Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
File:                     9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer (raw, json)
Hash identifier:          UiXUMNVFnYJMR++NisFGemVFmfKpO2U+rTYriUcomaY=
Subject key identifier:   98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7533C3CBA5C199781FDDECE91A3C99AA0D26E142
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 08 Jun 2025 11:19:16 +0000
Certificate not after:    Sun 07 Jun 2026 11:24:16 +0000
Subordinate resources:    AS: 262293
                          IP: 131.161.132.0/22
                          IP: 138.94.108.0/22
                          IP: 143.202.240.0/22
                          IP: 168.232.152.0/22
                          IP: 170.80.176.0/22
                          IP: 177.154.192.0/19
                          IP: 179.107.224.0/19
                          IP: 2804:a80::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:33:c3:cb:a5:c1:99:78:1f:dd:ec:e9:1a:3c:99:aa:0d:26:e1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  8 11:19:16 2025 GMT
            Not After : Jun  7 11:24:16 2026 GMT
        Subject: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:2b:cb:69:46:a1:f6:9c:62:7a:10:92:a5:
                    d9:6f:57:fb:80:c9:e7:83:fc:f3:f4:1a:18:1d:31:
                    a7:5f:f1:64:81:b3:86:c9:aa:53:1c:cc:63:6d:09:
                    9c:18:89:0a:43:a6:54:b9:81:ac:1d:2b:2b:1f:60:
                    5a:9d:e5:12:4c:97:e6:67:32:66:19:3d:5b:d0:83:
                    51:b5:1e:d6:d8:3e:47:83:24:96:5a:99:fc:7e:68:
                    d7:62:5e:47:e7:3d:18:b5:30:fb:a6:36:93:cb:1b:
                    18:ed:34:ae:a0:ef:66:2a:60:a3:c4:3e:e2:9e:c4:
                    8a:e5:ce:9a:83:c3:63:59:20:36:e2:52:f5:01:5c:
                    e7:86:ec:54:1d:98:a1:ba:52:cb:20:57:f0:73:4a:
                    18:10:c3:11:fd:01:2b:ee:97:63:a6:99:44:9e:df:
                    20:79:4f:ad:e2:d9:42:9a:4d:d9:76:03:c2:3f:fa:
                    15:97:23:f5:cd:9d:4c:5a:23:90:0a:26:89:f0:18:
                    da:46:f6:04:98:77:5d:ff:7a:a8:78:8b:34:08:be:
                    81:80:43:ba:4e:39:b5:a5:65:82:e3:37:8e:b5:08:
                    db:e1:80:43:e0:08:15:17:86:13:19:68:ba:b1:88:
                    67:a2:6d:58:bd:93:f5:c8:13:48:f8:12:90:21:43:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.132.0/22
                  138.94.108.0/22
                  143.202.240.0/22
                  168.232.152.0/22
                  170.80.176.0/22
                  177.154.192.0/19
                  179.107.224.0/19
                IPv6:
                  2804:a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262293

    Signature Algorithm: sha256WithRSAEncryption
         ba:7e:7e:aa:2e:3b:43:ed:c6:8a:a4:b3:55:a0:95:2c:72:e3:
         4e:a3:54:cd:37:49:75:91:65:b7:6d:78:e2:2f:dc:e4:df:0d:
         96:55:ea:c5:eb:ed:c3:ae:4b:37:05:b0:df:5e:96:be:f5:2f:
         18:3e:02:24:72:98:16:d3:d6:f1:a1:73:b3:a8:29:3f:4a:26:
         05:5b:86:06:52:40:33:e0:79:11:35:1d:dd:50:b3:0f:b3:39:
         76:48:29:6f:75:56:15:c5:cf:9b:a3:df:49:5d:38:85:c8:26:
         70:0c:53:03:a6:51:cb:41:9f:73:70:9c:64:05:a0:db:b6:7f:
         b3:67:a5:6a:1e:22:65:f5:15:f8:04:bb:82:da:88:c5:27:1d:
         b9:75:71:34:b0:71:9c:d1:b9:4b:98:0a:4a:98:0c:6c:82:ef:
         24:1b:e5:bf:7b:4f:81:f5:11:a4:22:cd:46:ae:fb:5a:c7:11:
         9f:1c:be:b1:80:9f:a8:ef:04:7a:d3:72:d7:f8:12:b4:6c:fa:
         57:dc:bd:1e:9a:aa:7d:0a:98:f1:19:a4:9c:5c:44:d2:08:9f:
         0b:33:9b:78:49:4b:c3:db:a0:0b:fd:a0:82:77:b9:90:0a:24:
         75:42:4c:e0:94:8a:6a:b9:0d:04:09:33:fc:9c:99:d3:cf:f7:
         82:fc:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:27:27 2025 by rpki-client