Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer
File:                     89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer (raw, json)
Hash identifier:          Ig2OU04kcpTiRvklILl5P+UnoyVtGkvGm9IZkdElfOM=
Subject key identifier:   89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       304F9BFEC0FCF15B3BFA4BF0B475ABF225D6C0E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Sep 2025 17:54:03 +0000
Certificate not after:    Mon 21 Sep 2026 17:59:03 +0000
Subordinate resources:    AS: 52660
                          IP: 177.66.248.0/21
                          IP: 2804:c04::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4f:9b:fe:c0:fc:f1:5b:3b:fa:4b:f0:b4:75:ab:f2:25:d6:c0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 22 17:54:03 2025 GMT
            Not After : Sep 21 17:59:03 2026 GMT
        Subject: CN=89830CB9E3952EBB88DDE1B63707527D62F7AB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:f2:5d:ea:2f:97:f6:ae:f8:1d:5e:d0:f7:
                    16:54:49:b8:f1:8f:7f:5b:e2:fd:03:6e:94:4b:4b:
                    63:f9:4a:e6:3a:41:6a:43:16:7f:77:62:08:d3:91:
                    21:61:59:12:46:20:57:42:d1:90:37:18:02:d9:9f:
                    76:c1:cd:94:de:f2:9b:73:4d:0a:a7:d7:ff:aa:20:
                    3a:49:7b:9a:79:a6:9f:d6:43:89:ea:f7:da:df:d0:
                    99:07:32:d5:32:56:e5:38:97:7c:01:ac:39:5f:2a:
                    61:a6:a7:77:73:dd:dd:1a:3d:d5:44:3e:ad:83:48:
                    9b:bb:cf:ad:d4:63:74:70:20:5c:57:2c:db:80:3a:
                    b9:1e:86:84:95:33:ed:3e:58:3b:a9:bb:41:11:73:
                    e0:91:85:95:d4:f6:97:6d:5f:e8:d1:27:1b:85:9c:
                    fe:3c:d8:81:90:21:47:cd:bb:08:3e:94:c1:83:08:
                    74:ff:3c:56:96:6a:63:34:19:a7:dc:13:c5:96:20:
                    f3:18:5a:a0:78:a6:75:4c:02:c3:82:d4:a0:33:38:
                    4c:c4:95:35:87:e6:24:dc:0b:b8:1a:2c:3b:7f:09:
                    6e:c4:de:d2:51:33:99:3b:0c:af:71:a3:f3:35:75:
                    20:05:09:b6:7b:3f:3d:ac:2a:8b:be:89:af:80:fe:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/21
                IPv6:
                  2804:c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52660

    Signature Algorithm: sha256WithRSAEncryption
         56:6f:f6:16:14:fd:49:f0:fb:35:41:59:25:26:d2:00:55:6d:
         3d:ec:bd:60:7e:02:47:64:0d:54:dd:e0:10:55:41:5e:22:e9:
         b7:23:04:31:b2:2a:ea:43:1c:18:e9:ec:8c:8d:df:5f:82:ac:
         20:fb:46:dd:5d:02:0f:f3:39:0b:f9:91:29:0c:4c:eb:77:72:
         fc:b6:38:ad:7e:38:c1:9d:fc:68:66:46:5a:20:15:f0:8c:58:
         20:6a:3d:9d:98:e2:bb:8f:fd:74:70:d5:b4:d0:6f:00:e7:fe:
         7d:0e:37:5d:fd:10:24:bc:83:64:8e:6f:7a:6c:ac:26:08:20:
         53:7d:93:a5:fd:95:c8:3a:d9:26:30:f2:15:01:73:a3:41:9d:
         0b:5e:a6:43:a3:90:ff:8a:99:40:34:dd:47:17:79:e6:d7:9b:
         02:fe:10:44:ef:38:9d:d5:bf:62:89:f9:b5:b9:23:e6:3d:82:
         fc:31:93:ce:58:7c:5e:fa:be:75:52:60:0d:44:12:50:40:e8:
         72:ef:ff:f6:6d:f3:63:4a:9c:a4:4f:f3:60:97:35:c2:4b:0c:
         2e:05:96:71:07:0d:4a:60:5f:c9:03:20:49:9f:e6:97:0a:d1:
         83:4f:94:ea:24:f7:68:9a:fe:67:0a:ff:04:97:28:6d:19:70:
         71:f7:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:13:57 2025 by rpki-client