Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/91A9CE422C010D9E7886B57603291103F2C9DB57.cer
File:                     91A9CE422C010D9E7886B57603291103F2C9DB57.cer (raw, json)
Hash identifier:          7AJVlYnm70TtUvDr08s7c6rqYW/oYA1MMLwpJAl0NI4=
Subject key identifier:   91:A9:CE:42:2C:01:0D:9E:78:86:B5:76:03:29:11:03:F2:C9:DB:57
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0231E9DD06886CFF451A24C40CCB2BEE6080969E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 May 2025 20:02:08 +0000
Certificate not after:    Wed 27 May 2026 20:07:08 +0000
Subordinate resources:    AS: 271294
                          IP: 201.221.116.0/22
                          IP: 2804:7940::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Jun 2025 11:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:31:e9:dd:06:88:6c:ff:45:1a:24:c4:0c:cb:2b:ee:60:80:96:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 28 20:02:08 2025 GMT
            Not After : May 27 20:07:08 2026 GMT
        Subject: CN=91A9CE422C010D9E7886B57603291103F2C9DB57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:c0:ad:a9:16:6f:80:ec:16:fd:8f:a1:e0:
                    f5:31:53:9e:ee:0e:fa:61:7d:1b:d3:1a:0f:0e:ef:
                    17:0c:2f:25:3a:52:d3:bd:8b:81:5e:74:52:f2:1a:
                    57:53:31:99:71:07:69:f4:34:61:c4:86:5c:2f:19:
                    42:de:70:21:56:c5:a5:fc:3c:e1:e7:a7:62:52:b8:
                    46:93:40:ad:05:37:bc:66:02:63:91:e5:6e:a1:f6:
                    e8:84:60:fc:38:54:3c:01:d5:77:11:0f:bb:9e:e7:
                    d1:aa:1e:d1:81:cf:38:ca:30:b3:05:c2:5d:35:f2:
                    a5:a2:76:ce:24:ec:6a:62:83:4c:fe:d6:91:60:ec:
                    ce:f0:96:cb:4a:05:6b:dc:01:e5:05:71:26:0c:30:
                    3c:c9:8d:d0:c8:18:cc:7a:03:69:a5:59:83:fe:99:
                    bc:ed:b8:9f:f5:aa:cb:de:74:10:ec:86:51:a5:4c:
                    32:41:3c:94:0d:ba:3a:0a:31:77:bb:4a:df:31:09:
                    54:e8:86:8e:d4:ac:10:f0:a8:39:cf:fe:50:fb:1b:
                    4b:bd:ac:ba:a6:70:c7:65:8a:d9:03:b5:d2:44:a1:
                    55:3e:0c:c2:44:cd:c8:a5:e7:1f:44:b5:45:d0:df:
                    dd:65:12:01:4a:ee:95:12:f4:01:4e:76:d5:52:14:
                    eb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:A9:CE:42:2C:01:0D:9E:78:86:B5:76:03:29:11:03:F2:C9:DB:57
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.116.0/22
                IPv6:
                  2804:7940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271294

    Signature Algorithm: sha256WithRSAEncryption
         4a:e9:e7:37:a8:ff:9c:ad:2e:10:f2:82:6c:54:e8:27:8e:3f:
         b9:0d:c0:00:ef:9b:54:f8:25:27:b8:5e:f0:dc:35:26:06:a5:
         17:8b:03:a3:06:aa:f1:20:8b:ef:34:d9:ac:77:d8:2f:29:5b:
         a5:ab:63:8f:cf:86:e6:c5:20:2e:4d:09:34:b9:48:07:79:42:
         a7:3c:06:b9:be:15:8f:04:40:12:33:d6:58:4f:2f:17:ef:ac:
         26:c0:b9:cf:a9:65:54:3b:a0:21:a2:d2:ec:08:61:20:10:cb:
         20:bc:91:a0:db:7f:59:e1:f3:14:89:33:86:57:62:c9:0f:10:
         70:3e:d3:89:ba:07:3d:8d:b9:27:f2:37:77:18:e6:b0:de:dd:
         53:c0:04:27:c4:04:ba:e8:0c:95:65:57:b0:c2:26:0b:81:c9:
         f8:d5:ee:98:b3:a7:8c:9e:36:ec:49:96:3f:0e:e9:f4:25:40:
         8e:26:ae:4b:22:e5:3a:cc:93:b5:60:5d:3c:2c:40:7f:30:3b:
         0f:8a:a9:79:ad:42:3c:09:6c:a1:71:6e:7e:6a:37:f5:70:05:
         fe:a5:53:51:4d:ec:c6:ee:62:8e:d8:fb:27:fe:e6:80:b2:d8:
         2d:e6:38:9c:a3:f1:3d:bb:13:a7:01:70:93:a6:b8:d6:d0:6b:
         51:c4:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:24:37 2025 by rpki-client