Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.cer
File:                     FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.cer (raw, json)
Hash identifier:          HVI3sIlatjgdioRplnPcci1u74Wz24ClWg4Y6k8ZfcE=
Subject key identifier:   FD:13:51:B4:E9:6D:AA:C0:9E:E4:56:EE:97:B2:95:D0:E0:AC:D8:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       659D01C5D7DDAEDD1C232520C1E3E2EA14A2148D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Jul 2025 12:31:07 +0000
Certificate not after:    Fri 10 Jul 2026 12:36:07 +0000
Subordinate resources:    AS: 264529
                          IP: 138.0.28.0/22
                          IP: 2804:210c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 00:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9d:01:c5:d7:dd:ae:dd:1c:23:25:20:c1:e3:e2:ea:14:a2:14:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 11 12:31:07 2025 GMT
            Not After : Jul 10 12:36:07 2026 GMT
        Subject: CN=FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0e:49:44:6d:fc:e1:47:10:39:a7:23:09:75:
                    7a:16:7c:ba:46:47:cd:e4:6b:7b:22:11:27:a6:36:
                    2c:ab:95:71:78:63:fb:b9:04:52:88:b7:6b:57:72:
                    bc:55:b1:9d:3f:ec:10:ce:07:a8:2a:00:f5:a4:b0:
                    89:14:97:39:60:17:01:56:15:50:c8:d1:d1:92:03:
                    f5:92:d7:3f:e7:f5:4b:94:28:24:f8:69:6d:e9:c9:
                    2c:7d:d7:27:6f:52:ec:00:93:a5:5b:34:5f:8e:f2:
                    bc:24:db:85:54:c1:35:b6:41:ea:a3:6b:50:1e:87:
                    b9:09:2b:73:c6:63:71:ab:54:54:4c:f6:2b:81:ef:
                    0a:30:5a:df:b0:36:81:b2:c9:c7:ec:45:62:7b:fe:
                    63:cb:7f:49:d7:52:05:b2:b6:0d:e7:a1:7a:71:20:
                    de:68:80:6a:ad:30:cc:94:d4:87:a3:a1:d5:ab:bb:
                    b1:29:82:63:ed:24:a5:59:65:8d:5f:29:5f:b8:05:
                    4b:06:e0:d8:33:bd:fa:b4:d0:be:08:5a:6c:57:75:
                    f7:9e:fd:05:0e:80:d7:3a:e1:88:26:f1:ff:74:0c:
                    80:9d:e1:61:54:73:d8:80:a0:18:83:10:5b:3e:1c:
                    c0:96:60:06:05:ba:93:44:9f:aa:35:af:22:2e:1a:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:13:51:B4:E9:6D:AA:C0:9E:E4:56:EE:97:B2:95:D0:E0:AC:D8:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.28.0/22
                IPv6:
                  2804:210c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264529

    Signature Algorithm: sha256WithRSAEncryption
         23:42:50:33:6f:76:0a:be:fe:7b:3c:15:93:6a:bd:44:b7:64:
         c0:55:ae:4d:68:7e:5a:01:30:53:bf:28:81:b7:47:9e:da:ff:
         f2:b2:e2:39:03:13:56:87:22:cc:4f:04:57:d4:b1:44:31:b6:
         54:a8:55:6c:fa:6e:97:7f:5a:26:73:38:2b:20:d0:13:f8:aa:
         42:33:a0:94:a7:b6:27:03:ca:b2:ad:19:35:37:12:d2:d7:06:
         8f:71:50:82:97:eb:b5:dd:04:36:a1:0b:f6:f4:d6:21:97:ce:
         26:3b:fd:d2:24:c5:01:e4:a4:cd:8d:1b:bf:f2:e4:d1:7c:69:
         6e:8f:70:0c:c6:4c:3b:f6:0b:c9:b4:9f:80:e3:1a:23:37:40:
         9f:26:5f:17:bf:09:df:85:3b:10:46:3d:2d:68:d6:04:e0:57:
         31:c4:49:41:ff:f8:10:9d:c0:66:98:51:72:11:f3:24:91:27:
         18:ad:0b:f3:66:69:f2:30:de:f9:45:5c:d1:e8:bc:77:85:03:
         b9:c2:35:81:46:80:ad:2a:7a:31:4f:ae:a3:bf:2b:41:13:31:
         28:e8:6d:71:a1:f0:46:26:4d:66:7e:1a:76:61:d5:27:88:5e:
         2a:1c:ee:2f:d1:aa:fd:30:47:f3:40:37:85:46:21:36:b1:37:
         bd:2e:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:55:13 2025 by rpki-client