Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4.cer
File:                     9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4.cer (raw, json)
Hash identifier:          C2ocDqlf75H9T0TNI6qJipMDaqJ9dxtYENjXXbeLHIk=
Subject key identifier:   92:20:AF:CE:99:7A:70:26:62:FC:F7:B7:5F:7E:FC:4E:FC:AC:62:A4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0444138B89288B276F5269A3B8D56854B9599D28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Jul 2026 09:17:44 +0000
Certificate not after:    Wed 30 Jun 2027 09:22:44 +0000
Subordinate resources:    AS: 266937
                          IP: 45.225.130.0/23
                          IP: 2804:4598::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:44:13:8b:89:28:8b:27:6f:52:69:a3:b8:d5:68:54:b9:59:9d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  1 09:17:44 2026 GMT
            Not After : Jun 30 09:22:44 2027 GMT
        Subject: CN=9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:b0:da:83:d6:bf:53:c8:cd:60:11:cf:8e:
                    2c:04:5f:48:c3:02:be:46:18:da:42:55:88:ce:50:
                    2f:23:23:6b:a2:04:f7:ee:d5:87:62:79:61:c0:6c:
                    51:c1:23:89:f4:da:90:fe:76:d8:fa:25:cb:42:44:
                    32:25:c0:63:22:c0:4b:54:26:2f:50:f4:0d:c1:e2:
                    cf:d1:83:bb:4e:bb:e1:f5:f3:28:61:cb:14:d7:8a:
                    6d:26:be:ee:64:62:1d:73:3b:e6:e2:20:fd:a2:c3:
                    77:d4:9c:66:25:c0:49:bf:af:88:13:66:15:97:19:
                    3e:fb:6c:bd:eb:60:6a:0e:4d:37:03:fd:20:79:9c:
                    6a:c4:bc:42:8b:a6:79:8c:f5:d0:d7:61:fe:0c:9e:
                    b3:89:88:23:c7:3d:69:6d:3a:06:52:3e:56:06:83:
                    c8:65:ea:86:8f:5e:1c:d4:e9:ee:19:5c:8a:f0:77:
                    50:96:ea:05:15:c7:e7:80:a2:4a:3f:20:4d:5b:1a:
                    d1:d5:ad:c5:a6:b8:99:13:b9:95:12:53:2d:71:bb:
                    3e:b8:ca:d5:4c:69:30:b8:0e:f4:64:04:16:8f:82:
                    07:01:0c:bc:d0:3e:d1:68:c2:aa:82:cf:fe:eb:57:
                    d0:9f:eb:97:c2:4d:29:0d:d9:25:22:44:10:60:f7:
                    06:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:20:AF:CE:99:7A:70:26:62:FC:F7:B7:5F:7E:FC:4E:FC:AC:62:A4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.130.0/23
                IPv6:
                  2804:4598::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266937

    Signature Algorithm: sha256WithRSAEncryption
         c4:ea:5e:cf:77:0a:59:78:e2:13:86:83:a5:a0:f4:13:77:2d:
         d3:d0:6e:4b:cf:1e:71:7b:ad:23:75:ba:e8:2e:13:33:c9:e6:
         c0:c0:c7:72:6a:3e:5e:41:57:10:5c:bb:04:a6:b2:d4:c7:dd:
         0e:f7:e5:61:fe:67:53:7f:81:8b:f2:9d:96:1f:ae:a7:aa:f1:
         38:61:87:58:99:ac:60:b2:0d:e0:67:e8:91:83:fd:ff:3f:e9:
         0d:f1:d5:6b:ec:4b:df:26:b6:f5:83:cc:e5:1d:95:39:6c:06:
         58:04:fa:12:b9:60:40:4b:aa:a2:00:09:99:a7:fe:e8:02:3b:
         d9:37:6d:a4:0d:f3:60:f1:75:b5:ee:22:10:3f:7d:0c:05:f4:
         13:f6:52:0d:a1:b7:f5:fc:79:0c:98:18:a9:b0:59:2e:53:c6:
         74:e3:44:3b:c2:d1:ba:00:22:ee:1c:07:39:b8:69:19:97:d9:
         7a:f0:fd:f9:7e:c0:46:cb:01:fe:e1:5f:58:4b:fa:94:16:cf:
         e5:19:b0:76:fe:17:e0:e5:e2:c4:fa:2f:b9:2c:a8:2c:f5:74:
         32:75:3a:93:f6:c6:d2:26:81:44:b9:5f:b9:5f:8e:ee:00:91:
         dc:21:0a:ff:83:6f:5b:0b:f7:bc:4c:3a:b1:df:8e:85:86:e1:
         d1:0a:c4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:21:02 2026 by rpki-client