Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98408164D264D668D190CF3DE6A09CDF1BD9915D.cer
File:                     98408164D264D668D190CF3DE6A09CDF1BD9915D.cer (raw, json)
Hash identifier:          m7M6sBKcnI2UZa6gt4uWpjX44L94xgBjMcTFg5hymU8=
Subject key identifier:   98:40:81:64:D2:64:D6:68:D1:90:CF:3D:E6:A0:9C:DF:1B:D9:91:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1EF3E110630A98317F75A6DBD084F4704E603859
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Oct 2025 19:30:15 +0000
Certificate not after:    Tue 27 Oct 2026 19:35:15 +0000
Subordinate resources:    AS: 263995
                          IP: 138.255.228.0/22
                          IP: 2804:2910::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f3:e1:10:63:0a:98:31:7f:75:a6:db:d0:84:f4:70:4e:60:38:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 28 19:30:15 2025 GMT
            Not After : Oct 27 19:35:15 2026 GMT
        Subject: CN=98408164D264D668D190CF3DE6A09CDF1BD9915D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:ff:f4:72:6f:aa:96:de:7d:8f:d5:e4:63:
                    3f:22:13:4c:bb:7a:12:6a:3e:1a:80:31:1c:a0:40:
                    70:42:3c:93:cf:1d:d7:2c:23:78:45:9c:66:58:b4:
                    2d:37:d1:e3:54:85:e3:b9:b5:9a:47:ec:9c:86:8a:
                    87:93:83:78:dd:ae:13:ed:ea:95:3a:cd:4f:e2:df:
                    95:b6:4b:17:38:e5:e4:25:db:4c:0c:b9:28:c1:1a:
                    85:3c:b8:c1:5a:1e:fb:7f:d7:4c:f4:ea:27:3d:39:
                    b0:ce:93:c8:68:e4:b3:04:3e:e2:44:86:77:85:70:
                    6f:ee:e8:a4:31:7c:85:f3:f9:06:a7:a7:f3:ac:64:
                    ee:1d:f5:f7:96:cf:02:aa:8f:97:c6:c5:ad:c3:ed:
                    c8:5b:59:6d:77:45:33:fe:eb:cb:2e:5d:80:53:bd:
                    e3:f4:29:98:d3:ab:6b:4f:38:f0:da:fc:cb:69:37:
                    8b:2c:15:b5:49:87:b1:1f:c9:4f:b1:f2:5c:db:54:
                    ba:3b:e7:af:c3:b9:9c:f0:2c:24:94:ff:8c:1e:29:
                    8d:da:96:96:b9:6a:7c:15:84:69:d4:84:48:5c:e0:
                    0f:b6:3d:41:52:ee:74:97:e2:4f:f4:f4:59:84:04:
                    f1:b3:e3:b1:8d:8a:60:56:9f:5d:78:dd:eb:50:67:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:40:81:64:D2:64:D6:68:D1:90:CF:3D:E6:A0:9C:DF:1B:D9:91:5D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.228.0/22
                IPv6:
                  2804:2910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263995

    Signature Algorithm: sha256WithRSAEncryption
         2f:86:b8:de:f8:80:28:8e:42:d4:4f:93:48:88:4c:61:cd:da:
         66:fa:15:88:dd:ce:a6:b7:21:dc:57:a6:ab:7d:8b:74:01:8e:
         af:51:51:91:b4:c1:a3:9c:18:b0:8a:99:bf:5d:a3:84:6a:23:
         44:f9:a3:49:9e:72:92:d1:de:ca:4b:50:38:0f:72:7f:8a:97:
         ee:d1:83:f8:ae:85:bc:19:66:98:4f:01:fa:44:53:e6:74:f4:
         6c:55:62:ab:1b:73:e2:58:ae:f9:86:74:39:75:d5:38:5f:b7:
         71:16:17:28:e4:e5:32:51:9c:98:7a:ee:e0:2f:cc:74:d2:30:
         3e:6e:5d:fd:48:9a:8c:20:19:4c:7c:e6:49:fa:90:63:09:36:
         85:b5:b4:6b:0b:71:41:c3:17:41:ff:15:d6:9a:30:92:c4:7a:
         e6:a8:fa:ee:bf:c0:2c:fc:c7:aa:64:86:32:f7:1e:1c:88:9f:
         f1:35:1b:00:93:68:43:4b:98:b6:94:98:17:78:e6:8f:f6:3e:
         81:04:3a:6b:d7:a4:38:f0:03:61:d7:7f:bc:e7:d5:f4:41:44:
         f1:62:9c:7a:6e:30:ad:19:b0:48:18:67:7e:3a:cd:5c:c0:90:
         b0:74:be:88:39:11:98:74:7b:6b:b1:07:93:dd:09:85:4d:fe:
         ae:e0:fe:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:24:21 2025 by rpki-client