Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D264983A092FF22610C9F436FE4BFC265EF4DF1B.cer
File:                     D264983A092FF22610C9F436FE4BFC265EF4DF1B.cer (raw, json)
Hash identifier:          VWCSLSsrcpA3BpfWM8UeQwQ1heI6K6fIGN92ekNK2lQ=
Subject key identifier:   D2:64:98:3A:09:2F:F2:26:10:C9:F4:36:FE:4B:FC:26:5E:F4:DF:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       45AC847BD66A3C02AB95F9CE3D571C551E032916
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/D264983A092FF22610C9F436FE4BFC265EF4DF1B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 06 Jul 2025 21:51:02 +0000
Certificate not after:    Sun 05 Jul 2026 21:56:02 +0000
Subordinate resources:    AS: 266304
                          IP: 170.79.200.0/22
                          IP: 2804:35c0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 22:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ac:84:7b:d6:6a:3c:02:ab:95:f9:ce:3d:57:1c:55:1e:03:29:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  6 21:51:02 2025 GMT
            Not After : Jul  5 21:56:02 2026 GMT
        Subject: CN=D264983A092FF22610C9F436FE4BFC265EF4DF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:66:ce:f3:a2:c3:90:a3:08:c8:c5:73:8b:
                    4b:14:e5:0b:70:a4:0f:0c:bd:ef:7e:9d:34:a1:64:
                    80:af:00:f0:33:5f:6c:4a:d0:2e:bf:b4:04:2a:cb:
                    95:8b:c2:24:10:96:11:e3:ed:5b:b9:04:1c:e7:c9:
                    fb:ce:8b:ff:bc:2c:a3:8a:1e:b3:8d:58:67:35:1f:
                    52:3b:2e:28:28:c0:96:a4:97:67:88:60:d1:ba:f1:
                    b5:e9:9c:21:2b:a1:f3:2f:82:6d:94:26:09:7e:fd:
                    f1:21:0b:80:40:83:6b:0e:d3:0c:43:30:3f:42:72:
                    e7:72:fb:0d:e5:6c:6e:68:9b:f2:26:aa:de:aa:49:
                    b1:ee:1e:24:38:dd:59:07:b3:71:d0:df:a7:78:5f:
                    60:6d:c5:ed:18:35:54:9b:ce:bb:64:e0:a2:e4:37:
                    79:45:23:98:be:10:34:92:0b:25:d3:35:82:5e:c2:
                    40:25:62:e1:0b:c5:3c:0d:4a:e7:9e:5f:fc:e9:f6:
                    b8:d8:0e:7e:5a:20:9e:96:b7:08:15:31:70:cc:09:
                    3d:3b:73:73:35:a2:5d:88:1a:01:0b:74:14:23:88:
                    16:51:49:89:20:0a:0b:39:8c:2e:f4:ac:15:a1:17:
                    be:ed:68:c2:89:83:ad:6b:f8:8a:03:7b:b0:05:36:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:64:98:3A:09:2F:F2:26:10:C9:F4:36:FE:4B:FC:26:5E:F4:DF:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/D264983A092FF22610C9F436FE4BFC265EF4DF1B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/22
                IPv6:
                  2804:35c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266304

    Signature Algorithm: sha256WithRSAEncryption
         05:65:3d:4c:b9:d5:23:a4:71:40:8e:a5:9a:b3:ae:84:bd:ed:
         50:7b:2a:6b:28:ae:d4:ad:06:81:17:9d:60:1f:f0:d9:76:0a:
         cb:f2:e1:28:79:b8:d3:6b:ea:71:0b:b3:66:c4:cf:66:f2:5f:
         de:05:0c:ff:37:94:5a:d8:12:70:53:95:9e:f8:ed:4b:d8:d7:
         4b:24:c5:fa:8e:86:43:2b:c3:50:95:67:fa:05:37:63:67:a3:
         d2:ef:45:db:96:36:35:4b:6c:08:a5:bb:59:63:21:f9:84:5e:
         d0:e3:70:a4:80:6c:fc:73:5b:06:c8:c4:6a:83:79:9a:4e:7f:
         51:e5:67:bb:29:1e:f1:9a:83:30:0e:cc:99:40:ad:12:cc:50:
         3b:e4:f3:f2:3e:52:88:4b:45:52:b1:11:2c:43:63:c0:5e:53:
         bb:23:97:77:a0:45:97:94:49:46:1c:03:36:62:96:ea:47:94:
         4f:5f:70:7c:b6:93:25:29:f1:cf:9d:e5:9e:71:10:6e:5a:f4:
         b5:a6:da:2e:9c:39:05:ad:90:90:08:2c:10:9b:ab:93:0d:f9:
         97:17:ee:29:f1:03:23:66:51:ee:0e:95:38:4b:2f:65:39:12:
         2a:22:e7:95:80:c2:d1:8c:22:bd:da:1b:af:fc:cf:44:ee:c4:
         7a:60:cd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 23:57:44 2025 by rpki-client