Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
File:                     B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer (raw, json)
Hash identifier:          g7mgrneL+9NIX8Kz4nPV/337ZUHH6WzdcMyXXzHpzUU=
Subject key identifier:   B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       654D5BABEBBF9462689B2077884AF145777E09B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Jul 2025 22:24:57 +0000
Certificate not after:    Wed 22 Jul 2026 22:29:57 +0000
Subordinate resources:    AS: 266953
                          AS: 267458
                          IP: 45.185.24.0/22
                          IP: 45.226.4.0/22
                          IP: 192.141.32.0/22
                          IP: 2804:41d0::/32
                          IP: 2804:45d8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4d:5b:ab:eb:bf:94:62:68:9b:20:77:88:4a:f1:45:77:7e:09:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 22:24:57 2025 GMT
            Not After : Jul 22 22:29:57 2026 GMT
        Subject: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:4d:c9:29:f5:21:63:7d:b2:c6:da:d2:1c:bf:
                    4a:f1:88:aa:35:18:3a:0d:d9:c7:aa:3c:e7:47:95:
                    b2:65:e1:c5:7c:ba:8f:ca:55:e9:8c:da:32:f2:11:
                    8a:9e:40:42:3f:fd:b1:5e:b6:b1:08:fd:3b:e1:a0:
                    8f:02:92:95:55:c2:3c:d3:36:b2:15:cd:8a:df:29:
                    d4:e1:3b:6e:f7:b2:85:88:ef:b8:ce:ef:28:71:0d:
                    81:c4:98:53:87:ca:74:ab:6c:47:3d:4e:40:90:99:
                    bd:77:45:b1:50:b7:c5:c4:71:25:ca:aa:5e:3c:b9:
                    3a:13:4a:0b:29:4c:49:2d:15:d7:1d:ac:e4:e6:63:
                    03:cd:d8:a1:4b:14:ab:ac:a9:84:fc:3d:f0:9c:8b:
                    66:ea:f8:c8:f3:f3:54:72:6e:19:75:cb:e7:36:8b:
                    a2:7c:4d:12:2a:70:85:a9:2a:d2:98:dd:5d:82:13:
                    9a:92:9d:b2:f9:5e:18:b5:f3:6d:39:6f:f0:10:cd:
                    91:de:05:ae:ee:94:66:1c:3f:ca:d4:e1:dc:9e:86:
                    3e:dd:b5:b3:3e:af:3c:09:70:76:1b:32:59:80:c3:
                    11:7b:e8:d1:cb:b1:81:ea:78:41:39:79:36:b0:f5:
                    ee:c1:83:62:f0:ba:0f:b0:01:08:3a:4d:96:6d:43:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.24.0/22
                  45.226.4.0/22
                  192.141.32.0/22
                IPv6:
                  2804:41d0::/32
                  2804:45d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266953
                  267458

    Signature Algorithm: sha256WithRSAEncryption
         ae:41:fc:8b:3d:ae:09:fa:5c:77:22:87:e9:47:45:16:f7:c3:
         b7:ae:e4:8d:39:8a:70:36:58:29:55:d9:8e:80:93:a9:8b:31:
         8d:0f:b0:89:55:ef:2f:43:7f:3a:02:2b:e7:59:0d:f6:97:e9:
         44:af:e3:42:f0:e8:35:1d:42:71:0f:a5:46:25:b8:87:0e:2f:
         03:44:25:96:7f:0d:f8:2d:6c:f8:f1:30:21:f2:c8:19:7a:a0:
         2d:4b:4b:66:15:a1:ac:9f:fe:d9:d4:54:03:53:69:7b:e4:3e:
         74:95:d1:5c:f0:d9:c3:10:4f:59:08:c5:32:4a:34:ee:16:9e:
         28:ec:b0:51:97:9f:48:80:9e:2f:cd:2d:3d:47:0d:14:8d:ee:
         ac:27:c5:85:90:9a:73:e4:65:80:b3:c9:68:21:5d:f9:9a:21:
         7c:4e:e0:07:6e:c0:ea:a2:db:d9:9a:05:b0:0e:64:a4:64:72:
         de:63:99:af:7f:33:61:cc:c4:f2:ba:9f:17:b1:27:73:ec:7e:
         00:eb:1d:1c:52:e2:11:95:b4:cf:63:ce:ad:4f:ed:ac:01:ca:
         f7:20:29:5f:62:9b:95:72:7d:0d:0f:dc:13:86:67:d6:18:fe:
         de:1f:ee:14:d6:06:05:0d:14:c9:4c:fc:9f:dc:27:d8:a3:58:
         70:7b:f3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:10 2025 by rpki-client