Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/07AD8376F882D42CEEFED4B7513AFC3F2EA11EF6.cer
File:                     07AD8376F882D42CEEFED4B7513AFC3F2EA11EF6.cer (raw, json)
Hash identifier:          I5nNEN8SKK3gQNBObFa1qDao4WJJpiBXTgBHzCQZBPg=
Subject key identifier:   07:AD:83:76:F8:82:D4:2C:EE:FE:D4:B7:51:3A:FC:3F:2E:A1:1E:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4EB76D7BB0503DF73307F30296CA34EE23C5C52C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/07AD8376F882D42CEEFED4B7513AFC3F2EA11EF6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 May 2025 22:32:41 +0000
Certificate not after:    Thu 21 May 2026 22:37:41 +0000
Subordinate resources:    AS: 268253
                          IP: 45.236.248.0/22
                          IP: 2804:4e50::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 15:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b7:6d:7b:b0:50:3d:f7:33:07:f3:02:96:ca:34:ee:23:c5:c5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 22 22:32:41 2025 GMT
            Not After : May 21 22:37:41 2026 GMT
        Subject: CN=07AD8376F882D42CEEFED4B7513AFC3F2EA11EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:86:38:0a:72:58:c6:e7:81:31:f7:80:6a:
                    95:68:22:fc:70:2d:6c:fc:f9:fe:d7:9a:8e:87:82:
                    19:94:d2:b7:2d:9a:9c:1c:d3:38:85:c0:7b:4b:4b:
                    51:da:b3:8b:01:63:cf:d4:7e:5e:7b:9c:ff:21:12:
                    95:52:77:bb:3b:eb:57:cb:c2:56:d0:9b:5a:6b:b8:
                    e2:b4:0b:39:d4:b2:a1:12:9c:c1:40:7d:55:0d:f0:
                    e9:db:20:b2:95:1a:a9:54:49:93:21:30:0c:2c:9e:
                    ba:ef:db:12:06:0b:39:ea:9b:da:59:45:39:3a:77:
                    a7:3e:18:4f:c0:e4:d6:28:77:5d:73:65:ae:7f:53:
                    c9:2d:d5:67:51:c2:6c:ec:57:21:2a:6e:f6:c1:66:
                    c9:d1:21:3b:19:77:91:e3:96:c3:4c:86:c2:db:ae:
                    ee:d5:17:f1:31:ab:96:49:ca:db:a6:8f:97:9b:c6:
                    e8:15:5a:34:96:00:05:d1:62:f5:8c:16:a2:19:48:
                    2f:58:95:10:1d:d7:40:49:2d:fc:19:7e:f8:f6:7d:
                    f1:e1:7a:f7:68:58:d1:ad:a8:8e:25:d3:96:a7:a9:
                    03:f7:40:05:f8:ef:c6:4d:2c:9c:2d:0b:8a:35:2b:
                    9d:e6:b6:e4:51:72:f3:d2:52:2f:3c:c2:53:4b:9b:
                    29:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:AD:83:76:F8:82:D4:2C:EE:FE:D4:B7:51:3A:FC:3F:2E:A1:1E:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/07AD8376F882D42CEEFED4B7513AFC3F2EA11EF6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.248.0/22
                IPv6:
                  2804:4e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268253

    Signature Algorithm: sha256WithRSAEncryption
         3e:53:7a:e4:cb:a6:56:19:25:9a:26:71:5a:b3:98:c7:68:1d:
         dc:8a:34:1a:da:3d:13:12:72:f9:e3:c8:9d:ba:77:90:63:4a:
         8b:36:e9:2b:28:0f:a9:1b:f5:b6:4b:07:3d:d1:0e:43:84:33:
         bb:52:d9:cc:9a:5d:ee:69:bc:c9:e8:e2:0f:f4:e4:fa:06:22:
         fb:d4:56:0d:03:eb:ec:87:04:ab:46:e8:5f:e5:05:fb:17:99:
         52:5f:21:8d:67:64:fc:d6:d1:e1:57:76:4e:6e:8d:bd:43:e3:
         62:38:ea:e8:d3:7d:a1:e1:70:89:73:14:12:6d:4b:87:50:07:
         95:8c:9b:98:62:6f:c3:8e:1a:f6:a2:98:5d:0b:a4:06:90:de:
         26:b6:21:9a:b8:06:5b:3c:24:86:57:31:1e:53:c0:b4:ed:ef:
         13:ca:3c:28:e1:e2:93:08:71:b2:c1:74:e2:09:7a:2f:d1:e6:
         27:96:2d:20:c5:ad:87:b1:63:19:b8:01:5b:c2:c6:47:61:98:
         1a:c0:34:ab:bf:a7:b2:49:9c:4f:3e:49:f4:54:5f:b0:e0:e3:
         71:bb:80:c7:9b:82:d1:f9:8a:b3:03:8d:21:f9:ac:5a:07:be:
         3f:f5:7d:0b:2a:a8:13:9f:ec:29:87:c9:69:2d:1b:04:79:bb:
         9f:ec:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:59:43 2025 by rpki-client