Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer
File:                     9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer (raw, json)
Hash identifier:          uk7LHcTVSKWhbLoKCI0qhK744zA33pkPIBAsOyTSH4E=
Subject key identifier:   9B:54:30:8B:91:52:DD:41:5C:BD:12:2B:07:6F:A6:C8:D2:B9:93:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B15D15B2CA61CEA18DDE030C7375C51D899831F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Jul 2025 14:30:08 +0000
Certificate not after:    Tue 21 Jul 2026 14:35:08 +0000
Subordinate resources:    AS: 262550
                          IP: 143.0.40.0/22
                          IP: 168.197.4.0/22
                          IP: 177.72.168.0/21
                          IP: 2804:28e0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 07:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:15:d1:5b:2c:a6:1c:ea:18:dd:e0:30:c7:37:5c:51:d8:99:83:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 14:30:08 2025 GMT
            Not After : Jul 21 14:35:08 2026 GMT
        Subject: CN=9B54308B9152DD415CBD122B076FA6C8D2B993B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:09:bb:2e:ea:ea:d6:1f:5b:33:e8:56:38:
                    24:5c:45:83:62:4c:b0:72:13:6f:71:ec:c8:39:4e:
                    ae:e1:b7:84:d8:e4:f1:20:67:73:d3:3d:bd:4b:e9:
                    4d:e7:89:2f:48:95:81:19:46:87:48:e5:af:77:d1:
                    af:18:62:85:a0:1e:45:2d:ff:fa:6f:ef:21:96:8a:
                    54:0f:db:03:8c:2e:1a:c9:26:da:46:c5:dd:2d:27:
                    e7:34:aa:5d:97:13:c0:c5:3f:bf:f0:d4:58:06:6d:
                    52:38:28:b2:fb:8e:d9:7b:0f:88:16:f9:00:b1:a9:
                    48:67:4c:0e:f2:71:a1:4c:8f:f2:0e:50:44:df:21:
                    f6:56:63:08:b1:4a:22:af:42:dd:5d:4d:aa:08:06:
                    62:d6:15:38:d8:2f:81:54:cf:fa:48:02:f5:f5:a3:
                    fa:42:49:a0:83:09:5e:d8:eb:79:aa:50:df:06:bd:
                    21:47:55:b2:4b:31:0b:7a:fb:83:79:07:68:50:86:
                    c1:eb:3f:e4:f8:e7:73:73:e4:6f:93:17:30:c2:96:
                    c4:28:23:5b:a5:5e:62:a8:50:cf:dd:fa:a2:2d:c9:
                    ab:8a:98:fe:8f:d0:07:b4:f4:7f:5d:30:d3:28:85:
                    ff:3d:2c:f4:8f:e0:89:23:4d:f9:8f:c5:c6:98:1f:
                    06:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:54:30:8B:91:52:DD:41:5C:BD:12:2B:07:6F:A6:C8:D2:B9:93:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.40.0/22
                  168.197.4.0/22
                  177.72.168.0/21
                IPv6:
                  2804:28e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262550

    Signature Algorithm: sha256WithRSAEncryption
         d1:59:74:e0:51:a4:5a:b7:cf:ba:64:9a:5f:7a:71:93:ec:78:
         c3:6b:e6:07:09:a7:90:c6:f9:da:79:2b:d9:e5:7a:9c:88:19:
         9e:87:b9:ca:42:ec:8c:24:92:6a:d4:46:2e:d1:ae:e2:d7:d9:
         08:f5:a2:f0:f4:38:cf:c9:81:1f:9f:54:83:cd:7c:e1:7b:fb:
         b8:cb:02:e0:40:a4:12:2a:12:7d:43:5f:9c:f3:ff:85:9c:bd:
         b7:9a:25:d5:4f:b7:77:67:f5:74:40:70:82:ca:da:b4:56:3b:
         cd:d6:34:aa:d0:25:aa:bf:04:ce:59:6c:76:08:67:67:95:20:
         cc:4d:e1:85:c5:40:4e:28:c2:7e:3c:57:6c:ca:82:84:33:5e:
         e4:b1:b9:65:dd:f6:c8:a8:30:ad:dc:62:40:08:ca:93:c5:3a:
         3a:89:04:f7:78:97:b0:0d:43:70:86:73:56:aa:8b:df:cf:33:
         47:36:30:b9:a0:96:08:47:fc:1b:b1:86:30:b6:ed:41:12:69:
         17:10:ae:e0:9c:d0:4e:77:56:8f:b2:41:4e:48:02:5b:1b:63:
         9c:c9:fd:0a:a2:43:03:3b:29:8d:6b:90:00:55:82:9a:59:56:
         2b:ac:69:03:af:d4:cc:53:a6:0a:64:c4:e7:41:be:a3:ad:c7:
         8a:13:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:17 2025 by rpki-client