Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E1DD14E8495BF2D38A907AB140A4657BB4715587.cer
File:                     E1DD14E8495BF2D38A907AB140A4657BB4715587.cer (raw, json)
Hash identifier:          BvaRuwrEuPqoRodBqylRBPAPVIZgHcO2jcxtyeSC314=
Subject key identifier:   E1:DD:14:E8:49:5B:F2:D3:8A:90:7A:B1:40:A4:65:7B:B4:71:55:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5621D35223E351FF73A99EF49D98E4B52A911FF0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E1DD14E8495BF2D38A907AB140A4657BB4715587.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Sep 2025 07:57:49 +0000
Certificate not after:    Thu 24 Sep 2026 08:02:49 +0000
Subordinate resources:    AS: 264566
                          IP: 138.0.144.0/22
                          IP: 2804:21ac::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:21:d3:52:23:e3:51:ff:73:a9:9e:f4:9d:98:e4:b5:2a:91:1f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 25 07:57:49 2025 GMT
            Not After : Sep 24 08:02:49 2026 GMT
        Subject: CN=E1DD14E8495BF2D38A907AB140A4657BB4715587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:e7:d3:1d:54:16:c1:44:3c:f2:51:bb:d4:
                    d5:89:09:5d:28:42:b6:47:2f:49:79:6f:89:c3:dd:
                    35:f2:36:6a:b5:8f:3c:c5:87:e5:5f:f5:73:76:9e:
                    01:f3:21:30:73:27:59:51:22:7f:2b:fc:6d:ba:16:
                    a8:07:b5:85:d9:06:6a:3f:78:dd:f8:67:98:7b:d6:
                    a7:e4:c8:26:fa:ef:45:a8:88:89:1b:a8:13:fe:b6:
                    44:ec:f5:6e:2f:94:0c:a7:af:14:4e:42:71:2e:5d:
                    aa:01:1c:7c:33:61:47:be:a8:20:9b:b1:2d:79:95:
                    40:47:e3:ff:5c:45:49:05:5d:c3:d7:3b:d1:0e:86:
                    14:7e:fc:ef:36:0c:2e:8f:23:33:94:8c:67:fa:14:
                    90:51:62:30:27:60:eb:61:55:69:e7:39:f1:df:a1:
                    0d:99:2c:ba:99:9e:20:42:5f:c5:51:b4:3a:dd:cb:
                    fb:a5:8b:52:82:5e:06:67:2d:31:97:72:b6:22:ee:
                    46:b2:8d:c3:c8:97:69:9b:a6:2a:65:e7:e3:3c:45:
                    60:df:f8:14:8d:c2:56:8c:f2:cf:91:01:7e:08:01:
                    97:c9:58:28:cc:7e:f0:65:24:0b:b8:2f:35:0e:4a:
                    4a:10:51:d3:67:de:ed:fa:90:42:7c:db:1e:4f:cb:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:DD:14:E8:49:5B:F2:D3:8A:90:7A:B1:40:A4:65:7B:B4:71:55:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E1DD14E8495BF2D38A907AB140A4657BB4715587.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.144.0/22
                IPv6:
                  2804:21ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264566

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:25:9a:8b:32:6b:c7:ac:7e:bb:2f:a6:c9:5b:55:98:e3:
         c6:95:e5:6b:4f:d8:e7:23:bb:03:0e:66:28:a6:c6:53:46:01:
         66:f8:5d:38:9a:40:72:b1:1a:c0:45:f7:c9:e4:13:3b:e5:7f:
         03:e5:60:98:0a:84:84:14:15:93:5f:7f:ab:ac:12:63:75:68:
         40:b3:a2:30:9c:8f:46:1b:d4:0c:ab:67:dd:7e:c4:be:25:16:
         49:3f:f6:e5:25:00:cc:fe:ad:34:15:42:77:92:c5:34:61:0d:
         e9:da:82:9e:03:1c:b2:db:64:2e:22:ac:39:1a:09:35:4f:f7:
         34:10:7c:42:d9:f0:a8:cf:57:5a:21:5f:ae:dc:9c:cc:5d:b9:
         ef:5a:75:52:49:77:3d:bf:96:cc:f8:a2:7d:5e:5e:18:55:f7:
         ca:bd:41:5b:05:48:cc:93:ab:ff:4d:87:19:6c:d3:52:af:f6:
         9f:70:67:51:b3:72:98:9e:9b:6f:56:b8:39:e7:8b:c4:19:68:
         f5:80:e1:17:79:84:cb:00:02:8e:0d:c5:96:0a:4c:59:5e:e6:
         99:10:c9:47:84:1d:19:4e:59:b7:91:09:eb:bd:d1:24:ce:94:
         40:fc:f3:ef:32:32:b3:84:0d:f7:05:f3:2f:88:33:9f:31:00:
         f9:4c:08:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:15 2025 by rpki-client