Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D498782804B701D4D741A81F6C4C70B8F52156BD.cer
File:                     D498782804B701D4D741A81F6C4C70B8F52156BD.cer (raw, json)
Hash identifier:          2YSqv9T4ggEU4P/s+cVRHMPrDvZ/XThtKjea46WZyxw=
Subject key identifier:   D4:98:78:28:04:B7:01:D4:D7:41:A8:1F:6C:4C:70:B8:F5:21:56:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       12EF24955A00A459BA4E30D20AA9F6727A04A385
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/D498782804B701D4D741A81F6C4C70B8F52156BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Aug 2025 20:56:30 +0000
Certificate not after:    Wed 12 Aug 2026 21:01:30 +0000
Subordinate resources:    AS: 268903
                          IP: 45.175.180.0/22
                          IP: 2804:5c58::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ef:24:95:5a:00:a4:59:ba:4e:30:d2:0a:a9:f6:72:7a:04:a3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 13 20:56:30 2025 GMT
            Not After : Aug 12 21:01:30 2026 GMT
        Subject: CN=D498782804B701D4D741A81F6C4C70B8F52156BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:cd:b7:7c:7d:e9:75:9a:f8:b8:26:75:d3:
                    d7:5c:81:07:cc:08:99:a0:47:d4:80:23:6a:6c:c4:
                    e8:e2:9b:c6:5a:b3:fe:80:67:3e:4d:57:19:8f:f4:
                    0a:18:85:79:0a:6c:bd:23:fc:01:71:a8:a6:3c:87:
                    6f:ad:6b:81:8e:da:09:2d:32:16:2a:61:6a:6e:8e:
                    0f:88:98:0e:6c:00:a0:81:f8:5f:e4:95:ad:77:7a:
                    6b:99:1c:c8:0b:93:c3:17:29:72:7c:05:96:a1:fb:
                    70:f4:a7:fb:48:71:27:ed:9a:77:75:f0:8a:95:7a:
                    bd:96:74:25:be:d7:fc:cb:fb:b8:5d:1c:c7:be:35:
                    b5:eb:44:e1:30:59:5f:01:1b:e7:fd:4b:db:92:3e:
                    6e:74:78:ce:60:1d:23:38:28:a1:94:c1:6a:be:69:
                    9b:ac:9d:d3:5e:9e:21:ef:9f:87:d4:b9:e1:07:32:
                    22:a6:d6:17:4b:11:24:a0:af:13:56:f7:26:40:c1:
                    3e:7a:25:8c:10:66:a4:76:02:40:29:bf:d9:a1:3e:
                    65:fd:02:1f:40:ce:8b:ea:90:87:d7:2b:bb:5c:ad:
                    1c:e6:03:b8:78:19:56:78:fb:0f:cf:8d:e2:ac:9f:
                    9a:ef:8c:07:42:f9:e2:81:55:8e:7b:c6:ca:46:e4:
                    54:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:98:78:28:04:B7:01:D4:D7:41:A8:1F:6C:4C:70:B8:F5:21:56:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/D498782804B701D4D741A81F6C4C70B8F52156BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.180.0/22
                IPv6:
                  2804:5c58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268903

    Signature Algorithm: sha256WithRSAEncryption
         cf:38:d3:1a:28:c8:e3:79:db:5a:79:d4:71:1d:1b:09:41:1e:
         b2:55:20:01:d6:c3:e0:2e:91:b4:a9:1a:41:2d:6e:92:cf:1a:
         f9:70:17:9f:0d:4e:3b:94:69:4e:08:8e:c3:9b:56:a9:a4:01:
         e3:73:da:3a:b5:0a:3a:18:5a:7c:7d:9a:b4:ba:b4:ac:e9:87:
         8c:04:6b:db:13:24:93:4e:a3:08:9f:80:0c:88:4e:c2:7c:36:
         a6:6c:30:23:00:cf:b7:5f:c4:86:4f:2c:72:cf:2b:95:12:ef:
         ab:fa:ca:a2:82:62:bd:01:da:e5:3a:80:d0:3f:ea:7e:2e:2c:
         b5:59:1a:11:c3:bd:25:42:74:76:14:ac:a9:15:dc:f1:50:ff:
         b2:72:b4:50:2f:1e:f0:e2:a3:6d:40:f2:6c:18:e9:5f:9e:df:
         3a:82:53:16:8f:59:4c:54:3a:41:d6:49:09:31:2e:b2:6d:91:
         bc:36:f9:12:aa:86:63:cd:3a:19:61:34:7e:aa:40:11:20:35:
         17:7e:1d:82:65:74:c0:91:c6:82:24:e2:08:6d:5c:3b:15:2a:
         52:5a:c9:42:bc:39:a2:11:4b:04:58:09:b2:50:11:ae:8e:85:
         8a:da:09:42:81:d0:1b:8e:b4:9d:39:62:a3:92:04:92:f3:de:
         18:79:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:58:08 2025 by rpki-client