Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
File:                     123B03D46660DEE9B32E2712342EB4F48591C7B6.cer (raw, json)
Hash identifier:          BKunRehvPRXncJ3iiOUEumh3fjNYse+Z6mNgMa1cQFk=
Subject key identifier:   12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22AA71EB3CC22C41F908C1AAAA6A418CBC3A4961
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Aug 2025 20:01:04 +0000
Certificate not after:    Tue 18 Aug 2026 20:06:04 +0000
Subordinate resources:    AS: 262503
                          IP: 45.181.228.0/22
                          IP: 167.249.168.0/22
                          IP: 177.66.192.0/22
                          IP: 177.91.52.0/22
                          IP: 2804:2be0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 11:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:aa:71:eb:3c:c2:2c:41:f9:08:c1:aa:aa:6a:41:8c:bc:3a:49:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 19 20:01:04 2025 GMT
            Not After : Aug 18 20:06:04 2026 GMT
        Subject: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:73:2f:6d:0a:82:cd:cc:54:48:93:a8:b4:
                    6b:e3:86:65:28:8d:2d:11:5d:cc:bb:d3:68:48:98:
                    54:a4:28:6e:1d:40:f4:4a:c7:8d:36:d2:09:30:cd:
                    3e:3e:c9:7c:11:31:98:be:67:3e:b9:e4:f6:bf:4f:
                    06:4d:43:4b:c2:8f:3d:1a:79:a0:0c:6b:7e:6f:2f:
                    72:92:08:cf:57:f8:8e:0c:4a:1a:bd:47:15:8f:06:
                    5a:5a:b1:cd:3d:54:3f:d4:5e:2d:d2:0c:c8:c4:0a:
                    27:f4:b5:9d:b6:e1:5e:7d:b6:17:81:57:66:45:a7:
                    d2:b5:19:ca:10:85:90:25:ab:e5:4d:a1:86:bd:2f:
                    40:cf:81:13:aa:8e:81:e7:a4:5d:7d:d9:48:57:d7:
                    24:04:27:1f:5b:f7:7e:48:45:f5:63:49:5f:43:c0:
                    f8:52:bc:15:e5:73:9b:86:78:5d:4c:d3:f7:c0:fb:
                    12:87:86:97:85:12:e3:94:de:3d:5a:c8:43:cf:1d:
                    70:87:95:87:9a:26:1c:8d:af:f6:f0:14:3c:83:f7:
                    4d:6a:d8:0a:39:d0:cb:ef:51:02:45:22:69:b5:71:
                    4d:57:a2:1d:ee:f7:f4:3f:ce:5e:80:c5:da:3d:3e:
                    bc:80:9b:68:28:86:20:69:fb:a5:ea:d1:53:d4:57:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.228.0/22
                  167.249.168.0/22
                  177.66.192.0/22
                  177.91.52.0/22
                IPv6:
                  2804:2be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262503

    Signature Algorithm: sha256WithRSAEncryption
         0d:4c:10:cc:84:69:de:18:b8:39:39:04:b7:70:3e:8b:53:e2:
         15:6f:9b:b3:21:6b:cf:d3:f9:87:55:2f:91:f4:a1:03:b8:c1:
         ba:51:4a:86:03:83:a7:b8:25:ec:45:0c:5d:84:0e:c8:2a:93:
         3f:fb:db:50:ef:d2:b5:00:79:c7:1b:17:43:56:f4:b5:33:28:
         a5:f3:01:e2:28:57:c9:d9:59:58:c5:44:2c:8c:30:09:16:e5:
         e0:fd:b3:68:2d:ec:24:34:66:74:29:0e:2a:c5:ed:a9:fa:2d:
         6f:c9:8f:0d:0a:1f:ec:cf:d5:d4:87:07:ed:07:1b:56:db:ad:
         1c:c7:c1:9b:19:20:d9:06:b7:c6:b8:4b:b8:d7:ec:c8:ca:c7:
         05:89:e2:aa:d1:07:38:5c:41:45:dc:e1:91:57:79:8c:04:45:
         bb:15:66:b7:8c:f6:84:dd:17:35:49:e7:30:97:ef:b8:ae:2d:
         7e:ad:c4:e0:26:14:b4:59:c3:c8:93:41:73:70:cd:b0:c3:89:
         3b:9a:45:82:2c:5f:fc:8f:90:b8:60:25:73:78:c3:56:03:92:
         b4:b2:37:e4:17:d2:b4:d2:46:d8:3c:08:25:a1:0a:7c:bc:d7:
         84:5e:0a:d2:dc:57:c4:08:04:b0:b8:27:e8:30:21:ad:b1:44:
         d9:39:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 11:55:24 2025 by rpki-client