Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer
File:                     8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer (raw, json)
Hash identifier:          wTdv1n+TIiQosrJoMvF5SFFi3uYbFMo9EFGjwG38VpQ=
Subject key identifier:   8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0BDD70FAD99CCB4CC9B61D6381D6ED69163EDBF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Sep 2025 18:13:24 +0000
Certificate not after:    Wed 23 Sep 2026 18:18:24 +0000
Subordinate resources:    AS: 271222
                          IP: 190.109.96.0/22
                          IP: 2804:7820::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:dd:70:fa:d9:9c:cb:4c:c9:b6:1d:63:81:d6:ed:69:16:3e:db:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 24 18:13:24 2025 GMT
            Not After : Sep 23 18:18:24 2026 GMT
        Subject: CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:94:5b:4c:e0:cd:00:af:3f:1a:71:a0:f6:71:
                    c8:9d:05:2e:85:77:d2:31:be:c3:af:60:76:ee:f0:
                    eb:fb:f6:45:2c:62:45:c1:21:6b:e9:b1:a9:6e:51:
                    c8:b8:1a:80:e9:c4:ab:41:a6:40:c6:f4:33:09:52:
                    ef:42:a0:b1:8d:e3:72:b5:17:e3:03:91:cb:82:1f:
                    a8:11:3c:ac:e2:9e:91:ca:3f:a5:ba:99:78:21:8c:
                    6c:ed:5d:aa:17:1a:64:75:5a:64:03:2c:a7:3f:ea:
                    44:bd:ea:5c:7b:7f:8d:1f:14:2c:62:98:ef:e8:42:
                    16:c1:ce:ed:70:54:ff:ec:bb:9c:35:d9:6f:49:ff:
                    60:bf:44:15:b3:00:90:bb:e1:ed:2e:b5:6d:0a:00:
                    fb:30:72:c4:b7:a3:0a:2a:97:67:8a:19:14:75:eb:
                    37:fd:f8:44:12:e4:1f:71:06:8d:f6:93:a9:a2:d8:
                    24:2a:86:80:9b:e6:bf:8b:b0:0a:a1:7f:59:6d:86:
                    58:c0:99:55:21:53:16:bf:56:56:cc:f3:9e:94:f0:
                    e3:8b:aa:26:f3:75:20:f2:47:29:e7:9e:67:c7:b9:
                    d3:d8:20:7c:67:31:50:2c:a8:d9:83:3e:ed:98:c3:
                    73:15:12:e6:8b:b5:af:6b:5b:be:73:a3:f5:d5:27:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.96.0/22
                IPv6:
                  2804:7820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271222

    Signature Algorithm: sha256WithRSAEncryption
         77:ca:ca:ca:6f:41:2c:c3:53:3f:85:23:1c:8d:88:66:aa:ef:
         8e:c1:86:5f:30:3f:ee:a7:3e:ab:4c:40:e8:0e:09:9b:c1:c1:
         8e:45:15:19:1f:11:a7:48:db:8c:6e:79:fb:a0:28:71:c0:57:
         f5:3f:a1:b4:2c:3f:8a:26:c6:b0:1c:be:dd:c1:2a:b5:b3:e7:
         9b:0b:28:46:aa:75:81:5e:69:b2:36:92:2f:2f:e2:58:fb:53:
         19:24:52:3a:19:ca:28:b2:46:b0:4c:fc:f7:e0:2a:1e:bc:66:
         6e:f8:6d:24:b7:9f:55:74:2b:ad:96:32:56:f4:42:70:63:57:
         ad:e6:b8:40:d7:8b:48:20:bb:08:12:89:e4:3d:f4:57:8c:e1:
         1b:8a:a8:3b:da:36:b2:33:2f:cf:32:7b:25:d6:30:62:bd:4a:
         ee:62:59:2a:66:31:c1:56:ca:2a:6c:3c:c5:0c:d8:bf:31:c3:
         29:13:8f:bb:93:22:87:c7:a2:24:fd:da:4b:3d:9e:5b:06:dc:
         4b:9a:be:39:47:fc:2b:db:cb:bc:5e:ec:ea:ac:85:09:92:51:
         b9:6f:02:37:9e:96:8b:e8:e7:22:31:9c:1e:2b:f6:02:4b:ee:
         01:a7:e1:f0:01:86:91:d1:89:c6:21:92:fa:33:f8:28:31:98:
         86:bd:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:02:31 2025 by rpki-client