Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer
File:                     9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer (raw, json)
Hash identifier:          e09Yu4/cehRFxU3zwGMrOY7z1YwFDEy2tky9AzHINHw=
Subject key identifier:   9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4A34E00228FC8E53D4D7B259FDFDF0B2A7905057
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 08 Jun 2025 07:52:01 +0000
Certificate not after:    Sun 07 Jun 2026 07:57:01 +0000
Subordinate resources:    AS: 266933
                          IP: 45.225.108.0/22
                          IP: 2804:4588::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 05:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:34:e0:02:28:fc:8e:53:d4:d7:b2:59:fd:fd:f0:b2:a7:90:50:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  8 07:52:01 2025 GMT
            Not After : Jun  7 07:57:01 2026 GMT
        Subject: CN=9C2E73CC95F1D482A4D9A31AD876FAF4B2753016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:61:f6:c1:f0:7c:16:0c:4e:1e:6a:72:69:
                    74:7a:e0:8d:74:03:33:70:18:6d:36:5f:53:ad:ed:
                    bc:f4:61:46:a9:20:dc:47:13:a7:bf:a0:7a:df:7f:
                    68:68:d7:a2:6b:8e:b6:d5:e6:e6:c3:a1:f4:7b:7b:
                    54:bc:37:62:66:2e:17:e7:4c:9c:fb:93:19:28:32:
                    43:00:9a:06:8d:71:97:ba:34:6b:eb:b0:c2:5b:d9:
                    58:bc:8f:ee:6b:8c:54:f9:59:02:3c:98:b8:66:11:
                    9e:a6:83:0d:c6:82:55:32:b5:a2:4b:ae:6d:27:09:
                    05:9a:1b:c5:29:0d:16:52:17:08:41:b9:7b:78:2c:
                    24:8f:9e:17:36:9d:a6:46:d6:ff:c2:05:f2:25:4c:
                    bc:0a:99:b4:b8:09:18:47:e1:cd:01:1f:8e:4d:b7:
                    63:2a:fa:b9:79:07:e1:81:fb:f2:54:08:c9:1a:76:
                    75:0f:cf:9b:a2:89:13:3b:f0:c4:31:17:ee:dd:80:
                    99:01:da:26:7c:65:fd:b9:b2:2d:79:20:a8:ee:db:
                    37:9f:2b:b7:c2:db:19:b9:02:90:5f:83:78:e6:c3:
                    bf:8d:f3:fb:d0:30:9e:59:1d:ea:12:45:fd:bc:d1:
                    5f:dd:9f:52:d5:90:68:56:c5:d6:ec:fe:12:c3:cb:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.108.0/22
                IPv6:
                  2804:4588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266933

    Signature Algorithm: sha256WithRSAEncryption
         c3:15:11:d8:27:68:2f:d3:9b:6b:63:1c:ee:08:b4:10:ff:e8:
         b5:77:af:53:e6:6f:21:aa:6b:94:ed:a4:6d:80:b0:50:e3:6e:
         95:97:dd:99:1b:77:89:a7:03:8b:ed:06:f6:1c:a1:ec:6a:4b:
         da:18:8b:77:17:6c:e3:3c:f4:29:05:5c:c7:21:00:d5:e1:0e:
         7b:f1:8a:d7:4f:b9:28:94:3c:8a:06:c2:d2:7d:48:bd:86:2d:
         07:93:4b:ed:81:47:e7:f7:57:e3:0c:43:93:65:e7:12:8c:59:
         cd:82:ed:4a:a3:9c:0c:b8:4f:77:2f:02:cf:ac:03:dd:19:31:
         f4:0e:67:9e:4a:c1:0e:e4:ec:83:ef:4e:21:ab:9e:c0:a7:9e:
         28:c6:99:26:15:3d:97:24:e8:46:98:7e:11:fc:1b:73:b5:a0:
         bc:8a:b2:e2:cd:20:9b:9b:5b:a0:f9:94:37:8c:5d:d8:36:8b:
         d1:3b:7a:a2:32:69:3c:b9:e5:7b:9e:7e:75:04:b7:2b:c2:32:
         30:5c:d7:43:2b:ff:bd:f7:af:45:74:ef:5c:3d:69:6b:6a:97:
         bb:05:a5:ac:fe:23:ac:2d:a8:a9:ca:e9:cb:7c:1e:5b:be:59:
         9a:1e:8a:dd:95:bd:3a:2b:3c:13:6e:6e:8b:06:bc:e6:22:ca:
         88:db:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:54 2025 by rpki-client