Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28C838E91EB94141F0E04FD8D8014B82B9089884.cer
File:                     28C838E91EB94141F0E04FD8D8014B82B9089884.cer (raw, json)
Hash identifier:          R0TsKO/gAgmgT+E9UTdWwD+pcNBR8c2DGgwxsrAej4A=
Subject key identifier:   28:C8:38:E9:1E:B9:41:41:F0:E0:4F:D8:D8:01:4B:82:B9:08:98:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       38CAC6B534B218BD47D204EC7406A75ED7DD7B81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/28C838E91EB94141F0E04FD8D8014B82B9089884.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Jun 2025 16:32:33 +0000
Certificate not after:    Fri 12 Jun 2026 16:37:33 +0000
Subordinate resources:    AS: 271595
                          IP: 190.9.84.0/22
                          IP: 2804:7dfc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 05:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ca:c6:b5:34:b2:18:bd:47:d2:04:ec:74:06:a7:5e:d7:dd:7b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 13 16:32:33 2025 GMT
            Not After : Jun 12 16:37:33 2026 GMT
        Subject: CN=28C838E91EB94141F0E04FD8D8014B82B9089884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:af:6a:47:0f:b4:76:8d:02:9a:e2:63:27:
                    a4:6b:e0:f7:12:b8:0d:54:8f:36:ff:9c:cf:38:2d:
                    d1:50:52:a6:4e:d0:54:dc:cc:16:ee:49:8d:8d:01:
                    98:60:11:2d:dd:23:19:23:43:e1:8e:02:89:30:80:
                    d8:4c:44:6d:d4:46:ef:90:4d:12:7f:b5:cc:e3:c2:
                    52:e0:f6:a8:88:df:e1:f5:b3:45:1e:34:32:27:04:
                    53:c0:18:f4:b7:8d:72:33:e0:fc:91:bd:08:2f:69:
                    75:f7:3f:1f:8d:63:7d:dd:aa:7c:f2:42:ec:e2:57:
                    73:44:42:bf:77:b3:08:dc:06:81:46:1c:d8:5b:df:
                    ac:cb:e9:ef:ee:f6:1f:0d:41:67:d6:fe:3f:c1:1f:
                    71:17:e7:41:e6:f4:a4:81:4d:60:d0:cc:f0:fe:e6:
                    eb:da:11:59:50:cc:ea:da:02:e1:b2:c3:3b:9f:03:
                    09:87:4a:df:44:0f:14:3e:50:bd:3b:40:c2:38:7d:
                    fd:e7:7e:8c:78:91:35:41:5e:f7:e3:a4:02:55:84:
                    b6:61:cb:cb:ef:a3:ee:a6:2c:57:37:33:73:31:19:
                    9c:68:e3:94:b9:f5:5e:10:8c:1e:25:73:49:df:4b:
                    5d:85:4e:c3:9e:e1:09:c6:f4:67:1d:25:95:dc:64:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:C8:38:E9:1E:B9:41:41:F0:E0:4F:D8:D8:01:4B:82:B9:08:98:84
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/28C838E91EB94141F0E04FD8D8014B82B9089884.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.84.0/22
                IPv6:
                  2804:7dfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271595

    Signature Algorithm: sha256WithRSAEncryption
         3f:6a:18:b9:ea:63:3e:10:c5:1b:e0:f6:3a:bf:80:dd:ab:78:
         8d:8b:a9:02:aa:68:e3:fc:70:ee:10:5f:79:3a:d3:e7:88:25:
         03:46:12:bb:16:9a:2f:3f:da:9a:7c:37:4c:05:c8:0a:a8:7d:
         68:7b:08:39:aa:80:5c:86:a9:96:04:57:ce:4b:17:70:97:b0:
         2a:6e:4d:2f:87:f6:48:91:b7:5f:0a:29:60:e2:fe:a7:f7:11:
         c7:5e:6c:3d:2e:b3:c6:b2:7d:2a:13:93:e3:55:83:a0:65:31:
         a6:c1:32:44:ae:11:83:c6:1c:9c:42:2b:37:25:78:aa:c5:a6:
         2d:84:32:c9:e0:4b:2b:f3:29:9d:3e:57:30:86:99:cc:4a:d1:
         7d:1b:63:ba:86:34:a0:ad:2b:d0:59:a1:d9:7d:d3:25:df:f5:
         c1:c0:d5:f5:69:1d:6f:0a:18:8d:cb:01:8c:21:6d:e0:69:a9:
         e5:92:7f:eb:05:3b:51:4e:6f:9d:83:63:7c:5b:ea:7b:73:e2:
         c7:17:c4:eb:ee:ee:bd:ec:96:55:1e:24:8f:3b:71:58:f9:c3:
         29:1a:e0:3e:b4:09:6b:6f:f6:bf:bc:b6:d8:bb:8a:b8:f0:ca:
         3f:d4:3e:05:db:99:68:93:48:b2:a3:73:81:dd:84:63:c6:de:
         e3:61:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:33:57 2025 by rpki-client