Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
File:                     D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer (raw, json)
Hash identifier:          RnYPTN/vAGFoRy/PV9PkWjl8PZ/k5DQtTKvPIeu8NBI=
Subject key identifier:   D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58C30B8BA62770F115727510A0D88CFC940EF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Sep 2025 16:14:15 +0000
Certificate not after:    Mon 07 Sep 2026 16:19:15 +0000
Subordinate resources:    AS: 274632
                          IP: 2804:914c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c3:0b:8b:a6:27:70:f1:15:72:75:10:a0:d8:8c:fc:94:0e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  8 16:14:15 2025 GMT
            Not After : Sep  7 16:19:15 2026 GMT
        Subject: CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:22:84:36:24:c1:e8:55:da:24:32:9c:f0:
                    fd:3a:dc:38:3f:81:54:2f:2b:a1:b3:4f:e9:04:3f:
                    6c:fd:7d:3e:2f:25:75:2d:d0:e8:b8:24:bc:6d:d3:
                    c9:b2:2f:96:e1:b2:8a:5a:3f:81:b4:05:71:fa:37:
                    2f:8d:4d:16:fd:ec:86:93:a2:3b:6f:81:4a:f8:7e:
                    7f:25:a9:50:9e:e0:2b:f3:c7:e5:c2:53:1f:34:5f:
                    88:71:22:59:8d:d8:33:03:ba:68:da:57:1e:6c:38:
                    c2:53:d4:a4:2f:80:c2:a8:cd:fc:56:05:fd:d6:67:
                    5d:49:f3:ea:f5:39:12:d0:22:ac:5c:47:0c:ee:34:
                    61:46:a7:71:28:70:b9:79:df:27:b9:08:8b:1d:0b:
                    24:fc:eb:74:1f:d3:0b:5c:71:85:ad:0b:d1:ca:68:
                    5e:61:dd:1c:f3:7e:0d:5e:c6:3d:7f:63:a3:75:e7:
                    4c:0e:78:6f:19:9a:7a:c6:64:e5:81:e5:fa:62:d4:
                    71:5d:7e:ff:b0:de:53:6c:1f:3f:9a:fc:00:7b:3f:
                    b4:01:29:0a:7c:ae:4a:ca:53:49:9f:76:21:70:eb:
                    9d:17:1c:dd:cf:f8:a7:42:b8:77:88:8d:3a:da:76:
                    76:a0:84:3b:6a:39:fa:e6:e2:3a:65:84:9d:45:0f:
                    1d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:914c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274632

    Signature Algorithm: sha256WithRSAEncryption
         40:99:bb:92:7e:f7:77:39:a6:03:38:2b:5c:a1:3f:0f:90:47:
         69:f0:14:25:03:49:fb:45:88:84:d2:3b:d3:95:bf:4a:3e:86:
         45:68:eb:f0:3c:29:78:86:8e:cf:b2:c9:89:7a:6f:86:67:f2:
         08:0e:a6:b0:8b:9c:57:02:9f:27:4e:2d:b8:03:ba:04:b9:57:
         68:6c:6c:5e:b8:e3:24:55:c2:41:bf:af:8b:20:f7:fb:f6:13:
         3c:de:a1:5b:c4:0c:a3:1a:2a:68:78:6a:3b:cd:d2:3a:80:ef:
         12:03:3c:db:5c:40:ff:67:a1:9c:cf:ec:7a:c7:28:e8:28:02:
         9a:7e:40:a6:4b:83:16:23:66:45:b6:45:e0:8a:d9:f6:58:96:
         fe:8c:af:31:d6:9c:d2:bc:d1:cb:76:84:4a:35:ce:4d:b4:19:
         9b:51:17:bf:88:39:dd:d9:7a:58:e0:57:74:31:e9:30:4f:7a:
         79:43:2d:2e:82:8e:6b:74:9f:be:cd:a2:a3:a5:ec:d8:48:05:
         05:6e:b5:44:ba:1f:ce:86:28:87:1f:d7:db:1a:82:a4:30:35:
         ff:ac:e3:60:ab:0a:3f:f1:f0:e2:23:81:c7:b3:81:72:7d:31:
         95:cb:70:e0:2d:65:40:75:36:e1:29:7d:48:e2:85:2f:07:e2:
         90:ad:fa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:12:18 2025 by rpki-client