Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.cer
File:                     82A1D0DA8B4FFB7B678B97B08C62245A144810AF.cer (raw, json)
Hash identifier:          nY9COvOVZCxhn65HO6GZAEe2769D9ixMf5sc1EC9Cz0=
Subject key identifier:   82:A1:D0:DA:8B:4F:FB:7B:67:8B:97:B0:8C:62:24:5A:14:48:10:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0FF5CA52E5C5EEFF9CA15DDB1DC41F6CC2D55D09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Sep 2025 14:07:39 +0000
Certificate not after:    Mon 31 Aug 2026 14:12:39 +0000
Subordinate resources:    AS: 271225
                          IP: 179.49.216.0/22
                          IP: 2804:782c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f5:ca:52:e5:c5:ee:ff:9c:a1:5d:db:1d:c4:1f:6c:c2:d5:5d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  1 14:07:39 2025 GMT
            Not After : Aug 31 14:12:39 2026 GMT
        Subject: CN=82A1D0DA8B4FFB7B678B97B08C62245A144810AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:ac:1c:84:4c:e7:53:6f:b8:2f:d4:76:d5:
                    43:a1:aa:37:2b:c7:d6:f9:9c:5a:69:32:40:9e:91:
                    fa:80:2a:f6:e0:ed:a9:bf:f5:b6:14:7c:c8:7e:b4:
                    03:f4:72:95:b3:34:27:75:fa:21:eb:41:fe:4b:7a:
                    de:a4:72:aa:b9:f1:da:94:92:93:62:08:22:22:b9:
                    e0:25:d8:6e:62:70:9c:29:c4:8a:34:e3:49:d4:40:
                    d3:f9:19:2d:0b:8f:1d:b6:36:fa:6d:52:a2:69:64:
                    24:7e:7e:6a:e6:90:d0:50:2a:45:5a:a5:d6:09:cd:
                    27:bf:a3:aa:65:fe:9b:77:d2:f2:62:c3:c6:cb:0b:
                    31:fd:7b:16:ae:e1:fb:e5:da:12:06:b9:5f:a4:6f:
                    4f:3c:3e:c1:e5:cc:55:53:0f:e3:49:0b:19:22:7b:
                    0d:c4:22:0e:eb:9c:21:95:ed:7e:23:6b:41:2c:44:
                    4e:31:a0:39:da:7e:37:db:56:a0:5e:c2:85:c7:90:
                    c4:71:df:ef:01:65:e7:e3:26:03:00:61:e8:68:84:
                    1e:20:e1:0a:08:f7:9b:29:8d:16:63:2e:06:5f:c0:
                    0a:b2:a6:5f:28:a3:0a:56:ab:2a:17:5d:e7:50:de:
                    26:0e:7a:c0:b9:cd:ac:20:8d:8d:d5:14:95:c1:3e:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:A1:D0:DA:8B:4F:FB:7B:67:8B:97:B0:8C:62:24:5A:14:48:10:AF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.216.0/22
                IPv6:
                  2804:782c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271225

    Signature Algorithm: sha256WithRSAEncryption
         ae:98:e9:85:f1:a2:cb:5f:44:de:ba:fc:e8:a6:15:9d:e1:27:
         2f:55:a6:8d:d7:85:13:3e:16:93:c0:e4:88:5a:d3:fd:73:99:
         13:7a:2f:36:ca:09:24:a0:d3:88:83:98:26:46:aa:ef:c6:00:
         61:35:71:1a:9b:5b:2a:73:35:57:36:52:69:26:c9:c5:66:cb:
         77:03:d0:7a:7e:13:25:e9:fd:dc:05:9b:e3:26:04:92:74:ec:
         01:6f:f8:8f:15:99:41:ab:95:53:7d:3e:17:7a:2d:b8:cc:8a:
         1a:5f:40:b2:2c:59:67:c7:5a:5c:bb:4b:93:fc:9b:bd:ff:77:
         1d:ca:d4:9c:84:ea:0b:02:7b:8b:21:da:c2:84:1e:db:5b:40:
         0b:51:b9:56:f2:0c:cc:2a:2c:f0:89:31:19:58:b1:59:a2:d6:
         2d:2c:0e:51:a2:f1:ab:aa:b7:67:4d:bb:ce:b5:21:be:98:51:
         10:e6:c6:58:c3:6c:fc:c4:8c:e9:2e:06:d1:e8:b5:25:5c:12:
         f1:fc:5b:36:01:b8:bf:b1:5e:0a:63:26:f1:34:71:df:ae:4c:
         e0:8b:1e:89:63:92:df:cd:bd:69:e7:91:1b:a5:5d:33:14:fd:
         22:e8:1b:f7:1e:4c:93:f4:df:a7:c1:b2:42:4a:05:ff:d0:11:
         82:33:8e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:58:08 2025 by rpki-client