Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
File:                     9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer (raw, json)
Hash identifier:          WYEwr8tTw7SCWQjzfZVZF4HptuA7Q+BqeiQ3sLWQnh0=
Subject key identifier:   9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D7E56ED744654C81A2881412E844AD5C7DCBA25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 03:53:41 +0000
Certificate not after:    Fri 06 Mar 2026 03:58:41 +0000
Subordinate resources:    AS: 270899
                          IP: 177.91.228.0/22
                          IP: 2804:7328::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7e:56:ed:74:46:54:c8:1a:28:81:41:2e:84:4a:d5:c7:dc:ba:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 03:53:41 2025 GMT
            Not After : Mar  6 03:58:41 2026 GMT
        Subject: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:b3:6a:83:3c:de:76:e3:b9:c9:85:d9:b8:
                    12:55:f7:16:82:c4:c7:ac:ae:f6:71:1a:1f:a5:53:
                    f5:a4:68:71:68:f9:af:98:31:99:5e:f9:42:d3:d5:
                    94:90:ab:1f:92:60:dc:87:7b:9e:bc:d9:9c:6d:f3:
                    e0:89:70:cc:62:92:ab:d6:47:55:00:d7:17:8d:b7:
                    2b:68:e3:8b:19:2c:7f:e9:1c:c0:69:e3:17:f9:9c:
                    fe:1d:04:c7:3f:bb:34:32:08:fe:57:c3:d2:7f:ef:
                    41:16:7e:82:b0:fd:86:18:f3:f2:53:1f:c5:8f:23:
                    7e:8e:7d:31:d6:59:ca:9d:de:2f:90:31:b9:58:85:
                    c0:52:04:ed:a8:d3:a3:aa:32:e4:23:d7:b9:50:8d:
                    5f:29:7c:5d:a7:a9:99:24:df:e5:4f:29:5f:f0:ed:
                    77:db:86:9b:d3:2d:bf:21:9c:20:1a:9a:25:b4:c5:
                    4e:7b:a7:fa:77:83:98:9d:5e:9d:fe:93:d8:eb:cd:
                    b6:33:da:86:8b:ab:2f:fb:25:af:2b:f1:69:9b:c0:
                    19:78:86:cb:63:c7:56:72:90:68:11:ca:7f:2e:f6:
                    2e:17:0f:80:9b:f6:68:00:26:e8:a3:1e:83:4e:b3:
                    b2:7a:70:7a:52:56:8b:15:56:a8:2d:ef:d9:f1:f9:
                    37:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.228.0/22
                IPv6:
                  2804:7328::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270899

    Signature Algorithm: sha256WithRSAEncryption
         3b:b7:9b:45:e6:ec:b9:3a:0b:e5:6b:78:a8:61:da:e6:46:69:
         48:c7:8c:2c:a2:52:cb:21:4b:91:53:9d:21:cc:f9:f4:e4:e2:
         97:5a:e8:eb:ac:d6:0c:22:8c:6a:46:87:a2:31:fa:09:e4:41:
         92:5e:01:a0:a6:9d:3f:9c:c2:5c:62:4a:12:7b:1e:a8:e5:dd:
         fb:e7:00:ba:e7:2f:bb:2b:38:07:3c:c8:27:b7:a4:d8:b8:a6:
         08:ba:e7:f4:b3:d8:a1:e2:b9:49:47:a0:32:4b:e5:9b:b1:43:
         1b:ae:e8:7e:fb:a0:80:a4:66:7b:dd:ba:ee:75:01:48:b3:e3:
         61:7a:15:81:7f:9b:71:18:af:57:ec:e4:06:7d:69:b0:ae:5e:
         f7:2c:a7:94:68:5b:c9:47:d2:5c:73:0b:89:7c:1c:ac:01:d6:
         3e:ff:37:e0:5f:aa:ff:af:eb:ee:82:42:38:c2:b8:b4:30:c8:
         df:6b:78:de:cf:25:01:25:af:17:16:b7:6d:b7:76:ec:13:c4:
         20:90:d5:c8:19:82:ff:1d:d6:6d:9d:28:32:fa:5d:42:e5:79:
         c4:5e:bb:21:c0:94:e2:e9:8f:47:06:c3:5d:ab:8c:67:78:20:
         ef:e4:10:c1:23:d1:8f:f0:a0:14:33:81:11:4f:a8:6f:4f:08:
         fe:7b:ce:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:47:00 2025 by rpki-client