Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer
File:                     2C9FA99864590E029577FEA8F4939F2B71325AE2.cer (raw, json)
Hash identifier:          0KOZv6WiN1GHFd+2gNNgMC2kv0TRhLMYDHymL2AQsho=
Subject key identifier:   2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       45F830675584AB8D7D5B12092622A71149AD9806
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Jul 2025 22:21:20 +0000
Certificate not after:    Tue 07 Jul 2026 22:26:20 +0000
Subordinate resources:    AS: 264400
                          IP: 131.161.208.0/22
                          IP: 2804:1de0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f8:30:67:55:84:ab:8d:7d:5b:12:09:26:22:a7:11:49:ad:98:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  8 22:21:20 2025 GMT
            Not After : Jul  7 22:26:20 2026 GMT
        Subject: CN=2C9FA99864590E029577FEA8F4939F2B71325AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:08:4c:1f:68:6f:d8:37:8b:16:66:cb:7b:ff:
                    7f:b1:db:ac:51:34:f9:e1:6f:f9:e3:4c:8a:2d:a1:
                    48:4f:d6:21:c8:6c:1f:9e:86:4a:3e:51:0a:a8:db:
                    a1:36:aa:27:56:71:b6:a6:5a:51:41:e5:d2:04:eb:
                    2f:40:03:2f:f7:56:5b:ac:d2:ca:d7:ae:05:df:cd:
                    20:f0:60:6c:3c:ff:db:19:a7:a6:2b:75:b4:cf:e6:
                    53:e3:c9:9d:f2:7e:97:5a:0d:40:87:43:4c:42:80:
                    fe:ab:f9:23:a9:25:81:90:97:8c:24:e3:24:a6:52:
                    e8:4f:27:bf:a2:16:41:71:2b:aa:46:85:a0:c0:25:
                    94:61:cf:87:96:d0:61:69:b6:21:9e:74:dd:e4:87:
                    8d:00:f1:6e:70:18:7a:79:4a:bf:53:a1:1f:95:c6:
                    b3:5e:3f:c6:6e:01:9f:bf:1c:c2:58:89:ef:ae:54:
                    12:3b:5b:97:76:81:98:b1:fa:3a:b1:df:8c:9a:06:
                    55:29:df:9e:cb:79:c1:6f:33:50:78:2a:cb:66:2f:
                    39:28:ba:f5:2d:23:c8:ab:fa:f1:76:69:52:de:86:
                    a3:0e:d9:a2:d5:bd:93:c1:30:76:d6:80:03:2f:04:
                    aa:56:11:b8:de:c6:78:56:e1:2e:0f:a3:ed:de:2d:
                    73:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.208.0/22
                IPv6:
                  2804:1de0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264400

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:a8:d6:5d:e0:3c:12:43:17:cc:f7:24:db:9c:ec:af:32:
         cc:3a:e2:1e:f8:59:36:cd:99:f9:c4:45:4f:d8:f1:2b:94:17:
         58:27:ce:bb:b2:93:1f:b0:82:a5:b4:05:db:96:a1:f8:8d:45:
         de:e6:42:1a:91:43:ef:b7:ed:2f:77:9d:75:de:4e:b6:d3:84:
         63:e9:4a:6d:6a:a7:e6:59:70:64:2c:26:21:76:cb:7b:81:a9:
         74:11:a5:c4:84:5d:90:5b:1b:6d:42:2e:81:b1:52:22:23:ea:
         3c:cd:91:79:33:0f:36:bf:e9:20:8e:82:61:df:59:ff:91:94:
         c6:d1:ee:06:3c:2a:f1:dc:49:c9:7b:cb:22:40:a5:37:58:c4:
         a4:8e:67:3b:f1:57:62:32:f7:cd:81:f9:c9:30:0d:cd:d6:25:
         99:37:9a:3d:e6:b8:9d:0b:fd:02:e4:c8:4d:1a:61:bf:38:99:
         9f:b9:a0:ef:4c:c2:b5:27:08:64:6a:a3:01:32:5f:30:8c:29:
         73:ff:2c:0d:f9:74:54:18:5b:8b:25:a0:f2:56:ea:02:c0:5d:
         2f:58:b3:8b:41:f0:a1:a4:e8:85:18:4d:31:2a:ad:13:41:f1:
         a3:ab:da:8a:9b:72:00:65:b6:59:42:b9:88:95:79:14:d1:ea:
         f4:a3:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:16 2025 by rpki-client