Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.cer
File:                     9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.cer (raw, json)
Hash identifier:          aUDB9IX3JlbE3mYpSlQesuvyKwVE27wVJ8VUOrM4I3c=
Subject key identifier:   9B:B7:FC:9A:69:CB:B0:6C:BF:7A:F7:4C:65:A4:A7:34:D2:84:C5:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7801526B225D2B8BABDC7383D56B35DFCA1A621D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Dec 2024 16:10:15 +0000
Certificate not after:    Mon 15 Dec 2025 16:15:15 +0000
Subordinate resources:    AS: 268285
                          IP: 45.237.112.0/22
                          IP: 2804:4ed4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Apr 2025 14:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:01:52:6b:22:5d:2b:8b:ab:dc:73:83:d5:6b:35:df:ca:1a:62:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 16:10:15 2024 GMT
            Not After : Dec 15 16:15:15 2025 GMT
        Subject: CN=9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9a:ef:82:c8:d2:f3:3c:7e:6a:23:ff:d3:46:
                    c5:7b:f9:38:10:4c:d3:ca:8a:c1:ef:4b:5d:27:71:
                    1b:05:0a:a4:a5:de:00:01:32:d1:b6:7b:00:cf:0f:
                    ba:24:9b:ae:3e:7f:05:82:d0:05:06:92:50:24:80:
                    25:ab:13:76:aa:3f:94:8b:f7:89:65:97:36:c9:2c:
                    e3:f6:96:97:75:df:0a:16:a4:94:74:dd:2e:ac:fa:
                    44:c9:85:93:f9:45:15:ac:3d:03:60:b6:fa:17:d9:
                    7e:97:61:44:69:0f:ea:d1:1d:2e:4d:fe:e4:56:f1:
                    1a:e6:74:9a:75:3e:5f:a1:e2:34:0f:dc:a9:98:92:
                    bd:c6:17:2d:c6:a6:05:02:7f:29:8a:63:39:53:62:
                    c4:a2:a8:cb:2a:cd:aa:4a:e8:e9:f1:59:42:6e:b8:
                    d9:b5:dd:74:f6:89:2e:4f:40:04:41:2c:95:25:55:
                    ae:55:69:c6:65:3b:98:5d:02:31:6d:47:5b:1d:53:
                    77:64:73:63:c8:d3:d8:c4:79:bb:e3:75:e5:2e:55:
                    42:30:28:32:6a:54:7e:81:b3:fb:87:92:27:71:fe:
                    e7:37:e7:fa:b3:a8:75:2f:5d:46:61:76:a1:9e:f1:
                    9d:4b:c8:e1:37:93:49:b0:2d:9f:63:9e:9c:b6:a6:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:B7:FC:9A:69:CB:B0:6C:BF:7A:F7:4C:65:A4:A7:34:D2:84:C5:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.112.0/22
                IPv6:
                  2804:4ed4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268285

    Signature Algorithm: sha256WithRSAEncryption
         86:68:7a:6b:91:41:07:d0:2f:66:9d:c1:b5:fa:f3:05:00:31:
         4a:a8:fb:97:a8:f6:94:83:3d:c2:a8:67:aa:f2:16:8f:22:cc:
         42:94:9a:b3:d3:ee:0b:49:a2:ec:2c:7c:c2:bb:d0:b3:54:80:
         24:31:d4:92:0a:e5:7f:25:d0:95:47:7b:00:2e:68:86:f1:6f:
         2e:19:f8:3d:c4:a4:fe:50:7a:12:78:13:2d:06:bf:ac:33:87:
         01:a1:5f:9d:9d:37:67:74:87:b9:e4:a6:01:28:73:cb:7d:bc:
         2f:4f:0e:9d:0e:fe:0a:7f:aa:0b:33:51:5b:44:af:09:1c:42:
         56:27:27:10:40:36:53:92:22:a7:4b:d4:d0:e9:08:6e:c5:3f:
         16:db:54:93:02:c0:d3:30:ad:8d:86:03:6a:b5:00:d7:4d:9f:
         d4:9e:44:29:9c:c7:4a:2e:b8:28:6b:62:a8:6b:34:37:c1:88:
         85:7a:9f:f8:d5:a9:74:7b:84:50:e8:25:0e:66:88:e7:80:a4:
         b4:f9:43:f5:54:0c:eb:02:93:c7:58:cf:dc:c1:ed:a2:76:8b:
         8d:9f:77:32:20:b6:30:0d:21:b9:e0:78:9b:4f:4c:0b:e8:56:
         2a:04:04:f7:9b:8f:d2:fa:74:50:70:42:47:b9:a8:fd:b6:e3:
         c4:47:b8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:23:12 2025 by rpki-client