Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
File:                     9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer (raw, json)
Hash identifier:          uMq8I7sEXsKL5DIZ/1DBwW2rgFi1YuDKMrJTv61Rg4c=
Subject key identifier:   97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55AF15745D1DDC1B5ACA5122EBF3157E5B2F56AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 16:44:03 +0000
Certificate not after:    Thu 05 Mar 2026 16:49:03 +0000
Subordinate resources:    AS: 269219
                          IP: 45.182.0.0/22
                          IP: 2804:6130::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:af:15:74:5d:1d:dc:1b:5a:ca:51:22:eb:f3:15:7e:5b:2f:56:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 16:44:03 2025 GMT
            Not After : Mar  5 16:49:03 2026 GMT
        Subject: CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:5b:75:b1:4c:47:dd:ba:31:d4:ce:bf:6a:
                    ee:42:37:31:ef:22:32:68:b8:4b:af:da:a2:bf:39:
                    65:ec:73:42:38:0d:9d:05:79:06:5d:1c:db:b8:34:
                    41:ca:66:47:4b:88:5c:78:2f:da:ad:6e:25:2d:88:
                    f1:96:c1:33:98:a0:98:bb:4c:1b:db:9b:68:ed:ae:
                    19:10:98:4b:93:15:58:fb:34:d7:d9:23:56:62:ac:
                    11:52:ad:3f:93:95:2b:fd:a9:06:93:c9:c4:54:05:
                    4c:c2:5b:c4:ce:d2:a7:79:65:38:4f:10:9c:b5:c7:
                    5d:06:39:d4:5f:d1:cf:76:b5:dd:04:87:65:ea:13:
                    ca:ab:bc:74:45:a2:3f:a8:4d:c1:3f:10:d4:77:b2:
                    f1:33:c0:13:bf:20:2b:cb:fa:0b:98:a9:79:5c:cf:
                    c3:b5:88:61:f7:69:7e:0f:b4:23:69:f1:ec:85:70:
                    ee:be:2f:5a:df:f4:be:3a:41:5a:50:62:9c:2d:78:
                    4c:c5:3a:4e:73:af:27:b4:72:65:03:9b:dc:94:f4:
                    5f:14:a3:a6:c7:68:35:11:bb:7f:e1:17:69:10:ec:
                    d4:1d:27:fe:85:f8:25:5e:58:41:98:e8:bf:02:ee:
                    60:f0:be:bc:71:cb:82:87:8f:59:0a:ed:dc:91:e5:
                    8e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.0.0/22
                IPv6:
                  2804:6130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269219

    Signature Algorithm: sha256WithRSAEncryption
         07:cb:b3:ee:b6:43:6e:14:38:ea:6f:f1:f3:e7:ec:f6:48:ae:
         af:77:65:12:79:55:03:3b:bd:02:b0:de:1a:b0:3d:29:41:ba:
         64:7f:fb:c7:c0:9a:f2:a0:f8:be:c8:b1:6d:46:12:94:ca:06:
         1b:56:b7:ce:72:97:6a:e9:8d:a0:ba:49:7e:e2:8c:2a:a0:3d:
         fc:a1:2c:da:6f:05:1d:4c:25:b6:35:ca:80:0b:01:c2:a8:b2:
         34:29:65:a2:37:76:b4:42:69:d3:36:68:8f:64:17:4a:2d:1b:
         8c:b4:76:58:32:64:1a:83:39:f6:dd:e8:f7:12:49:a7:0e:d0:
         4c:0a:cb:05:39:27:38:03:68:2d:c9:92:59:ce:94:58:07:cd:
         16:59:21:ee:29:8b:db:95:67:88:0a:95:c4:cc:32:53:26:7d:
         10:f7:97:a7:ed:d3:b6:43:64:17:e4:d8:35:b8:e9:1e:e0:24:
         2d:0f:c9:e3:27:40:6d:a8:ea:54:d6:a1:cd:93:90:d5:bc:fe:
         16:a7:8f:02:08:4f:97:c8:10:32:f1:7b:08:9f:d6:11:71:7e:
         0b:37:96:7c:a4:0a:d4:05:83:59:90:b3:36:bd:ce:a6:39:0c:
         4e:b7:3e:34:29:0d:29:8e:4f:7e:70:1e:d7:17:b0:8b:bf:94:
         0e:d6:c5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:35:54 2025 by rpki-client