Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
File:                     98A11CF45A997CA909604F2E4619398BBAA2D923.cer (raw, json)
Hash identifier:          mG8R63eJe7VL5A8orOgZEkUV4BysQFL2jYRoFh+mgGE=
Subject key identifier:   98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5DF9A6CA4604B8241BD52E379A2BF49152342F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.mft
caRepository:             rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 03:01:04 +0000
Certificate not after:    Thu 05 Mar 2026 03:06:04 +0000
Subordinate resources:    AS: 266256
                          IP: 192.140.100.0/22
                          IP: 2804:3d24::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 16:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f9:a6:ca:46:04:b8:24:1b:d5:2e:37:9a:2b:f4:91:52:34:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 03:01:04 2025 GMT
            Not After : Mar  5 03:06:04 2026 GMT
        Subject: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c8:6c:1c:72:6a:65:7d:77:f2:d9:e1:c4:b3:
                    69:e3:0f:c8:1e:40:c2:47:b5:a8:a0:80:d8:d6:9c:
                    22:3d:bb:ae:e6:e6:34:1d:87:48:ce:e1:4c:1f:e1:
                    99:8f:57:3c:49:98:fd:46:4e:05:d9:bc:3a:0e:c4:
                    3e:4e:df:c4:46:20:29:81:92:c1:db:5d:3d:b4:fe:
                    1e:77:b9:51:d8:98:ed:11:88:f3:c3:bd:52:a6:5d:
                    93:06:95:e8:d7:d2:6a:f8:c5:87:7a:11:86:3f:83:
                    11:5a:6c:3e:f4:e3:04:1e:16:2d:80:44:f7:87:3a:
                    5d:1e:04:db:64:96:e5:f9:4c:e5:b8:a5:d8:b2:57:
                    9d:22:f7:d5:6e:25:29:e6:ae:98:be:fe:44:9d:7f:
                    2f:1e:33:27:85:98:91:4f:23:e1:d0:34:21:17:5f:
                    1f:e3:76:74:8b:71:8d:35:aa:7a:70:c0:65:df:12:
                    69:2a:e8:11:10:23:fa:d4:ed:b1:cc:3b:69:08:eb:
                    c0:f2:f9:6a:5c:1d:c8:41:d1:85:4e:29:f8:3c:5b:
                    28:2d:59:22:67:5b:49:db:49:f6:8c:dd:f3:46:e8:
                    b6:84:12:ba:00:25:02:53:f4:33:10:76:0d:14:9b:
                    1f:4d:64:fa:46:e8:91:5e:5e:e5:3b:94:8b:63:9d:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.100.0/22
                IPv6:
                  2804:3d24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266256

    Signature Algorithm: sha256WithRSAEncryption
         59:32:e7:c9:c3:71:28:24:13:f4:b8:c7:45:2e:72:9c:38:40:
         db:68:a2:a6:1a:74:ab:5d:db:81:8c:5b:63:03:69:d5:1e:78:
         35:22:ed:20:6f:35:62:93:cb:85:c4:bb:c5:ed:6f:86:3b:d6:
         f5:5e:8e:8a:4e:46:f5:f0:dc:a5:3e:e5:ca:23:88:71:e1:18:
         6f:53:f5:30:5f:31:f8:d3:38:0a:ca:28:96:ff:9f:ba:23:86:
         d0:88:c2:ac:19:cd:fc:39:57:68:e3:fb:31:63:7c:44:79:70:
         65:8f:35:48:bf:c2:3a:a1:ce:a2:7d:31:ee:4e:ea:e8:99:9d:
         b0:6f:c4:78:c0:87:8f:b6:02:b0:03:59:99:cb:5b:89:3d:70:
         9b:87:35:f0:4c:b2:5d:af:f8:56:53:93:d4:cc:7b:ab:e5:6a:
         6f:52:e4:ec:f4:5d:83:3f:0d:d2:b6:b0:a1:2c:52:a5:50:4d:
         cb:1e:6f:69:72:21:ad:f5:9e:12:27:34:73:71:26:b7:ed:88:
         ef:bb:73:40:d3:bb:48:cc:81:1d:6f:76:fa:25:cf:b1:76:3e:
         10:3d:43:64:d0:1f:ec:db:bc:2b:a9:66:e0:11:55:7e:8d:65:
         02:75:b2:d0:bc:e5:39:46:25:5f:cf:ac:f8:74:ca:d6:40:87:
         45:e5:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:32:07 2025 by rpki-client