Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.cer
File:                     A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.cer (raw, json)
Hash identifier:          4p6Q9qgWOzDw5P7Vgj7LEOQKLHRj7Zv8CmzkTr4LfQA=
Subject key identifier:   A7:C1:D0:E6:3D:C6:C4:F3:79:E1:28:37:4A:71:D2:EE:D2:B8:F9:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       13682D8085F41CD5D8BF7FA7A66B6453C109FD96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Jul 2025 20:13:00 +0000
Certificate not after:    Mon 06 Jul 2026 20:18:00 +0000
Subordinate resources:    AS: 273360
                          IP: 201.54.185.0/24
                          IP: 2804:8d7c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:68:2d:80:85:f4:1c:d5:d8:bf:7f:a7:a6:6b:64:53:c1:09:fd:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  7 20:13:00 2025 GMT
            Not After : Jul  6 20:18:00 2026 GMT
        Subject: CN=A7C1D0E63DC6C4F379E128374A71D2EED2B8F996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:60:a2:4f:84:9a:2a:8f:cb:66:e4:b5:80:f3:
                    19:39:c8:d1:14:b5:1a:83:43:40:f2:50:29:34:9d:
                    37:e0:80:bc:c8:6d:e4:dd:cd:97:ce:22:b3:24:5b:
                    f2:55:d9:75:6b:a6:81:25:54:46:86:ad:3e:60:63:
                    dc:56:19:ae:5b:ba:11:52:67:54:80:10:4a:68:5b:
                    1c:c8:fe:a9:f5:eb:ac:5e:61:05:6e:5b:1a:3a:9d:
                    59:6a:d1:66:8b:f8:e4:b1:c3:b2:18:58:75:88:6d:
                    39:be:bc:a4:a9:37:c6:cf:7c:4d:e7:35:1b:17:fe:
                    6e:ea:fa:6d:f7:31:dd:c1:93:40:8d:1d:4b:ef:57:
                    91:c6:d0:6f:37:21:24:b4:51:b1:22:6f:27:31:88:
                    b2:0d:ee:cd:8b:9f:a9:08:58:d7:35:d2:23:3c:37:
                    56:46:98:2f:2b:97:7c:86:45:ad:cb:70:7f:0d:d4:
                    12:e1:02:2b:5f:54:dc:96:c2:b5:87:bd:64:83:c6:
                    7f:9a:87:9b:6a:5e:aa:7d:10:0e:56:a3:6c:77:54:
                    1b:ef:2d:6e:57:c6:15:98:91:84:bf:6e:2a:f9:b8:
                    12:b8:7b:64:1f:ab:40:d5:94:f7:69:69:c6:70:69:
                    a0:1d:20:9f:3b:ef:f1:54:39:f0:08:9a:50:8a:13:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:C1:D0:E6:3D:C6:C4:F3:79:E1:28:37:4A:71:D2:EE:D2:B8:F9:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.185.0/24
                IPv6:
                  2804:8d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273360

    Signature Algorithm: sha256WithRSAEncryption
         a6:fd:c3:89:f4:29:02:d9:e4:ce:6c:4b:b3:cf:3c:3a:b1:cc:
         6f:0c:a9:e8:07:2a:d8:68:6c:e6:f1:61:c3:e1:ea:be:cc:6e:
         42:6a:d5:d6:53:97:cc:8c:29:47:7a:94:62:9c:ec:51:4b:67:
         69:08:dd:a6:0f:1f:06:e4:f4:e7:3e:14:9c:e5:87:b1:76:2e:
         09:64:a3:6d:74:a4:af:e1:ab:75:bf:a4:fc:1c:ca:59:5a:55:
         9d:46:c1:24:1c:eb:d9:94:4d:23:af:30:8e:2c:99:b5:05:79:
         9b:4f:23:f0:8d:37:8d:b0:64:c8:a7:1f:fb:f6:ab:64:32:64:
         81:34:81:a3:92:a0:22:5f:c3:6f:99:f4:78:6e:c7:e0:38:eb:
         b2:b6:00:38:e1:64:65:16:8b:dd:d8:9d:68:5e:12:5b:e4:7a:
         f0:b3:af:65:e6:a9:00:39:7c:8b:78:c3:2f:de:36:19:f5:68:
         4c:ed:7d:f0:d4:1d:c1:2c:f0:b9:1a:43:2a:55:99:a7:68:ce:
         34:0a:d6:5b:64:6a:d9:5e:b3:83:1d:a8:c8:cb:98:a5:48:73:
         a1:9e:e3:77:a5:0b:86:b3:09:f8:54:90:6d:d1:3b:65:61:68:
         e3:6b:a1:1b:e5:9a:86:ab:7f:a8:e8:b9:2e:b3:b5:cd:29:06:
         c3:cd:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:31:34 2025 by rpki-client