Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1204D9F4DA6FAF5ABCC84008EC9580857C548C1D.cer
File:                     1204D9F4DA6FAF5ABCC84008EC9580857C548C1D.cer (raw, json)
Hash identifier:          3RRJtAJZpOy/SIt4Ox8mZpdzBDRX9U3kYGL0wYnqu9s=
Subject key identifier:   12:04:D9:F4:DA:6F:AF:5A:BC:C8:40:08:EC:95:80:85:7C:54:8C:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       27A9E63644A134CBAAE24B751FF00F2ED51AE15F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/1204D9F4DA6FAF5ABCC84008EC9580857C548C1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 May 2025 14:43:56 +0000
Certificate not after:    Thu 21 May 2026 14:48:56 +0000
Subordinate resources:    AS: 265269
                          IP: 168.90.88.0/22
                          IP: 2804:2d40::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Jun 2025 18:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a9:e6:36:44:a1:34:cb:aa:e2:4b:75:1f:f0:0f:2e:d5:1a:e1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 22 14:43:56 2025 GMT
            Not After : May 21 14:48:56 2026 GMT
        Subject: CN=1204D9F4DA6FAF5ABCC84008EC9580857C548C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:be:89:07:db:f6:51:45:86:1d:14:af:22:
                    00:3e:c6:a8:f5:74:e4:2d:24:02:cc:93:33:2b:f6:
                    95:a5:48:2c:2f:63:b1:2d:16:d7:e3:ce:11:6d:9a:
                    30:04:40:8e:d9:d2:cf:75:e6:4e:6f:ba:43:9e:fc:
                    ea:02:6a:e4:d3:f0:c7:6f:f7:bf:7e:70:0f:31:34:
                    17:00:89:98:0c:38:77:9a:07:a0:5b:a7:f9:f8:6c:
                    0a:0f:de:06:c7:1b:8e:8b:b7:33:a7:d2:df:29:9a:
                    ea:24:41:11:33:55:d5:c6:27:8d:8d:77:a9:d6:1c:
                    46:57:b2:ce:a0:7c:75:4c:7d:ad:fc:66:8c:ad:54:
                    d6:38:28:c4:c3:cf:e1:ce:75:c1:4f:2b:f4:89:ef:
                    ec:6f:a0:c7:eb:e9:e5:80:b5:0a:fe:3e:23:9e:03:
                    67:0b:6a:fe:55:88:be:3b:22:e1:f1:3b:89:5a:5d:
                    c8:c0:6c:81:26:70:e5:e7:65:c5:fb:39:94:36:59:
                    50:65:0e:ac:96:b6:2f:f1:39:64:8a:29:ee:03:9c:
                    f6:86:88:e5:0d:d7:e7:fe:57:c4:57:53:3e:96:30:
                    80:e7:d2:75:02:8c:87:c0:61:5d:5a:2b:b5:b7:e8:
                    e2:dd:a5:db:82:51:2d:2a:a5:64:4a:92:02:f7:0e:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:04:D9:F4:DA:6F:AF:5A:BC:C8:40:08:EC:95:80:85:7C:54:8C:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/1204D9F4DA6FAF5ABCC84008EC9580857C548C1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.88.0/22
                IPv6:
                  2804:2d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265269

    Signature Algorithm: sha256WithRSAEncryption
         95:ad:f6:33:3e:50:d4:02:8e:93:65:36:38:38:0f:67:71:54:
         cc:72:ef:ee:a0:28:65:b4:40:51:c2:d4:79:ec:7f:c1:be:2a:
         0e:2b:da:3c:9b:69:0e:10:57:29:40:e6:88:80:85:04:0f:cf:
         79:39:b3:46:77:2b:b1:92:c2:47:14:a3:ae:45:f5:18:03:a5:
         02:d9:b8:55:de:11:70:45:56:18:fc:b1:bf:45:74:16:d5:3f:
         b5:09:03:4a:7d:d2:d0:f2:4a:7b:9f:c1:27:bd:39:ba:33:41:
         3c:7d:07:e2:f2:0d:23:71:73:c1:48:6c:ea:3c:d4:9a:59:63:
         4e:f4:40:20:3d:5f:eb:d0:03:48:ab:2a:80:98:ef:a0:fe:10:
         a7:58:1f:06:a7:98:6a:1a:7f:af:81:17:6b:10:3c:6a:55:4f:
         48:9e:fb:f0:95:49:f6:4b:b4:0a:94:e5:b9:e4:e1:22:37:5d:
         a5:93:75:4c:44:c7:d4:67:00:f3:52:f4:d2:eb:0b:43:4a:91:
         66:41:34:6a:0a:2d:70:91:78:52:8d:a5:8b:03:2f:bf:27:3c:
         95:4c:c5:06:bb:89:c1:ff:ce:78:eb:a1:ab:c2:d0:01:e9:08:
         8d:76:03:e2:df:c1:6f:1d:71:18:46:b9:b2:63:33:9f:61:db:
         fd:e3:de:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:34:32 2025 by rpki-client