Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.cer
File:                     934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.cer (raw, json)
Hash identifier:          /uf9pmsA+3lzEP3HTh9+X42YFJtmIS0cP191UOTovP4=
Subject key identifier:   93:4D:D1:2E:97:C2:F4:04:35:AD:E3:46:2B:AE:C1:F3:7C:8F:B7:FB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6F0FA814F7E3398559E3A106FB77B19C17C4E6F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Sep 2025 20:59:50 +0000
Certificate not after:    Thu 17 Sep 2026 21:04:50 +0000
Subordinate resources:    AS: 265482
                          IP: 168.197.140.0/22
                          IP: 2804:34d0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0f:a8:14:f7:e3:39:85:59:e3:a1:06:fb:77:b1:9c:17:c4:e6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 18 20:59:50 2025 GMT
            Not After : Sep 17 21:04:50 2026 GMT
        Subject: CN=934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:3c:3a:5a:27:2c:85:bc:56:ec:9f:f7:ad:
                    84:be:be:b1:c8:95:51:4e:52:6f:08:3f:98:fe:46:
                    8a:e9:9c:5a:d4:98:e0:7f:16:89:10:31:63:19:ba:
                    09:62:cd:95:02:f0:1c:f5:c0:44:a4:81:d6:eb:47:
                    1d:a8:fc:e5:02:e3:5e:2c:d7:22:dc:bb:d7:a8:b7:
                    4a:7a:34:3f:1a:3f:53:c1:2f:d9:c9:3a:f7:d5:ac:
                    f0:ae:93:f9:92:03:21:73:45:ff:d4:f7:66:57:46:
                    08:d5:f9:98:e5:af:cf:c2:8a:3f:72:9f:b0:e5:6a:
                    7d:df:80:41:4b:bd:dd:5e:25:98:28:17:e8:8c:79:
                    43:84:9f:e9:f8:3e:96:66:ec:b7:e4:1d:2f:6a:5e:
                    21:cc:d5:63:7f:73:c4:03:0a:2e:82:44:e7:28:47:
                    b1:4b:5a:37:cb:55:57:9e:0c:47:28:4b:fa:79:83:
                    6d:25:71:53:eb:cb:b6:d2:ef:00:22:08:85:e6:88:
                    08:00:f5:0d:70:21:a1:a2:f0:7a:c3:1f:ca:bb:e9:
                    69:ce:4d:13:e5:3d:54:16:e0:fa:0e:fe:7a:77:2c:
                    a2:b6:d9:e1:a5:14:35:fb:74:2f:b2:01:73:79:da:
                    70:54:8b:ea:b2:de:98:a7:32:a1:b7:79:cc:12:f3:
                    5f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:4D:D1:2E:97:C2:F4:04:35:AD:E3:46:2B:AE:C1:F3:7C:8F:B7:FB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.140.0/22
                IPv6:
                  2804:34d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265482

    Signature Algorithm: sha256WithRSAEncryption
         ab:85:f8:3e:dd:81:ad:73:8c:be:0b:c2:68:04:df:ac:60:cd:
         66:ac:e9:48:3d:88:98:9f:3f:a1:84:74:e3:d0:35:5e:fa:a6:
         c0:18:d9:6a:9c:9f:35:65:76:f7:2b:2e:38:82:d9:86:c9:34:
         d0:30:16:92:68:1f:05:9f:35:37:ed:0e:ea:83:0d:1a:de:21:
         96:0a:8d:0e:b4:7d:d2:37:af:bf:c0:e6:f9:35:a9:38:18:4e:
         c9:7c:7e:05:a4:ae:38:7e:21:3d:10:90:12:6f:e8:7f:aa:a4:
         63:6a:e1:27:3a:ce:3d:ab:9d:1a:9d:d8:09:27:29:ff:b6:73:
         0c:9b:2c:95:25:d8:8d:bd:05:7c:38:91:01:bb:5e:f1:de:d2:
         69:cb:09:f7:ef:6b:d8:db:07:e9:e4:86:bc:b9:b0:e8:b7:e2:
         5c:fc:4e:f7:4d:ff:5c:98:d6:0e:e0:c7:7e:f0:5f:b8:f6:41:
         4b:4a:b0:77:40:3b:d0:9e:a6:3f:50:bb:35:56:82:7f:13:3a:
         e5:36:8b:eb:d7:91:40:b2:5f:d0:26:6f:a4:d4:00:f0:60:ca:
         86:e8:62:19:74:c1:fd:0c:ea:69:75:58:62:79:b0:c8:ba:47:
         ed:91:55:bc:b3:1e:15:0b:a1:75:15:86:aa:b6:1f:ef:4e:64:
         1f:da:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:03:25 2025 by rpki-client