Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
File:                     9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer (raw, json)
Hash identifier:          Wm1+FykfXcqSE6hiiQ9CR3tnIWcbkQksU82o1McwQDs=
Subject key identifier:   9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3DAD4C01E6331344E1A51BA45F31D2366D6AF13B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Jun 2025 17:36:11 +0000
Certificate not after:    Thu 25 Jun 2026 17:41:11 +0000
Subordinate resources:    AS: 264004
                          IP: 143.0.72.0/22
                          IP: 2804:2938::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 15:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ad:4c:01:e6:33:13:44:e1:a5:1b:a4:5f:31:d2:36:6d:6a:f1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 26 17:36:11 2025 GMT
            Not After : Jun 25 17:41:11 2026 GMT
        Subject: CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c7:e1:7e:3d:95:38:9f:3e:8f:3e:80:a1:25:
                    de:68:b2:00:20:34:4e:c0:5f:a8:03:66:67:e4:a8:
                    cc:ce:2a:1e:88:cf:d7:e4:e0:0f:87:7b:97:d3:75:
                    10:49:b2:00:82:59:14:31:1b:4b:c0:ba:d7:e0:51:
                    78:aa:d3:71:a9:08:75:39:7a:5e:69:ca:5e:78:37:
                    8f:04:93:9f:50:29:73:90:52:88:d0:17:6d:dc:41:
                    68:58:54:ec:7c:ab:ab:6f:5f:be:3f:8a:72:3c:81:
                    f5:8d:5f:f9:b8:57:81:97:77:e7:25:f2:ed:53:60:
                    0b:58:d4:ae:72:15:99:8d:80:2e:5f:58:df:61:70:
                    44:41:5f:56:54:7b:9f:de:55:7d:79:ff:5b:58:08:
                    62:2c:78:f7:62:a9:dd:b4:a7:58:81:4e:de:25:f6:
                    e9:c7:10:0f:df:b2:2f:aa:de:57:76:05:33:e0:c7:
                    00:5f:f4:68:b8:6a:3e:cd:6c:39:8c:e2:d3:b7:18:
                    eb:59:bd:d0:e4:20:7a:d6:5c:4d:73:c4:99:00:00:
                    0d:c9:ae:94:db:89:35:0e:8c:15:9b:df:67:3c:c2:
                    ee:cc:3f:92:41:fd:4b:b9:99:9f:60:59:55:bc:2c:
                    67:69:c1:11:08:86:7a:c0:87:f7:53:86:80:04:d6:
                    6b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.72.0/22
                IPv6:
                  2804:2938::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264004

    Signature Algorithm: sha256WithRSAEncryption
         cb:f7:1b:d6:b3:2b:8d:09:c3:df:1d:75:99:25:d1:b2:fb:89:
         94:e3:c2:43:89:e7:c3:37:37:98:bb:b6:fe:6f:87:19:a7:0b:
         f3:d2:1d:36:f5:d6:4b:9a:8b:da:39:6e:1b:f1:39:3d:ba:30:
         f3:1f:ea:d5:5a:3b:aa:a6:af:f9:68:40:00:0a:65:e6:75:ae:
         fb:d0:08:b6:d0:9d:67:04:5e:ee:3e:ce:44:95:d7:c5:a4:01:
         97:f1:b3:75:ea:39:da:1f:0f:27:57:02:b7:62:ab:af:16:dc:
         2c:55:4d:a8:1b:49:a7:6b:bf:d4:3e:f4:a4:09:0b:46:aa:fa:
         43:0c:01:e2:33:5d:a5:4f:66:33:fb:54:6d:40:e3:9d:7d:43:
         b8:8c:10:89:6b:9f:ca:6d:d3:7b:11:c8:7e:15:5d:31:65:62:
         93:fb:c0:57:bc:ce:c2:3a:31:cd:13:d3:52:4c:1a:b5:47:e2:
         63:4d:a0:e5:ac:2b:16:a3:6f:b3:38:72:c7:de:05:11:3f:6e:
         61:31:33:71:ba:29:75:e1:cd:ed:fa:ba:e1:53:ea:ed:0b:03:
         1b:9b:e0:08:3c:e0:14:b7:57:d1:14:d7:af:31:b3:35:7f:3b:
         c9:53:ac:63:e6:9b:5d:c6:35:99:aa:95:5b:2c:c8:56:f6:9a:
         1d:a5:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:06:09 2025 by rpki-client