Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.cer
File:                     3FFE15782BD94F0739D4F13B603819B73D5FE247.cer (raw, json)
Hash identifier:          doD/yjoJXyX+TatjwZxi4poEfDgcO0Z1h1RgxIj1aJg=
Subject key identifier:   3F:FE:15:78:2B:D9:4F:07:39:D4:F1:3B:60:38:19:B7:3D:5F:E2:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B940E3E017D808D03EC7535B4A790EAD969ED7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.mft
caRepository:             rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Jul 2025 16:06:56 +0000
Certificate not after:    Fri 10 Jul 2026 16:11:56 +0000
Subordinate resources:    AS: 267216
                          IP: 45.231.172.0/22
                          IP: 2804:4a10::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:94:0e:3e:01:7d:80:8d:03:ec:75:35:b4:a7:90:ea:d9:69:ed:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 11 16:06:56 2025 GMT
            Not After : Jul 10 16:11:56 2026 GMT
        Subject: CN=3FFE15782BD94F0739D4F13B603819B73D5FE247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:37:36:8b:5d:b7:3f:52:a2:d8:7f:92:70:
                    d6:02:16:ec:9d:70:1f:72:a0:32:45:f3:28:ce:b8:
                    bd:44:e1:60:9c:03:02:36:f5:fc:f5:21:bf:45:45:
                    27:7c:cd:c2:e0:67:87:75:db:86:84:b0:fa:9b:4a:
                    3f:03:05:86:c1:73:4b:f6:e4:18:ba:e3:3f:cb:82:
                    9b:01:26:a5:ed:c6:c9:27:af:fe:86:38:44:37:12:
                    f9:57:df:55:9d:7c:c0:c9:67:f6:fb:08:81:58:87:
                    6f:fe:21:d3:54:c7:43:ff:a6:b9:2f:19:0a:22:70:
                    8d:86:4d:14:9c:68:09:2a:ca:df:73:a2:0f:ac:63:
                    2c:22:73:cd:22:cd:ec:40:da:56:57:4a:63:e1:2b:
                    63:01:d3:2a:fd:9b:1c:b5:27:5a:49:07:17:3f:80:
                    10:39:a4:e7:e1:68:b2:c8:6e:30:53:86:c7:a0:7d:
                    e2:a9:38:8f:42:19:0d:0e:8a:a4:64:e5:73:3c:12:
                    8f:72:e0:b4:d8:69:14:41:07:98:74:37:d6:68:1c:
                    dc:10:1f:5f:f9:13:d9:04:c3:f4:3b:f5:17:d4:8a:
                    b3:ca:91:1f:11:3e:ad:73:4a:e8:04:2e:ab:f5:38:
                    ef:98:1d:0c:f4:93:a1:08:90:b8:df:a1:90:00:6a:
                    2d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:FE:15:78:2B:D9:4F:07:39:D4:F1:3B:60:38:19:B7:3D:5F:E2:47
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.172.0/22
                IPv6:
                  2804:4a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267216

    Signature Algorithm: sha256WithRSAEncryption
         ad:aa:db:51:e7:8c:2b:eb:11:1f:27:8b:96:ca:ad:02:27:6f:
         68:ce:6c:e7:37:9e:17:1b:57:49:35:6f:bb:e0:d9:ed:8b:07:
         d1:73:f8:11:24:6e:42:ac:2d:b4:a1:49:8e:2f:bb:a9:18:68:
         b2:5a:d7:93:55:db:b0:e0:89:0b:4b:46:0a:99:dc:81:77:4e:
         b5:d7:b2:b7:ef:c8:6a:b6:39:32:f9:20:34:2a:b1:92:cf:0a:
         55:cf:98:13:b3:db:3e:f8:dc:09:be:c4:67:a0:78:2e:a8:fb:
         ce:b1:86:53:e0:5d:29:b4:15:e2:e2:10:77:3e:1c:fb:ed:e0:
         06:88:ef:76:1b:ec:59:d4:98:cb:ef:57:e0:5b:e5:8c:41:2c:
         2e:75:30:2a:15:71:71:6f:96:87:ed:11:65:fc:82:5d:68:86:
         78:26:f8:11:aa:bc:b8:fb:30:e9:16:a1:e1:1d:a6:47:4b:b8:
         43:bb:93:8f:90:b4:ae:48:73:e0:3d:4d:34:7a:83:bd:b1:e9:
         7c:4b:09:3f:8f:8a:11:21:14:3b:31:9b:42:07:38:4d:f2:a3:
         a9:88:db:27:ad:95:82:4a:4c:c0:05:6d:d6:92:04:8f:01:16:
         88:63:4c:02:92:89:1d:c7:3e:05:6c:2d:83:a2:1e:1d:ce:d2:
         16:3e:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:06:14 2025 by rpki-client