Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer
File:                     46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer (raw, json)
Hash identifier:          Kmhli/1KwwWN2F65D8lxzf1Ofu8FBayugHVKu9MnQqE=
Subject key identifier:   46:DA:2E:CF:EB:E8:D4:82:3B:B8:F1:6C:65:1B:0C:6E:2A:3F:5F:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       61A5BEA31C3387E50F87A5F2A2F6AAFED00033A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Jun 2025 13:17:42 +0000
Certificate not after:    Tue 02 Jun 2026 13:22:42 +0000
Subordinate resources:    AS: 271418
                          IP: 181.224.40.0/22
                          IP: 2804:7b38::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a5:be:a3:1c:33:87:e5:0f:87:a5:f2:a2:f6:aa:fe:d0:00:33:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  3 13:17:42 2025 GMT
            Not After : Jun  2 13:22:42 2026 GMT
        Subject: CN=46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:45:7d:5e:ed:75:3e:25:42:8a:a9:2a:b9:
                    b4:fa:9a:0f:7b:85:dc:ea:4a:ac:5c:c1:35:2f:17:
                    2d:c5:02:8d:6d:c7:af:b7:6e:fd:c1:f0:55:d5:d1:
                    6c:c8:e5:19:49:7c:9e:ea:9a:7b:88:3e:d6:de:fa:
                    e3:e5:6b:16:b3:55:c8:94:45:82:51:63:de:fd:d0:
                    52:bf:11:fb:fd:e5:b3:0b:02:9c:a5:c3:37:a5:4c:
                    89:7b:d5:52:db:6b:be:dc:c3:df:8f:22:b8:a6:3c:
                    22:8d:1b:5e:a4:a1:1b:95:02:90:6a:b0:a7:78:6c:
                    e5:d8:50:5b:fe:26:36:36:21:8a:4e:a0:45:03:df:
                    8b:8a:23:f9:db:2b:d2:c4:d9:cb:1d:47:e1:ad:6c:
                    5b:19:62:6e:75:46:22:f3:29:f7:a7:52:de:08:99:
                    84:8f:e1:1a:6e:e5:3c:1b:09:0d:93:29:44:53:5b:
                    7a:9e:1c:03:a2:69:16:1a:25:2d:71:ef:89:72:c8:
                    b5:e1:d5:69:4a:6a:04:09:48:57:f2:86:a9:33:d6:
                    55:03:0c:0f:65:10:8f:ef:e9:67:73:94:b8:93:5a:
                    fc:0f:5f:4f:59:20:ff:a1:8e:7e:51:be:af:c7:fb:
                    d5:85:12:7f:dc:75:7f:51:44:fc:c7:02:34:5c:1f:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:DA:2E:CF:EB:E8:D4:82:3B:B8:F1:6C:65:1B:0C:6E:2A:3F:5F:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.40.0/22
                IPv6:
                  2804:7b38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271418

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:7f:4f:f4:20:c6:b8:55:53:a7:9f:8f:26:72:5a:7f:20:
         3c:f4:eb:0c:cc:5b:d6:0f:55:41:c6:51:4c:bd:c3:ac:87:31:
         21:49:0e:05:70:1c:57:f1:07:d5:bf:2d:85:89:e6:f9:83:dd:
         b4:ab:88:02:2e:da:89:a9:f1:b0:bd:78:d0:28:ac:5d:9b:1d:
         0d:96:59:31:a0:ab:7b:dd:7e:4c:75:bd:f4:db:af:22:23:a4:
         5b:5c:87:29:0e:53:a6:c0:34:70:ac:35:1b:f1:57:34:3f:1c:
         38:d5:3b:57:58:42:15:25:17:e6:e8:09:f8:6a:76:03:af:c7:
         20:6b:f6:a5:68:8a:27:80:40:df:d7:6a:90:6e:a8:ec:b2:61:
         e1:c0:41:03:8b:fb:c6:60:46:4b:5d:d9:51:6f:10:dc:17:57:
         2b:32:46:06:1b:e3:7f:13:59:88:a7:6c:80:e9:5f:f5:0b:38:
         ad:30:f9:77:0c:4a:83:de:4b:6e:98:bf:95:60:35:5f:6d:e5:
         3f:71:60:7d:fa:0f:87:e9:1f:68:88:4c:79:ce:eb:de:85:22:
         83:50:3b:6a:0d:58:fa:ad:57:39:5e:c1:5a:2c:b3:22:a7:fb:
         2f:ef:a4:d0:da:b5:d0:8a:e1:27:81:8d:19:c8:0c:4e:7a:25:
         bb:28:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:10:12 2025 by rpki-client