Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AED1979DFB6DB533BA277327FFBF031F521D7D84.cer
File:                     AED1979DFB6DB533BA277327FFBF031F521D7D84.cer (raw, json)
Hash identifier:          6ZfZLoMyhgcn8nbSOY34CC2Zroe0+R6CFDOAM7KjVkM=
Subject key identifier:   AE:D1:97:9D:FB:6D:B5:33:BA:27:73:27:FF:BF:03:1F:52:1D:7D:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       493A2F5970E482B3C52532E711F6BB0322E34DA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/AED1979DFB6DB533BA277327FFBF031F521D7D84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Sep 2025 14:17:26 +0000
Certificate not after:    Thu 03 Sep 2026 14:22:26 +0000
Subordinate resources:    AS: 262988
                          IP: 168.90.80.0/22
                          IP: 179.125.64.0/19
                          IP: 186.251.8.0/22
                          IP: 2804:1058::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3a:2f:59:70:e4:82:b3:c5:25:32:e7:11:f6:bb:03:22:e3:4d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  4 14:17:26 2025 GMT
            Not After : Sep  3 14:22:26 2026 GMT
        Subject: CN=AED1979DFB6DB533BA277327FFBF031F521D7D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:27:f7:4f:6e:5c:f3:62:b6:7c:fd:f5:f4:b3:
                    5d:c9:e8:78:19:e8:0e:85:13:85:12:72:29:b6:e9:
                    10:ab:36:59:64:1e:3f:04:37:d3:60:05:be:63:22:
                    29:79:ea:b5:17:2f:c9:98:ff:24:3d:4e:2a:67:c5:
                    b1:25:77:e5:99:39:52:e9:e2:33:dc:6f:2f:f4:dc:
                    39:ce:4b:c3:5c:09:d7:74:4c:ed:24:8c:34:e1:74:
                    88:24:ac:1a:b5:c9:f6:ae:f2:89:c5:c1:4a:37:a6:
                    e3:ab:55:16:ca:a8:e0:f9:ca:79:68:a6:a9:62:78:
                    e4:0e:47:db:57:d7:35:67:5a:c8:eb:e0:ee:08:9f:
                    24:45:a1:43:aa:85:7b:f5:d0:6e:ca:6d:51:ad:fa:
                    e5:5e:8e:62:a9:f5:e7:78:a8:dc:cc:0c:f9:e1:7c:
                    b9:e5:81:92:e2:ad:c0:5b:85:f5:d6:ae:39:77:26:
                    f6:96:21:d0:fb:0f:30:91:cc:ee:b2:3d:61:31:9e:
                    e8:79:04:21:56:57:8e:06:85:19:0f:5f:67:08:ff:
                    df:10:33:68:f0:0a:3d:4d:28:16:de:b3:6e:e7:d7:
                    01:c6:b9:dc:af:2c:89:8e:26:bf:04:8f:75:1f:6c:
                    5f:9d:39:fd:68:18:1d:6d:9d:77:f6:f6:67:8a:cf:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:D1:97:9D:FB:6D:B5:33:BA:27:73:27:FF:BF:03:1F:52:1D:7D:84
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/AED1979DFB6DB533BA277327FFBF031F521D7D84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.80.0/22
                  179.125.64.0/19
                  186.251.8.0/22
                IPv6:
                  2804:1058::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262988

    Signature Algorithm: sha256WithRSAEncryption
         9f:bd:df:e2:dc:75:fd:9d:35:bf:af:a8:08:18:89:4e:cf:81:
         91:17:39:af:00:db:46:f9:3f:a0:10:0e:ba:9e:ae:97:3a:43:
         c3:a0:c3:53:8a:b4:70:45:f8:1d:01:cf:09:8b:7e:d9:2a:2d:
         72:7a:5d:20:cf:d7:c3:82:62:bd:0b:78:d0:26:2d:93:ee:d3:
         e6:04:b6:d8:29:68:54:e1:ac:1a:61:45:6f:51:1b:4e:f9:3b:
         5a:59:c3:d2:22:d5:09:df:40:de:c8:2a:bc:23:8a:9c:63:4d:
         ec:21:66:ba:ef:67:9e:ef:7b:21:bd:e4:15:6f:3b:00:99:ee:
         27:d4:43:1c:88:47:b5:fd:fe:5f:33:77:d4:2a:70:48:5a:ef:
         6d:53:db:c0:93:81:1a:02:87:0f:65:e4:c5:d6:43:54:41:9c:
         25:a0:56:66:20:48:d4:fe:15:1e:0d:ee:b4:77:77:e3:ab:b7:
         89:f9:83:0e:b1:0a:f2:f4:6b:93:53:b8:c4:ce:01:f2:95:fd:
         7f:f6:77:46:8c:e2:53:a8:6b:fe:6c:30:a7:e4:0d:9c:98:fd:
         87:d7:72:f9:dd:02:9f:60:ec:50:d9:30:d5:e2:18:dc:1a:6d:
         02:dc:09:30:f7:25:83:2c:ae:05:95:1d:9b:46:48:eb:11:0d:
         72:3a:e4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:25:54 2025 by rpki-client