Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer
File:                     E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer (raw, json)
Hash identifier:          TAgyAEhSm48mmHPwIJEarqhUUX5SuCYN1jbstzoJyeU=
Subject key identifier:   E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0EDC186B09A458D4D0564A2D735D3E4814FBD85F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Jan 2025 17:06:27 +0000
Certificate not after:    Thu 08 Jan 2026 17:11:27 +0000
Subordinate resources:    AS: 265098
                          IP: 170.233.236.0/22
                          IP: 2804:32cc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Apr 2025 14:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:dc:18:6b:09:a4:58:d4:d0:56:4a:2d:73:5d:3e:48:14:fb:d8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  9 17:06:27 2025 GMT
            Not After : Jan  8 17:11:27 2026 GMT
        Subject: CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:ea:60:44:cb:37:80:97:c1:8d:a0:f6:53:
                    16:db:fa:a6:a5:17:6a:4f:a0:cc:54:97:1e:1e:7d:
                    0e:68:7f:a7:63:a2:ac:9c:10:fb:7b:f5:6a:e5:88:
                    49:e6:77:41:38:16:40:0d:b9:3b:f8:ee:bf:0e:72:
                    7a:8a:0d:0f:75:e6:7d:8d:cb:88:76:46:a3:8e:03:
                    56:63:dc:d5:bf:27:24:4d:2f:c4:18:7e:7a:cd:a4:
                    8e:6d:f8:96:55:77:ca:fb:81:78:9d:f2:eb:03:07:
                    8f:ab:7b:78:1f:8e:6f:21:6b:8b:bb:5a:1e:93:52:
                    b1:06:23:26:52:69:13:95:08:b0:a6:2a:0e:98:f7:
                    55:b4:01:bc:e6:de:5b:fb:d5:68:cc:43:1f:3c:3b:
                    e6:c5:9e:f3:3e:36:77:2a:5f:10:4e:b6:65:53:2e:
                    92:24:6b:57:44:1b:9a:7a:18:01:3a:56:43:82:b7:
                    8b:d3:58:83:49:09:36:4a:15:b4:94:73:03:b6:2a:
                    dd:f0:f9:a4:91:92:18:f8:cd:f7:57:f8:ae:47:b4:
                    66:0f:98:ce:40:5e:7e:2c:d1:c6:e8:5a:c2:1e:15:
                    c3:9a:9a:59:8d:30:18:6a:43:a4:02:58:83:a7:60:
                    38:c4:74:61:af:69:50:08:ac:05:87:f6:8d:6f:4e:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.236.0/22
                IPv6:
                  2804:32cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265098

    Signature Algorithm: sha256WithRSAEncryption
         6f:3d:79:37:b6:57:b6:c5:c4:37:1a:7d:07:c9:64:03:91:cc:
         4f:7d:60:c1:ab:68:83:61:bc:97:71:36:0e:b8:9e:79:bc:66:
         e4:2c:cf:20:17:53:95:ac:bc:30:7d:8a:05:36:24:fa:67:5c:
         32:f6:3b:31:f8:95:03:f9:1f:01:7c:fe:c0:49:a6:4c:3d:e4:
         d4:1c:d3:6e:31:bc:17:ed:f9:2a:87:90:20:1a:fe:43:8d:a3:
         2b:a4:f3:9c:9f:3d:bb:ec:53:a3:d2:57:d2:9f:03:80:71:e2:
         7d:6c:c7:f1:a0:a5:f0:a6:e1:8d:98:16:5c:01:6a:f6:4b:53:
         6e:93:4d:45:3a:82:b9:ca:0c:f5:99:00:b1:2d:b4:70:49:32:
         2c:64:b6:c2:36:45:97:0f:0f:0f:aa:c2:4f:18:7d:7a:7f:b6:
         d3:8d:61:83:a8:8b:c2:23:37:c1:13:82:05:04:1f:7c:11:1a:
         d7:bd:10:7d:1a:ad:7e:39:25:42:49:f1:27:79:0b:f9:26:0e:
         3b:5c:6f:c0:fc:29:fc:47:7d:e8:33:38:34:4c:47:5c:49:8c:
         f4:01:04:7f:a2:1e:2d:0c:94:1b:59:73:50:13:34:03:70:24:
         97:97:c7:bd:c8:d7:2e:a5:85:f0:dd:2d:f3:17:a4:11:eb:34:
         df:7b:03:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:05 2025 by rpki-client