Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
File:                     9828F8A8915A72753136825A1F46FECBBF95B7E4.cer (raw, json)
Hash identifier:          M+XY6tafO/QgG3pgzk99BHv5ZMIycuKTrvjIecLQmPI=
Subject key identifier:   98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       56F366FE64B7753C9C46259C4C0AFAB8775BC97D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Jun 2025 18:07:07 +0000
Certificate not after:    Wed 17 Jun 2026 18:12:07 +0000
Subordinate resources:    AS: 264398
                          IP: 45.167.128.0/22
                          IP: 45.239.176.0/22
                          IP: 131.161.224.0/22
                          IP: 2804:1dd8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 15:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f3:66:fe:64:b7:75:3c:9c:46:25:9c:4c:0a:fa:b8:77:5b:c9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 18 18:07:07 2025 GMT
            Not After : Jun 17 18:12:07 2026 GMT
        Subject: CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:09:b2:1b:b2:33:68:ad:db:ff:21:00:43:
                    55:13:a4:3d:a1:27:39:59:53:b5:f3:1d:23:5d:86:
                    23:a5:3f:bb:35:45:ac:44:d4:b5:33:cf:b0:90:f7:
                    04:6b:6e:1a:2f:ed:8e:af:1a:5d:3d:23:ff:0f:99:
                    a6:92:9a:86:e9:dd:1a:5b:03:7a:83:0b:12:3a:f5:
                    a6:da:4e:3a:7b:4e:8a:66:84:18:84:11:06:b5:61:
                    e8:02:8d:a0:14:5e:36:11:95:1a:66:f6:6c:5d:17:
                    39:a9:6f:e1:70:ff:03:89:a0:ae:72:cc:6d:47:86:
                    58:c5:49:8c:3b:5f:a3:25:9d:15:65:8f:39:f5:54:
                    1d:93:4e:00:8c:cd:7f:b9:d6:42:c8:f3:63:a4:8d:
                    02:b7:c4:7a:95:41:7d:db:f0:be:4f:46:0d:67:e4:
                    21:d6:6a:87:93:ab:80:b3:f4:ed:4a:ab:0b:b4:d1:
                    2e:0c:6e:72:18:00:32:a8:40:9a:35:5f:ac:6d:a4:
                    cd:f2:80:e7:dd:dd:92:21:2c:14:b5:b3:30:76:59:
                    16:8a:f7:82:3c:3f:b2:49:74:ee:67:fd:50:5d:ea:
                    f0:6e:b4:e6:d4:23:85:31:14:20:70:c9:61:b9:17:
                    a3:37:70:42:dc:c6:d8:f7:bb:66:3e:a6:21:3a:0c:
                    fe:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.128.0/22
                  45.239.176.0/22
                  131.161.224.0/22
                IPv6:
                  2804:1dd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264398

    Signature Algorithm: sha256WithRSAEncryption
         d5:9e:0b:57:b7:95:9c:ef:88:8a:0c:34:77:90:94:2e:7d:82:
         ce:1d:56:be:d9:2e:5d:2a:4e:00:74:92:22:1a:65:19:1e:54:
         f7:df:98:ae:f9:ee:5e:ba:85:29:96:58:12:fb:be:10:f1:47:
         9b:6c:04:20:93:95:09:6a:6b:0b:64:c2:46:2a:d7:fd:70:fb:
         99:d9:34:d2:0b:38:a2:61:00:4d:0c:3d:3b:99:8e:90:80:9d:
         09:76:99:4a:27:61:e6:c0:26:cb:8d:3a:81:32:70:f9:78:da:
         97:71:b0:c9:2e:12:12:bc:96:a3:1c:13:c7:26:49:78:c3:22:
         1d:33:4f:da:b4:33:15:8b:20:20:43:d5:b4:b4:25:12:88:cd:
         79:a3:0b:04:d5:8a:d8:10:eb:83:11:2e:c9:2d:c4:22:23:d8:
         72:b8:af:ad:11:51:ba:76:72:10:fa:9d:1f:7c:aa:77:f8:53:
         b8:93:2f:e6:83:81:60:f6:f9:e5:c4:d0:81:66:b4:d5:c8:96:
         bc:46:ea:68:08:f4:04:25:78:ee:6e:c6:c8:d8:59:82:08:f6:
         58:02:61:a7:32:26:7b:63:b7:7c:af:5f:23:63:f3:b4:df:b3:
         02:fd:30:50:65:62:d8:62:2e:be:84:54:47:7d:af:28:8e:9b:
         bb:37:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:16:21 2025 by rpki-client