Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
File:                     501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer (raw, json)
Hash identifier:          kC0z2J7kaST7g6zhYzohYV6S8LqcgXnj/Fzf5iHjhIg=
Subject key identifier:   50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22EB1EB836850C85AC7E499CBBF81B49400633F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Jul 2025 16:00:24 +0000
Certificate not after:    Thu 16 Jul 2026 16:05:24 +0000
Subordinate resources:    AS: 28299
                          IP: 177.12.160.0/20
                          IP: 177.185.192.0/20
                          IP: 187.1.128.0/20
                          IP: 189.38.80.0/20
                          IP: 191.6.192.0/19
                          IP: 2804:10::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:eb:1e:b8:36:85:0c:85:ac:7e:49:9c:bb:f8:1b:49:40:06:33:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 17 16:00:24 2025 GMT
            Not After : Jul 16 16:05:24 2026 GMT
        Subject: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:a5:88:f9:8b:5d:3e:c1:11:61:6b:ce:29:
                    67:1f:b4:bf:83:76:d5:ad:e7:62:20:33:58:fa:25:
                    21:d1:1e:6e:77:ca:93:72:4d:e6:23:eb:ad:db:a2:
                    b3:c3:10:f3:be:fe:86:5d:bb:a8:ec:9e:03:86:ad:
                    5c:66:35:f9:ea:89:0a:9d:e8:93:75:1a:49:8a:dc:
                    ce:e6:47:3f:71:8d:b4:a0:1c:9b:8e:9e:5d:3c:d8:
                    15:bd:4b:66:6b:85:04:12:bf:53:28:4d:45:da:73:
                    84:bc:4b:92:e5:fd:a2:fd:7c:b6:44:eb:92:ea:7e:
                    1d:c2:4d:52:9c:e2:5c:08:69:d1:de:00:3c:87:e8:
                    ce:b7:57:41:a2:e2:1d:a1:62:39:b1:8f:4f:0d:92:
                    df:1f:08:26:b3:ba:8b:7f:c7:56:01:4a:e8:74:b1:
                    5f:da:02:90:a5:e2:4f:12:ce:70:ad:91:c3:09:e8:
                    0a:ac:c6:4f:1f:b7:40:f0:b9:dc:c6:9c:ff:62:1f:
                    1a:6c:14:b8:56:d4:b8:0b:dd:29:f5:98:d5:08:fd:
                    c1:16:9c:e1:a3:e6:e8:1d:75:f8:ff:5c:b2:6a:91:
                    2c:a9:36:39:cf:77:79:f4:ac:77:64:1d:8b:bb:16:
                    14:28:ad:22:e9:47:0e:71:eb:95:90:98:af:96:bc:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.160.0/20
                  177.185.192.0/20
                  187.1.128.0/20
                  189.38.80.0/20
                  191.6.192.0/19
                IPv6:
                  2804:10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28299

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:4e:4e:81:6b:b9:92:03:5f:99:ef:fc:31:9c:91:74:44:
         f6:7c:c8:1d:dd:23:c2:1f:64:71:a4:c0:a6:c8:4c:9c:2e:97:
         f0:19:58:df:b9:c5:7b:16:79:f4:c0:13:d4:bf:8a:f8:c0:48:
         a3:d6:16:6b:b8:9e:c9:32:db:8b:52:4b:67:f4:3f:34:6a:9e:
         9c:3c:88:d3:31:90:da:53:8d:4b:76:03:10:d5:24:3b:81:59:
         3d:11:6c:1a:8b:fe:0d:aa:01:1a:76:0e:35:7b:91:50:2c:b5:
         63:9d:1c:41:ad:27:b4:aa:0c:d1:9e:d8:3b:e0:39:b2:cf:b1:
         d1:fa:32:cd:98:38:cd:06:3a:e1:74:6f:94:29:3b:4f:ec:5f:
         aa:f4:4a:31:4b:7e:70:29:40:6f:0a:b8:11:9a:35:86:6b:d3:
         9d:a5:c8:63:e9:a5:75:9d:1f:cb:89:45:d7:5e:1f:9d:36:4d:
         5f:ba:07:c2:64:9e:10:ad:6f:a9:78:44:39:09:f8:8a:d9:cd:
         82:f5:10:71:b8:76:62:82:5a:88:e2:79:69:f4:55:0b:6e:95:
         66:64:45:d1:3a:d4:98:76:88:5c:10:09:4a:21:b1:98:e7:21:
         07:31:f5:19:92:6f:40:a6:8e:e4:58:1a:ef:90:f3:3c:e4:36:
         64:ac:0e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:22 2025 by rpki-client