Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer
File:                     28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer (raw, json)
Hash identifier:          bxqV/6pQr0f98IZ4uYLDyxuK4g9AuRRrQY/LfF1iKKI=
Subject key identifier:   28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43719F29EDFDAAAEDAB4D97FD999AABFBF462AED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft
caRepository:             rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Sep 2025 17:18:02 +0000
Certificate not after:    Thu 03 Sep 2026 17:23:02 +0000
Subordinate resources:    AS: 267415
                          IP: 45.234.28.0/22
                          IP: 2804:4d28::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:71:9f:29:ed:fd:aa:ae:da:b4:d9:7f:d9:99:aa:bf:bf:46:2a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  4 17:18:02 2025 GMT
            Not After : Sep  3 17:23:02 2026 GMT
        Subject: CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:81:fe:50:ef:19:7b:b2:54:aa:55:0b:95:
                    81:d1:24:98:fb:b3:ff:2a:56:46:80:99:80:53:21:
                    8d:48:fc:ae:48:2f:a6:14:4b:d8:2b:a5:1d:db:b7:
                    3d:e0:f6:e8:d3:12:50:5e:96:12:d7:7a:a5:8e:43:
                    3a:da:69:d3:ec:8a:0a:8a:11:7f:e6:a3:53:c3:f3:
                    71:f0:01:b9:20:fa:eb:59:cf:ff:57:60:9e:be:6a:
                    7f:6c:72:01:a1:f2:c8:60:a8:5f:ee:fc:fe:5c:5c:
                    60:4d:3d:ec:de:65:00:a2:e8:63:27:8a:86:81:12:
                    af:84:10:29:a4:e7:69:07:49:0c:7b:5c:24:c6:b6:
                    0e:12:cd:dc:1f:9b:03:5a:7b:c2:d9:25:f2:78:75:
                    06:dd:ac:3d:ef:bc:5c:83:bc:8f:c2:fb:79:b9:e9:
                    77:a1:a4:b5:0d:d4:fe:dc:d6:64:d6:4f:97:25:fc:
                    22:1d:fb:ab:41:04:10:20:9d:79:67:35:da:bf:83:
                    cd:31:fd:dc:93:c1:4e:68:04:a3:d2:8d:90:bf:3d:
                    be:7b:74:91:02:d9:f1:f8:2a:60:25:92:1c:4f:5d:
                    b2:4e:94:ad:ca:04:9b:77:ba:79:88:0b:dc:44:d3:
                    8a:b1:d4:28:cd:50:fa:9a:cf:66:c2:06:d8:14:7e:
                    88:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.28.0/22
                IPv6:
                  2804:4d28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267415

    Signature Algorithm: sha256WithRSAEncryption
         6a:40:51:51:0e:86:1a:6a:8c:67:df:fa:9e:cc:37:98:34:24:
         20:28:41:28:fa:84:9b:fa:c7:07:a2:b3:12:35:ed:e5:e5:0c:
         98:a7:4e:7d:6a:f8:e5:69:94:ea:01:c1:be:23:ec:dd:4e:69:
         af:b3:6a:8e:f3:33:0b:96:67:97:36:ba:e8:1f:13:4a:db:9a:
         21:3e:2c:b6:d2:82:03:24:f4:a2:d7:ac:7f:d1:8f:81:b6:31:
         53:dc:7b:d7:bc:b0:fd:02:de:bb:d5:c4:ca:45:87:b1:5c:4b:
         4b:15:5e:45:88:9b:85:25:9d:24:64:7d:f4:71:2d:46:7f:33:
         dc:85:60:b7:8c:1a:d6:9a:91:ae:36:3d:01:5c:6f:64:d7:06:
         4c:16:63:fb:11:eb:f0:8e:e7:4d:22:57:ce:a8:5e:de:1a:73:
         d9:86:99:ba:2c:f2:0d:bd:50:81:70:77:59:4b:a7:d9:c8:e9:
         c1:f2:f3:28:f1:4d:79:ae:83:92:9e:43:5c:77:d9:4e:4e:ba:
         06:ce:9c:2a:23:2a:81:36:0c:d6:3c:df:cf:8a:7a:48:d2:28:
         52:22:ae:98:f6:e6:7d:30:18:67:7b:9a:84:5a:34:2b:4d:19:
         73:c3:fc:58:c2:f6:5e:5d:24:31:71:db:75:b2:8c:20:1b:8b:
         a1:0e:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:30:35 2025 by rpki-client