Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.cer
File:                     8E95D3CD0B54F4CD3BC974AC0D3589B283049569.cer (raw, json)
Hash identifier:          GfuDTXKr4tOfe3tzGkSnF7r9iRBbi/QheaxoxYE5QNo=
Subject key identifier:   8E:95:D3:CD:0B:54:F4:CD:3B:C9:74:AC:0D:35:89:B2:83:04:95:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0EF18C8017F7311EC5E848D84FC123E3ED07F108
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Jul 2025 15:09:09 +0000
Certificate not after:    Wed 29 Jul 2026 15:14:09 +0000
Subordinate resources:    AS: 266382
                          IP: 170.80.184.0/22
                          IP: 2804:36f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 19:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f1:8c:80:17:f7:31:1e:c5:e8:48:d8:4f:c1:23:e3:ed:07:f1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 30 15:09:09 2025 GMT
            Not After : Jul 29 15:14:09 2026 GMT
        Subject: CN=8E95D3CD0B54F4CD3BC974AC0D3589B283049569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:04:e5:27:5a:10:75:7b:12:54:d6:5a:7f:
                    9d:fc:f1:3b:1b:10:b5:9a:ec:17:f2:0f:64:83:0e:
                    51:0d:9e:0d:0e:13:c6:11:bd:6d:44:c4:4d:73:a7:
                    50:16:c4:25:82:b9:a6:ef:17:25:48:c5:ac:c4:f5:
                    6b:de:81:b7:d8:5c:1f:47:5b:a7:f4:82:57:df:aa:
                    08:86:25:c2:db:2c:e5:f1:49:68:a1:d2:1b:df:fb:
                    1a:3b:fa:a4:b9:fb:ba:c9:77:cc:aa:5a:de:80:12:
                    7b:c7:4d:4a:44:03:60:01:75:b7:4f:34:4f:7e:96:
                    8c:1d:68:d4:b1:99:c6:73:47:62:82:38:2e:b4:3c:
                    1c:17:6c:96:65:68:b0:98:13:50:67:d2:62:13:46:
                    b8:dc:fd:0d:6e:0e:7b:22:4e:92:2c:8b:cd:46:c2:
                    01:16:f8:b8:1d:e3:33:e8:26:9b:59:75:4f:7c:50:
                    0f:8a:8a:17:da:9f:8b:d7:b0:4f:18:8f:37:84:28:
                    54:4e:14:54:37:b6:12:97:b3:50:11:39:3b:7c:67:
                    79:51:d4:f7:bd:85:09:28:4f:dc:09:01:df:a2:16:
                    38:4f:44:fe:93:0d:1f:df:da:af:a0:ef:51:30:cf:
                    33:9b:4c:de:e4:38:6a:0e:1f:05:87:4c:45:23:ca:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:95:D3:CD:0B:54:F4:CD:3B:C9:74:AC:0D:35:89:B2:83:04:95:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.184.0/22
                IPv6:
                  2804:36f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266382

    Signature Algorithm: sha256WithRSAEncryption
         00:27:c5:25:0b:0e:de:e5:ca:95:86:7f:bd:a1:e1:fa:6f:74:
         6f:20:d2:81:7c:0d:21:1c:b7:9c:d0:c4:8f:c3:c3:30:30:ba:
         4f:b4:0a:7a:06:61:40:5a:82:31:30:d6:0a:83:82:98:46:6a:
         71:9b:fa:81:fd:c6:94:a4:55:61:27:93:26:fc:5e:b4:f8:12:
         b4:a7:d4:e5:be:77:d3:85:9d:6c:99:af:a3:e7:92:30:c4:d2:
         78:2c:6e:05:74:9c:7c:29:17:70:3c:fc:2d:8f:19:a8:3d:ec:
         62:18:da:46:47:80:8e:69:5d:f0:25:78:77:e2:48:07:d5:46:
         fa:47:c9:82:e0:a2:30:f5:df:b3:b7:6a:93:98:48:9b:a4:bb:
         b4:24:9f:e4:06:09:eb:8b:1a:c1:1a:e0:67:1c:f8:07:c0:cc:
         1e:cc:00:ab:52:ad:8d:94:f6:c7:31:e4:9c:fc:fe:08:f2:e4:
         a4:2c:13:64:9b:9d:46:25:c7:99:98:29:3a:a6:3b:17:f1:35:
         39:3a:30:1a:17:3b:1a:28:66:12:62:84:78:64:e7:b2:76:87:
         f0:75:28:7c:93:ca:0b:1b:1c:87:98:d5:73:46:02:5d:ad:e0:
         79:54:e6:b3:4c:4c:6f:3d:a2:93:62:e1:a7:5a:83:df:c3:97:
         c5:3c:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:54:12 2025 by rpki-client