Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
File:                     9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer (raw, json)
Hash identifier:          MM9pIBZE1Sp6t3Ew6AUqfGVIm0Nb3NQ45jO1y69A56M=
Subject key identifier:   9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19594C4E608AF595888202540D8E34A636274F9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Jul 2025 20:21:20 +0000
Certificate not after:    Mon 27 Jul 2026 20:26:20 +0000
Subordinate resources:    AS: 271358
                          IP: 200.50.228.0/22
                          IP: 2804:7a40::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 08:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:59:4c:4e:60:8a:f5:95:88:82:02:54:0d:8e:34:a6:36:27:4f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 28 20:21:20 2025 GMT
            Not After : Jul 27 20:26:20 2026 GMT
        Subject: CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:49:94:b0:a0:fd:f0:7d:e8:6c:41:7e:c8:
                    fb:99:e3:5c:92:ee:ab:9d:88:c1:dd:3b:5a:29:42:
                    45:22:f6:08:28:14:52:b5:ee:79:d0:44:ec:04:cd:
                    a4:fd:47:ef:c5:c4:d3:40:1a:46:2f:94:36:4c:f5:
                    47:86:bf:ac:5e:f2:32:a5:83:c3:81:a6:22:66:9e:
                    8b:06:b3:c4:6d:39:48:e9:93:dc:7d:81:01:9f:1d:
                    52:45:43:10:c7:eb:95:08:9b:56:a4:6e:db:07:eb:
                    b5:d1:a8:44:a8:dc:c3:cb:c9:6b:22:3a:88:38:77:
                    78:12:85:4b:df:96:67:b3:6c:d5:eb:86:4f:be:88:
                    a8:26:c1:fc:e5:27:59:b9:b7:b2:96:c5:8c:af:0b:
                    fd:5b:f3:80:1d:2c:9b:7b:21:df:ed:65:f3:14:85:
                    91:20:b6:8e:5d:f0:91:2f:00:65:4e:d6:2e:ed:38:
                    5e:8c:fa:4a:ef:e2:87:b2:7f:4b:4c:16:b5:8c:b7:
                    30:b6:a5:f8:19:77:d1:b3:51:d0:ae:e0:e1:56:be:
                    c1:81:8a:2c:0a:65:23:37:42:00:13:2c:0c:24:33:
                    54:99:d3:3e:b0:90:6b:e7:ab:55:69:1f:89:9c:ef:
                    1b:0b:96:af:78:77:19:5b:7c:3d:41:e1:7e:01:89:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.228.0/22
                IPv6:
                  2804:7a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271358

    Signature Algorithm: sha256WithRSAEncryption
         6f:cf:19:e3:95:16:ec:a3:a5:32:37:3d:e9:7c:55:8b:de:7a:
         03:b3:89:a6:e1:1c:79:63:61:8b:14:95:63:eb:a6:26:28:d6:
         69:46:fe:14:da:57:f6:ab:08:2f:19:ca:24:ff:45:73:dc:d2:
         41:14:51:d0:de:cc:97:37:94:05:9c:92:b9:f7:a3:e3:11:18:
         f5:4d:6a:c5:41:96:98:78:92:81:e2:19:c7:fc:6f:26:55:9c:
         dd:65:cb:46:ed:84:f8:20:a4:bc:c4:21:04:06:11:79:02:01:
         21:ed:e7:2e:4f:64:02:95:ea:5f:87:d6:b3:85:b7:74:5f:4a:
         fc:af:31:97:11:47:82:ca:a6:73:e2:05:3d:3b:6c:d0:47:fc:
         14:74:d3:de:b1:0d:da:c2:da:8b:df:5e:cc:0f:08:40:02:00:
         53:ad:f8:85:06:7d:a1:cb:ca:ec:6f:de:09:ba:de:e4:23:66:
         7e:39:c5:00:a3:03:81:8c:03:a5:11:66:c0:bb:45:2e:09:95:
         1f:e5:84:11:28:11:00:0e:4a:6c:77:aa:65:1b:76:31:e4:23:
         91:03:3d:ac:30:de:15:36:a3:1d:7e:22:6d:c2:b4:4c:40:9d:
         00:b9:9c:59:a9:02:52:8d:a0:47:83:d9:67:fa:fc:35:ef:29:
         78:a7:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:56 2025 by rpki-client