Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer
File:                     DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer (raw, json)
Hash identifier:          Rk9ltPgOD6oDp2oyao8lT8/zC/Zhpjxm7ZzMUeaZznU=
Subject key identifier:   DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       229F46B900E1FED046D140E363F01EFA427E4207
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Sep 2025 20:24:22 +0000
Certificate not after:    Wed 16 Sep 2026 20:29:22 +0000
Subordinate resources:    AS: 264574
                          IP: 138.36.108.0/22
                          IP: 2804:21cc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9f:46:b9:00:e1:fe:d0:46:d1:40:e3:63:f0:1e:fa:42:7e:42:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 17 20:24:22 2025 GMT
            Not After : Sep 16 20:29:22 2026 GMT
        Subject: CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:8f:63:9c:ef:8d:06:d9:3c:1f:f2:85:5e:
                    f7:05:13:76:97:f9:79:36:01:c0:a8:ae:6a:c1:a8:
                    be:5f:79:38:92:d8:60:b7:76:a5:be:fc:e8:d6:9d:
                    d3:9a:07:a1:4f:90:4d:ad:7c:3f:71:a8:b5:de:20:
                    a7:11:90:8d:c9:53:08:ba:4a:d1:8f:da:49:d8:2e:
                    a6:82:dd:b2:c5:f5:a7:9b:8d:c8:a9:8a:15:24:1b:
                    2c:7a:cf:0f:5d:68:e0:54:35:4f:8e:ca:ec:de:d1:
                    68:d8:f7:64:ae:28:32:19:33:bb:9a:51:91:c9:93:
                    b6:d6:00:c5:f4:ad:c3:d0:c0:a9:3a:92:32:56:b3:
                    d9:bb:b2:e6:d7:04:b6:e7:ff:0b:e1:08:3c:f0:78:
                    05:fc:80:2a:be:ec:97:9f:b1:f8:d5:d6:8c:60:fd:
                    41:a2:65:d1:bd:80:2e:07:6e:6a:3c:6c:5c:7e:43:
                    4b:d7:8a:b7:90:f3:13:00:75:67:55:34:04:ce:a6:
                    1c:e3:6c:a4:f5:27:bd:c6:a2:ed:3b:8f:b9:b2:8d:
                    db:90:28:8f:4a:53:59:da:4b:ab:65:8a:df:d7:6c:
                    73:ef:9c:7c:3e:00:64:cd:3f:f4:48:62:b3:8c:1e:
                    fb:14:73:20:a0:94:f9:17:67:f9:3b:4f:0d:50:34:
                    92:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.108.0/22
                IPv6:
                  2804:21cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264574

    Signature Algorithm: sha256WithRSAEncryption
         0a:b6:9f:12:9a:50:08:a9:19:dd:18:19:fc:99:c5:d6:4d:f2:
         58:32:4e:f9:a6:77:e2:07:83:2c:06:75:13:cc:45:64:f6:e1:
         e9:ba:87:1a:cf:f2:a4:26:49:76:d2:be:7f:86:dd:ab:23:c4:
         3a:2e:23:85:c7:11:a4:3b:2c:e7:18:6e:e9:cb:4d:f4:8b:55:
         ef:94:e0:bf:91:34:9e:82:21:08:f6:42:f2:f6:d4:7b:85:90:
         a1:09:73:13:78:28:10:a5:c8:7f:de:83:ed:7d:c9:65:e7:ad:
         05:a1:a3:38:f7:d3:61:b1:57:b5:04:40:41:15:a8:9a:bf:d5:
         1e:b3:77:86:bd:22:06:a1:21:ac:aa:b1:01:b9:f2:4b:e1:32:
         b1:77:b4:4c:61:93:d4:6e:5b:33:8b:c2:6d:04:7d:4d:1f:86:
         cf:8a:9f:fc:21:eb:15:35:9b:ce:a4:ec:98:c3:e6:01:fc:ff:
         db:b9:80:bf:16:91:b5:57:b6:ed:6a:d2:02:21:55:7f:84:94:
         2c:95:41:0a:88:df:89:59:23:76:89:2d:03:da:b3:62:91:e0:
         7d:d4:2f:7c:4b:30:bb:cd:f4:16:79:be:71:15:b8:e9:78:74:
         16:5d:21:c7:7d:56:1d:56:23:7d:58:27:ec:34:f7:5e:a8:bf:
         71:57:1d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:40:24 2025 by rpki-client