Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
File:                     916B2689E54D248C6020BC30FDA122F25B14FE87.cer (raw, json)
Hash identifier:          SjmwrZlvtd3nf076pt/wNOm4N+YtU17OoTM65e7CV2U=
Subject key identifier:   91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D1C9B868F629D41C894CEF6519EAB7DB37B05FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 10 Aug 2025 20:07:15 +0000
Certificate not after:    Sun 09 Aug 2026 20:12:15 +0000
Subordinate resources:    AS: 264211
                          IP: 138.99.164.0/22
                          IP: 2804:2444::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1c:9b:86:8f:62:9d:41:c8:94:ce:f6:51:9e:ab:7d:b3:7b:05:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 10 20:07:15 2025 GMT
            Not After : Aug  9 20:12:15 2026 GMT
        Subject: CN=916B2689E54D248C6020BC30FDA122F25B14FE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:dd:20:a6:17:fa:e9:56:90:c5:e5:7a:1e:
                    e5:dd:dd:a0:6f:5b:1f:1c:87:df:30:5e:1d:92:dd:
                    2c:a8:12:78:8d:89:f2:7d:bb:a9:7b:36:7c:21:eb:
                    83:92:44:39:4f:10:6e:f1:03:3b:45:a1:58:26:73:
                    24:9d:e9:52:4b:0f:92:fc:82:9f:2d:41:8c:7e:33:
                    35:ea:b2:a6:d7:68:5e:57:32:f1:59:9e:57:5f:da:
                    21:62:40:82:98:64:c4:97:e3:71:cb:a1:e6:15:ab:
                    70:e0:88:09:fb:ff:dc:53:ac:83:8f:c7:f1:a1:43:
                    ce:de:27:a2:60:c5:a5:bb:57:1c:82:e2:bb:30:91:
                    2c:ed:37:c1:09:c9:01:93:46:44:4c:cb:2c:8c:aa:
                    90:04:81:24:cc:39:cd:4d:6e:72:ab:29:f8:f1:29:
                    37:a1:3c:12:35:ce:09:2f:c5:2b:d4:d5:fa:24:f0:
                    ad:bf:85:bc:5f:e8:d5:2d:02:bd:65:72:eb:41:db:
                    6b:14:ec:43:81:57:f9:b3:b0:33:0e:7c:aa:0c:7a:
                    60:e3:9c:78:5a:0c:63:0a:0f:7f:b8:41:08:17:d7:
                    af:13:01:7a:0d:0a:b5:61:6e:40:bb:bb:47:92:ab:
                    b3:b1:ec:5d:c1:40:d9:37:95:df:fe:ce:83:8f:2e:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.164.0/22
                IPv6:
                  2804:2444::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264211

    Signature Algorithm: sha256WithRSAEncryption
         2f:4e:f2:40:41:71:e9:e9:ec:70:b4:d8:91:b9:a0:21:6a:1a:
         db:61:26:a9:08:3a:ae:38:63:f1:e6:b0:59:44:de:0e:41:fb:
         5c:4c:54:dc:69:9f:40:7d:80:bd:ba:20:e1:c3:70:18:c9:c5:
         fc:80:69:63:39:ca:94:a9:91:d1:05:ce:7b:db:d0:e7:e6:23:
         e0:23:c9:3e:b7:88:29:7f:44:25:43:3e:a1:5f:47:a5:f6:91:
         cb:5b:ab:80:fa:8d:9a:ae:49:5b:c9:49:f7:a7:93:db:e3:99:
         26:11:8e:d5:69:6e:69:b5:a8:82:41:6b:7f:6c:16:8c:77:f4:
         4b:3f:05:ba:76:c5:9c:e8:58:00:24:ee:42:19:82:0e:ce:07:
         b9:d4:2b:6d:86:6b:80:f4:c4:9e:26:95:ea:d9:4c:4c:66:a3:
         5d:97:87:32:1e:dc:1f:2d:00:ce:d8:a1:7c:43:42:2b:66:d7:
         9f:4a:41:b9:d0:ed:a1:09:29:d6:8d:0f:21:d3:40:04:07:21:
         a7:54:1b:2d:c5:50:c6:09:dd:37:62:78:29:ae:09:d7:fa:a0:
         77:71:fd:53:22:dc:51:17:05:3b:1f:6a:e6:5f:0a:d5:fa:f8:
         26:31:a0:28:ff:60:19:b1:89:24:45:58:9c:f0:95:87:af:0c:
         da:be:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:05:04 2025 by rpki-client