Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
File:                     D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer (raw, json)
Hash identifier:          XbqE4vWQ95x3l83LENCQ8hVroadmFQRnJQVOV/6CdBQ=
Subject key identifier:   D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57ABFF40868CBE7C2257985CE904A19C537264EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Oct 2025 22:01:51 +0000
Certificate not after:    Wed 30 Sep 2026 22:06:51 +0000
Subordinate resources:    AS: 264936
                          IP: 168.232.80.0/22
                          IP: 2804:3034::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ab:ff:40:86:8c:be:7c:22:57:98:5c:e9:04:a1:9c:53:72:64:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  1 22:01:51 2025 GMT
            Not After : Sep 30 22:06:51 2026 GMT
        Subject: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:f8:4f:ce:6c:a1:40:d0:c6:2d:af:fa:bc:
                    93:be:ff:86:13:c5:00:20:8d:c3:50:56:9e:c7:67:
                    0a:af:65:29:ca:d5:d2:d0:93:38:81:43:19:73:56:
                    e2:45:92:1e:2c:8b:87:d9:95:ab:64:69:ef:92:a6:
                    c9:f8:25:0b:36:0b:a1:72:47:eb:67:fe:5e:6d:9c:
                    a4:c7:98:b3:5b:ba:d3:f8:6f:34:1a:b0:61:2f:66:
                    50:c0:16:1b:0f:d2:07:18:ac:12:97:74:13:06:32:
                    b1:6f:a5:58:0a:32:04:b6:79:20:ab:0b:6f:cd:89:
                    98:b6:71:8b:15:a7:4a:8c:e1:8d:8a:23:bf:f7:ac:
                    b9:97:47:2b:34:c4:9e:d3:40:a1:f2:e9:13:04:6b:
                    e4:12:17:d4:c3:b5:1b:42:03:b2:b2:71:46:be:ef:
                    25:84:85:81:ce:e7:9c:69:b0:5e:88:af:12:e9:f2:
                    43:93:86:79:dc:23:7b:a5:61:97:03:7f:b2:ba:71:
                    8e:fa:76:17:f5:b1:39:23:08:c5:fc:c1:15:2c:1d:
                    1b:28:8f:4d:22:5d:b4:f6:18:7b:56:41:92:63:a7:
                    74:2a:3d:d1:18:bd:66:63:21:7c:ca:54:92:85:96:
                    3f:56:4f:be:1e:93:55:60:00:e5:54:ab:fd:e6:c9:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/22
                IPv6:
                  2804:3034::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264936

    Signature Algorithm: sha256WithRSAEncryption
         6a:b8:cc:b6:1d:f4:f3:b2:72:f4:dd:ef:06:69:93:54:e6:26:
         8b:ef:98:55:ad:ea:4d:9c:f4:15:ba:57:1a:b6:41:0e:11:b7:
         e6:58:c2:9a:f4:ab:0c:14:48:a9:f6:97:3e:c0:db:ee:fc:a0:
         da:42:1f:93:b9:df:4e:be:f9:77:4b:7f:3c:48:31:a4:a1:e3:
         b6:07:40:0f:da:b9:48:d4:96:89:fe:0c:e1:63:9a:0f:fe:4b:
         f2:04:1a:d1:6a:1d:0d:f4:94:5a:5e:8d:57:6c:5f:91:08:2e:
         c6:7c:cf:88:ef:0f:a9:35:8e:09:47:2b:4c:74:9b:74:01:ff:
         01:ac:8d:14:40:0d:80:76:48:ac:be:2d:39:26:ae:c1:50:35:
         15:33:c0:8c:52:31:45:87:16:b8:11:11:13:fb:0c:b0:3c:07:
         2b:b4:2f:d9:da:b6:b0:c4:eb:80:25:05:7b:37:60:74:88:1d:
         cc:e9:24:3e:c9:78:11:ab:f7:b5:9f:a7:5e:fc:55:b9:6a:e3:
         93:bf:b3:44:f6:c8:01:61:9c:11:17:ae:57:ff:c1:1c:85:9b:
         85:8f:97:04:1a:94:78:57:a3:9e:17:6c:28:44:45:e0:68:aa:
         af:2a:e0:9c:ca:53:b8:62:6e:93:75:ed:ae:22:47:52:04:b9:
         30:a4:43:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:44:23 2025 by rpki-client