Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98BDA26E592DC2BC482620779D57D6C881423CDC.cer
File:                     98BDA26E592DC2BC482620779D57D6C881423CDC.cer (raw, json)
Hash identifier:          RDp8Q/pN48shgePXNFsbGgps9SC6mc7IDUfST4Qgcek=
Subject key identifier:   98:BD:A2:6E:59:2D:C2:BC:48:26:20:77:9D:57:D6:C8:81:42:3C:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       9A83B3EE8F2C0CC162FFC5E3DD1FBDC0E5B57B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/98BDA26E592DC2BC482620779D57D6C881423CDC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Sep 2025 20:03:14 +0000
Certificate not after:    Fri 18 Sep 2026 20:08:14 +0000
Subordinate resources:    AS: 269237
                          IP: 45.182.204.0/22
                          IP: 2804:617c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9a:83:b3:ee:8f:2c:0c:c1:62:ff:c5:e3:dd:1f:bd:c0:e5:b5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 19 20:03:14 2025 GMT
            Not After : Sep 18 20:08:14 2026 GMT
        Subject: CN=98BDA26E592DC2BC482620779D57D6C881423CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a7:60:f9:6a:c1:3d:14:18:5e:8d:5f:99:95:
                    8b:a2:52:a9:2e:9e:22:6b:da:0e:86:1e:5e:97:2e:
                    2a:03:05:54:10:85:4e:45:43:aa:67:32:1a:78:79:
                    c1:93:14:38:59:d2:45:ca:a2:d0:d3:69:d9:73:eb:
                    f7:b9:8e:c0:c0:c4:b9:0d:5d:7a:13:e3:67:bd:a5:
                    20:11:b7:9f:52:83:08:cc:65:5b:13:56:43:dc:bd:
                    18:34:96:d0:cc:37:ec:7e:4c:f5:67:fd:aa:05:68:
                    86:a4:85:1f:79:be:5e:f6:52:2b:f2:a6:74:52:8a:
                    33:04:41:e7:b5:cf:6d:91:ae:e7:74:09:e2:88:c8:
                    de:b2:9f:b9:e3:69:55:44:9f:68:36:97:83:b6:00:
                    74:3a:ab:a5:00:ee:75:7d:3d:34:9a:76:53:20:e7:
                    5a:f0:74:c2:18:68:c0:30:f3:0c:5d:b7:c0:f5:db:
                    f3:af:cf:73:37:18:ef:62:25:d5:32:1e:56:39:33:
                    36:ab:41:fa:fa:7f:3a:94:a7:3a:e3:e7:ea:8b:f4:
                    f0:a1:ff:c7:1c:3f:9e:76:55:0a:23:4f:c3:a4:ec:
                    57:95:5e:14:41:68:2b:03:09:49:63:4b:df:c9:2b:
                    87:78:aa:25:35:6d:ce:07:20:0c:11:a9:5d:5e:e0:
                    37:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:BD:A2:6E:59:2D:C2:BC:48:26:20:77:9D:57:D6:C8:81:42:3C:DC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/98BDA26E592DC2BC482620779D57D6C881423CDC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.204.0/22
                IPv6:
                  2804:617c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269237

    Signature Algorithm: sha256WithRSAEncryption
         ae:ec:e8:bc:6c:8a:ea:9a:71:67:ae:01:c9:16:62:ba:e3:8b:
         20:c7:0e:7c:0b:7e:bb:c0:79:a2:78:a8:f6:9a:03:82:d6:f0:
         c4:a6:2d:05:0a:43:d5:63:f0:02:b9:7c:51:6c:82:a8:83:24:
         3d:19:e5:b3:31:c2:0a:16:c4:65:40:2c:9c:f5:08:6a:13:bc:
         26:5f:d9:c7:35:a1:d2:59:6f:83:2c:10:6e:a5:e9:9d:de:d7:
         5e:0b:99:ca:b5:b1:4e:8a:08:91:96:b3:2e:80:54:2d:18:77:
         c4:99:54:7f:e2:5b:3d:42:8a:26:64:43:d2:bf:08:f0:99:7f:
         e3:8f:c2:6c:ec:49:24:2f:8b:26:28:f9:40:45:0b:bc:f7:52:
         72:29:5a:7b:7b:9f:ae:a2:10:88:ca:8d:28:28:09:c0:51:c2:
         59:af:3d:8c:6f:ca:2a:12:fe:2d:3b:90:8c:80:26:f2:21:08:
         8f:8c:29:53:86:b8:fa:67:38:a3:00:2a:9e:fb:27:5e:0c:b1:
         39:58:05:43:f0:6b:b0:42:62:5e:a2:0e:0c:6e:a4:7d:53:48:
         f7:60:0b:0d:d1:7d:78:89:81:7b:30:7e:63:24:f7:c2:3d:82:
         3d:1d:29:35:7a:0e:54:9c:d6:11:89:bd:f5:70:71:9f:37:eb:
         41:6a:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:14:13 2025 by rpki-client