Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer
File:                     FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer (raw, json)
Hash identifier:          Nmq9ohCfyxWR+wSmBJivLDvmYm97jb1MMrbpQoKoUNk=
Subject key identifier:   FF:7F:52:96:B0:F2:ED:E1:0E:D5:7E:3B:FB:8D:49:70:31:8D:7D:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E16E23A7CC58C9E94E736DE1B8D89CBA1976D75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jun 2025 18:57:29 +0000
Certificate not after:    Wed 03 Jun 2026 19:02:29 +0000
Subordinate resources:    AS: 61599
                          IP: 200.71.76.0/22
                          IP: 2804:3ca0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 18:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:16:e2:3a:7c:c5:8c:9e:94:e7:36:de:1b:8d:89:cb:a1:97:6d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 18:57:29 2025 GMT
            Not After : Jun  3 19:02:29 2026 GMT
        Subject: CN=FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:e7:87:aa:a4:78:e0:51:46:f6:45:44:66:
                    1f:24:00:e8:51:b8:ca:57:b1:98:b9:17:0c:17:b3:
                    e8:ea:e2:cf:8d:35:bf:0c:7d:09:96:df:8c:17:cf:
                    79:3c:b3:04:7d:d3:eb:fe:7b:7d:99:4c:23:ed:a6:
                    d8:4c:bd:ac:77:bb:72:d2:c9:b6:f1:88:b2:86:69:
                    db:51:31:83:5f:4e:2f:09:50:a2:62:ae:5a:f6:33:
                    cb:e8:78:42:92:4d:cf:40:41:a4:fe:64:12:df:d4:
                    7e:aa:6c:ce:94:77:f5:fa:92:2e:7a:bf:94:d5:d4:
                    b7:71:b5:fb:cc:65:4d:9a:53:1b:27:67:ae:52:f2:
                    43:02:3f:46:6b:da:34:1f:14:48:07:24:a0:e2:b9:
                    2c:0e:eb:24:a7:19:9c:7c:c1:65:47:49:a0:4d:f7:
                    5e:0a:37:20:ef:c6:34:28:c4:9a:2a:cd:f3:2c:c7:
                    31:5f:85:a0:20:7c:c5:6c:0c:5a:09:0b:9f:40:fd:
                    df:e2:f7:e3:8d:63:c2:f8:2d:09:5d:7d:df:42:93:
                    3b:40:a8:a4:69:a6:7f:30:e1:f5:d4:b6:41:d0:d2:
                    13:2a:2f:ba:87:8e:f5:1c:79:aa:72:21:fe:96:87:
                    4c:b1:80:70:1a:dd:1f:a8:84:98:c2:37:46:86:56:
                    f8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:7F:52:96:B0:F2:ED:E1:0E:D5:7E:3B:FB:8D:49:70:31:8D:7D:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.76.0/22
                IPv6:
                  2804:3ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61599

    Signature Algorithm: sha256WithRSAEncryption
         d9:e7:73:b2:0f:11:84:b3:bd:51:89:2b:a9:b1:65:aa:a3:c7:
         55:2c:4a:18:43:5b:e3:40:46:07:b0:cd:75:33:ac:69:df:4c:
         1c:ef:dc:34:6c:35:a3:da:cb:56:25:10:8c:6c:12:84:f8:5e:
         c4:39:cb:eb:74:c7:5e:12:88:ec:5e:e7:1d:4d:c7:e2:6b:ed:
         95:99:b1:c5:b2:bd:61:e9:85:5c:cc:c3:17:cf:98:5c:7d:e5:
         ca:f0:39:d7:a6:7e:57:f7:08:44:94:b0:c1:37:5c:81:b9:07:
         3a:68:c9:2f:34:04:65:60:79:1b:4a:33:da:48:11:d3:73:28:
         9d:8a:2a:f2:ab:81:8f:f6:f4:54:b9:ce:6e:15:cd:2b:11:8c:
         4d:f0:cd:af:de:25:d6:08:e2:99:a6:55:c3:22:08:40:45:9c:
         30:4a:63:c1:66:ea:94:38:b2:b5:d3:8c:41:21:4f:d2:24:0d:
         db:44:35:3d:ad:1e:59:cc:17:40:2f:db:72:e6:9d:ef:a1:ee:
         83:8c:4b:4b:ad:17:48:3f:1b:df:3d:69:93:72:46:0d:40:92:
         41:d8:93:f0:ca:f6:d8:64:97:f4:1f:07:3b:0e:13:d2:52:be:
         53:50:4f:f6:49:ec:42:86:f9:1f:9f:35:c6:a6:41:e2:be:8f:
         a9:e5:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:29:09 2025 by rpki-client