Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/56FD9BA722A710362629E1DF951F0608C33EA1E9.cer
File:                     56FD9BA722A710362629E1DF951F0608C33EA1E9.cer (raw, json)
Hash identifier:          9VAHh9F1ZEDK1pHcD5yAddEyfITrTaQxFP9uDdLiKjw=
Subject key identifier:   56:FD:9B:A7:22:A7:10:36:26:29:E1:DF:95:1F:06:08:C3:3E:A1:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E7AD00E8E04FA0FBB9989717C0E2758BB0BFF67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/56FD9BA722A710362629E1DF951F0608C33EA1E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Sep 2025 18:53:34 +0000
Certificate not after:    Mon 14 Sep 2026 18:58:34 +0000
Subordinate resources:    AS: 266343
                          IP: 170.239.4.0/22
                          IP: 2804:365c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7a:d0:0e:8e:04:fa:0f:bb:99:89:71:7c:0e:27:58:bb:0b:ff:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 15 18:53:34 2025 GMT
            Not After : Sep 14 18:58:34 2026 GMT
        Subject: CN=56FD9BA722A710362629E1DF951F0608C33EA1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:c6:c0:2d:e9:c6:ef:c2:f3:28:c0:e7:4a:
                    cc:c4:e1:59:2c:af:ea:bc:4f:1f:e2:66:ec:17:e4:
                    98:d3:42:85:c4:7a:fc:40:84:ab:77:46:9a:66:ce:
                    41:26:a5:f9:86:39:99:73:cc:34:21:c7:f1:c4:de:
                    9e:0c:b5:20:3b:40:e2:95:3e:f2:a0:79:55:7e:90:
                    82:67:26:f0:42:35:65:9a:11:f8:1f:c1:a3:d6:ef:
                    88:37:24:5e:d3:49:95:7d:fe:85:2e:7e:7a:2b:49:
                    7a:17:d6:15:60:56:73:cb:67:8c:49:98:f8:70:2a:
                    0e:93:f3:fc:35:18:16:23:a9:f0:bf:1b:ec:b4:9f:
                    2b:a0:14:9b:42:5f:e6:f4:f5:f1:0f:9b:4e:7f:e1:
                    d6:35:0b:2b:99:8f:b7:8c:36:97:a2:9a:e5:2a:77:
                    ff:a9:ba:6e:f2:76:d4:86:4a:1b:45:85:37:4c:39:
                    f9:98:a2:44:7d:12:5a:4d:55:81:e3:54:dc:0b:2b:
                    32:33:68:ee:57:59:36:c3:13:85:28:56:2d:d7:16:
                    c1:06:ef:71:71:1b:ac:f1:77:8f:f7:6b:85:18:b6:
                    98:5a:ad:6a:fa:60:b6:4b:6e:21:21:b4:15:d7:33:
                    5d:67:6c:33:88:57:bf:1b:9a:0e:25:bd:62:0b:15:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:FD:9B:A7:22:A7:10:36:26:29:E1:DF:95:1F:06:08:C3:3E:A1:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/56FD9BA722A710362629E1DF951F0608C33EA1E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.4.0/22
                IPv6:
                  2804:365c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266343

    Signature Algorithm: sha256WithRSAEncryption
         6b:20:6e:3e:a8:c9:d6:be:8b:85:0f:f1:ee:77:02:46:ff:7d:
         00:fd:69:e1:ef:ba:02:3c:a9:ab:4b:03:34:06:1e:fd:ba:1f:
         d3:16:a1:fc:bd:05:d5:da:4a:c8:c3:28:2c:f5:ab:73:d3:bf:
         1a:d7:6a:9d:df:bc:b3:98:53:25:ea:20:08:fb:c3:d6:aa:82:
         44:ac:52:d2:30:7a:e0:69:d8:76:0e:ea:1c:06:9c:e0:4e:2e:
         16:40:35:3d:5b:ae:9a:72:5e:d3:f9:70:10:3c:ad:c6:ca:33:
         71:a4:d1:95:9a:bc:0e:f4:27:85:16:13:f2:6d:5a:a3:3a:39:
         b2:c9:4f:70:30:ad:f2:69:16:83:e8:1c:0b:a2:01:6a:4e:25:
         6c:2a:fb:28:71:9f:78:79:98:b8:3a:6b:73:22:7c:e4:a3:bd:
         0b:14:52:6e:2d:eb:a8:d0:9f:4e:47:f4:25:b0:17:56:5b:2c:
         fa:dc:39:20:ef:31:db:d6:c6:44:c2:32:e8:fb:81:38:81:a6:
         e4:60:0b:05:83:8f:42:ae:73:59:d9:15:bd:d2:7c:a9:fa:21:
         e2:b1:93:29:e5:91:df:ad:f1:42:05:d7:d9:d1:5c:2b:a8:b6:
         3d:b9:a5:b6:fc:91:94:eb:23:4d:e7:a7:d4:d7:4f:04:9a:f4:
         6a:0a:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:22:48 2025 by rpki-client