Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FBD3E36E99438BA7302F250CEE3673B235F797AC.cer
File:                     FBD3E36E99438BA7302F250CEE3673B235F797AC.cer (raw, json)
Hash identifier:          s+aP0j/nLaX61zDG+rL5S6+8JXdUsYsBPO3JIXJIGTs=
Subject key identifier:   FB:D3:E3:6E:99:43:8B:A7:30:2F:25:0C:EE:36:73:B2:35:F7:97:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1B05A0921B06B503F88BC81A3DA1ED15B9BDC73A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/FBD3E36E99438BA7302F250CEE3673B235F797AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Sep 2025 12:33:44 +0000
Certificate not after:    Fri 18 Sep 2026 12:38:44 +0000
Subordinate resources:    AS: 266964
                          IP: 45.225.232.0/22
                          IP: 2804:4608::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:05:a0:92:1b:06:b5:03:f8:8b:c8:1a:3d:a1:ed:15:b9:bd:c7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 19 12:33:44 2025 GMT
            Not After : Sep 18 12:38:44 2026 GMT
        Subject: CN=FBD3E36E99438BA7302F250CEE3673B235F797AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:89:85:86:19:e6:e8:27:c7:d8:83:c4:94:
                    67:aa:03:85:75:c1:a4:c9:74:49:2e:82:ac:65:6d:
                    1d:37:1a:45:15:f7:3a:cc:9b:99:60:e5:f2:a5:b6:
                    35:3f:9e:60:b2:7c:36:e0:c0:d2:47:af:c1:a0:af:
                    d1:59:e6:0f:4b:62:03:48:e8:de:03:13:cd:4d:58:
                    e0:a7:93:7f:88:8b:ec:84:87:ed:b8:f2:1f:29:af:
                    de:8b:9a:84:74:03:2c:12:84:4a:31:7c:2f:4c:9f:
                    94:48:15:3c:67:bc:c3:1f:14:95:b3:6c:da:1c:56:
                    5e:c4:d3:47:be:a0:af:2d:54:5e:59:3f:17:b8:3a:
                    d1:2f:af:f5:74:7f:a8:19:38:68:7e:b7:ac:fa:76:
                    ea:7c:4d:bd:24:6f:9d:60:c9:ef:63:8f:29:9c:f4:
                    53:ae:b5:1b:de:d6:30:67:32:e3:ef:e6:0e:3a:93:
                    7b:31:02:95:ba:c0:30:da:f4:c7:69:4f:4b:f9:0f:
                    35:df:d0:95:95:04:16:db:b7:c6:60:89:a4:66:25:
                    e7:24:35:9f:7b:7a:2c:19:53:b0:10:61:d1:63:d3:
                    c1:27:6b:c9:cc:1e:d9:61:f6:31:9f:b9:d9:b1:44:
                    1f:df:bd:d5:e0:d1:fd:22:48:81:7a:6a:0a:e3:76:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:D3:E3:6E:99:43:8B:A7:30:2F:25:0C:EE:36:73:B2:35:F7:97:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/FBD3E36E99438BA7302F250CEE3673B235F797AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.232.0/22
                IPv6:
                  2804:4608::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266964

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:d7:08:ab:bd:da:23:b5:b4:7e:b3:45:fc:be:de:2f:89:
         ce:db:bf:6e:a4:70:f8:a4:fc:d0:c0:34:b1:b1:82:14:5f:db:
         6b:2e:e5:85:b7:74:2e:59:5c:39:5b:bc:7f:12:11:2b:6b:a7:
         b5:d8:28:9a:b6:1b:ec:77:be:ef:ed:cc:3c:90:a2:f3:51:46:
         02:27:81:12:6a:3a:bf:6b:85:e4:8c:d0:98:85:71:d3:4b:49:
         8b:d0:45:59:c6:91:4e:a5:a2:3a:e1:8b:3a:04:52:ad:00:af:
         2d:35:ca:64:09:11:50:7c:64:c2:d2:e4:e4:1b:39:84:f2:fc:
         18:5c:37:e7:b4:55:c7:92:3f:a9:d2:8d:d1:d7:15:08:33:39:
         ed:13:eb:86:9e:43:a2:6a:d7:8f:f9:fb:36:92:90:79:8c:b2:
         6e:60:8b:76:43:12:c8:4f:cb:a9:b4:a0:f0:70:7a:3b:ed:10:
         1c:1c:d0:54:be:48:39:1f:a1:8a:16:85:d1:60:e4:19:ea:15:
         9a:ce:c3:1d:dd:30:24:a1:19:4a:58:78:b8:97:7a:a1:48:1e:
         51:06:62:4a:04:3c:bc:62:e5:f2:8c:16:6f:11:8e:ea:95:47:
         d6:39:a0:3c:e5:35:8d:f2:f4:74:6d:1a:b5:dd:ad:33:94:d7:
         4e:0f:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:34:16 2025 by rpki-client