Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1908A7AF56301BD37FE69645FBE82277D187BAB6.cer
File:                     1908A7AF56301BD37FE69645FBE82277D187BAB6.cer (raw, json)
Hash identifier:          DIEKY3xfMmML06ZbE8c3KI0ruLnoqnQ0e/5rs1rAvsg=
Subject key identifier:   19:08:A7:AF:56:30:1B:D3:7F:E6:96:45:FB:E8:22:77:D1:87:BA:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1330F919F864ACFFEDFE3A832ADB472A9BE434D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/1908A7AF56301BD37FE69645FBE82277D187BAB6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Aug 2025 15:36:17 +0000
Certificate not after:    Thu 13 Aug 2026 15:41:17 +0000
Subordinate resources:    AS: 266470
                          IP: 170.83.152.0/22
                          IP: 2804:3854::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 11:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:30:f9:19:f8:64:ac:ff:ed:fe:3a:83:2a:db:47:2a:9b:e4:34:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 14 15:36:17 2025 GMT
            Not After : Aug 13 15:41:17 2026 GMT
        Subject: CN=1908A7AF56301BD37FE69645FBE82277D187BAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:5a:82:42:e4:4f:5c:2f:7a:e9:33:a7:dc:
                    c4:21:c2:75:47:89:d9:8b:e8:ae:2b:c5:ef:a1:ad:
                    de:9a:74:1c:27:c7:24:c6:cd:a2:70:f3:ce:89:a3:
                    88:0c:f4:60:c8:f8:23:21:26:6f:3e:17:a6:d3:e7:
                    6c:3c:29:98:ab:a9:4a:dc:9b:f0:e0:3b:8c:64:b2:
                    d4:de:a7:64:97:02:d2:e5:68:fe:67:97:9e:1d:63:
                    3f:51:3f:d6:78:61:89:0e:90:19:9d:ab:29:81:37:
                    ed:02:7c:11:fc:07:29:73:a1:98:f1:2f:45:4a:53:
                    0b:de:88:6e:81:c7:16:c1:82:94:95:16:d1:69:5f:
                    ee:31:99:b1:5a:5f:98:ed:1d:3d:98:89:cc:84:30:
                    79:f5:53:d2:ca:e9:c2:16:5e:8b:24:25:c3:c7:cc:
                    36:d8:0d:3e:9b:14:f8:d9:d4:fb:75:3e:0e:2a:32:
                    51:18:73:03:5c:d3:f6:6f:ed:22:ba:be:84:e6:07:
                    5b:88:26:4d:30:ef:c7:57:c3:b7:aa:b5:c3:15:f4:
                    c3:24:00:61:89:5d:f6:6b:04:96:96:47:59:0f:1e:
                    45:55:6a:bf:29:e1:5f:a6:72:ef:5d:b9:64:b1:1e:
                    84:ac:d3:0d:5c:f2:24:a1:ff:2b:37:fb:7f:7b:73:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:08:A7:AF:56:30:1B:D3:7F:E6:96:45:FB:E8:22:77:D1:87:BA:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/1908A7AF56301BD37FE69645FBE82277D187BAB6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.152.0/22
                IPv6:
                  2804:3854::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266470

    Signature Algorithm: sha256WithRSAEncryption
         aa:00:e5:74:2b:20:c3:2f:f3:22:f8:b4:0f:9e:e7:00:93:2f:
         37:e5:42:63:2a:9f:a8:7b:66:0a:05:37:d3:fe:ce:5c:0f:74:
         4b:58:a3:23:8d:fa:ca:a7:25:ef:2f:6e:0d:84:68:7b:8b:0e:
         ce:8f:18:2f:f3:17:00:32:81:99:88:3c:b5:2d:fa:6a:84:79:
         f3:c4:1a:6b:6c:2d:f8:b9:fc:4f:cc:63:40:97:4a:e5:8d:ef:
         b6:66:ca:ec:7d:fd:ad:a1:87:da:ff:b6:52:1d:fc:de:f6:78:
         d4:8f:fe:0a:fc:ff:91:6c:d8:8a:25:ed:a6:f0:70:2d:67:c1:
         2b:96:d8:6e:ff:8c:a8:5b:16:e2:83:50:e1:f9:07:57:bb:17:
         c9:6c:32:e0:9e:b1:a7:74:3d:7d:1e:68:56:76:86:ee:47:6f:
         08:7e:f6:01:dc:7e:67:22:a9:7b:c1:8f:f4:d6:ba:d1:8c:77:
         ef:3f:cb:5c:35:f6:1f:83:aa:7e:88:2e:98:da:a2:62:c5:d2:
         f3:c4:d6:83:69:ca:11:fd:91:13:e8:b1:f2:88:51:84:4c:6f:
         7e:5d:20:21:c1:7e:5e:79:ed:35:e3:af:3c:94:8e:f3:fe:f5:
         03:e3:c7:14:8c:42:be:25:7d:c1:9c:4e:37:eb:ca:01:4a:bb:
         e3:44:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 11:57:34 2025 by rpki-client