:88:7f:0d:40:df:6e:
                    b2:f9:80:7f:86:91:82:bf:94:fd:4a:1b:42:9b:55:
                    9e:16:4a:cf:48:00:fc:fa:af:ae:0d:60:52:87:4d:
                    99:5f:f5:d6:74:89:d2:2f:1c:d9:87:3e:e4:32:07:
                    f9:e2:b4:ff:fb:4b:d4:98:48:c3:07:03:f2:09:af:
                    2d:d6:52:b0:b3:89:0a:ac:50:7a:8a:f6:a0:b4:59:
                    d8:da:93:40:b7:e0:41:9c:54:11:2b:9e:a6:51:9f:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.128.0/22
                IPv6:
                  2804:7e70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271624

    Signature Algorithm: sha256WithRSAEncryption
         24:36:80:0f:5c:95:1b:a5:9c:70:70:ff:16:d3:73:99:49:ee:
         d2:20:39:85:99:a0:37:0a:0f:90:29:46:ac:c0:a1:ee:86:e6:
         ab:e4:a1:a9:0f:52:30:03:c6:6b:1f:8f:92:0f:46:09:91:d5:
         15:45:ba:20:3d:ec:b1:5b:b4:f0:8c:3a:53:4a:df:d2:e7:da:
         42:5f:af:de:ac:1c:d2:c4:67:51:8f:24:54:d5:e0:95:f0:f8:
         aa:47:3a:f5:99:1d:57:09:63:86:35:cd:ca:fd:1e:e5:62:48:
         fc:96:dc:aa:86:b5:95:49:5a:90:f7:ad:d8:e8:20:26:be:52:
         37:30:e4:74:17:ef:d2:48:af:df:27:9c:ab:d3:5d:33:89:fa:
         be:cd:e2:a5:bd:e1:0c:3c:fb:78:ca:54:fe:f6:a6:e2:4d:f9:
         2c:63:4b:2b:6b:b7:06:33:c4:97:e1:59:76:a8:7d:c8:3f:43:
         b7:c9:93:97:f6:a0:fb:a1:3b:ef:35:97:2d:ff:45:67:04:c8:
         0a:70:e9:86:8d:69:13:0d:6f:f0:52:6f:84:c1:1b:2c:3f:05:
         b0:4e:f0:e8:32:6a:61:1a:55:ba:a9:20:a2:83:8e:80:7b:37:
         07:5d:5a:35:60:08:e7:45:28:e7:9e:d3:28:c7:a2:a2:9a:0b:
         85:4e:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:10:55 2025 by rpki-client