Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
File:                     2085C2E26105617BC4502F8911A5BE52CC061122.cer (raw, json)
Hash identifier:          KGjAOc3KOOXAoUPD3c3wnyQ37TZlFKV+1TD8VeKtCEQ=
Subject key identifier:   20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11FCD15967C8E92A102F8D13E516E065630B6781
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 19 Jul 2025 04:24:37 +0000
Certificate not after:    Sat 18 Jul 2026 04:29:37 +0000
Subordinate resources:    AS: 264987
                          IP: 45.224.2.0/23
                          IP: 170.84.12.0/22
                          IP: 181.191.56.0/22
                          IP: 2804:3104::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fc:d1:59:67:c8:e9:2a:10:2f:8d:13:e5:16:e0:65:63:0b:67:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 19 04:24:37 2025 GMT
            Not After : Jul 18 04:29:37 2026 GMT
        Subject: CN=2085C2E26105617BC4502F8911A5BE52CC061122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:54:65:0a:05:09:99:21:2c:92:78:32:e4:
                    22:82:ba:9b:18:fc:a3:0b:0f:87:66:b7:8b:f9:85:
                    ce:26:67:c4:e8:99:6a:e0:93:b8:1e:2f:72:ef:30:
                    48:db:32:01:9a:27:b6:30:52:eb:7f:c1:61:70:c5:
                    58:48:03:00:c9:15:9f:c8:35:12:0a:db:42:ba:dc:
                    ba:91:4d:d2:f4:19:f5:d6:56:52:db:4b:d5:bb:11:
                    c4:92:f2:77:b0:55:51:80:25:06:7a:fb:8d:8f:e2:
                    ff:3a:b5:b3:30:a8:b0:b2:29:f2:96:1c:7d:93:f9:
                    b3:d9:e6:0b:51:b3:68:7b:52:40:88:15:e0:20:45:
                    0f:83:32:ea:84:f3:aa:56:e9:ce:c4:1d:da:95:a1:
                    45:6e:00:ee:e3:d1:25:ed:36:23:cc:a4:15:4e:c5:
                    d3:ae:4f:5a:90:13:dc:db:43:78:da:bf:de:07:30:
                    a5:82:12:5a:54:ee:6e:55:59:e5:7e:7c:78:d6:af:
                    e3:59:42:6d:db:2b:b3:f3:f3:a2:02:00:72:ae:9d:
                    4b:d6:46:ea:a4:97:c0:86:f8:cf:77:11:c4:8d:a2:
                    91:fe:5f:1c:9e:1f:8e:c6:2b:db:df:9c:57:7c:fa:
                    f1:f0:32:ca:46:8a:09:02:85:86:03:07:90:50:0a:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.2.0/23
                  170.84.12.0/22
                  181.191.56.0/22
                IPv6:
                  2804:3104::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264987

    Signature Algorithm: sha256WithRSAEncryption
         a2:41:dc:cf:25:8a:a0:49:37:4e:d9:f1:1b:79:03:13:d2:2e:
         86:e1:d2:cd:4e:cb:83:d2:ef:5b:cc:d5:fc:8a:64:9e:d0:d5:
         3c:33:d5:43:f2:d4:25:6c:53:21:d9:09:f0:4c:a8:19:eb:a2:
         d6:5a:64:20:85:36:a6:ad:81:a5:96:83:4f:27:2f:ca:fa:11:
         06:c6:3b:0f:ce:63:31:36:07:0d:6f:0e:6e:9d:c1:e6:28:cc:
         09:38:db:73:b7:f0:83:d1:fa:1a:6c:8b:9f:40:94:46:b4:4d:
         f4:b5:c4:a0:1e:75:76:f5:fa:07:c4:cb:6c:c7:09:1f:84:dd:
         e3:13:a0:2c:84:1d:fb:ec:1e:61:e3:91:87:ab:8a:eb:63:65:
         78:9f:7c:62:e4:ef:1f:d0:c3:80:46:85:2f:f4:d1:30:bf:b7:
         9c:31:a0:76:96:7e:60:d5:4a:15:92:26:5d:f1:70:44:6b:ab:
         2e:3c:36:bc:73:b2:11:be:b9:06:58:94:9e:83:8c:50:9d:7f:
         e3:77:4e:b5:d6:3f:79:45:7b:01:58:1c:a5:bb:ed:26:47:bd:
         39:9a:3b:30:66:8f:fe:c7:18:d0:dc:29:35:a9:d9:4e:34:d2:
         da:64:4a:7e:35:6c:71:04:26:2b:06:19:bc:9f:13:e2:a2:61:
         93:ce:64:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:12:08 2025 by rpki-client