Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer
File:                     1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer (raw, json)
Hash identifier:          2eBW/O1Xgrx3zD/FnCxv6AjscMTxG3DV89L8aCXCemU=
Subject key identifier:   1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F408230554B84747FC0BA099D4C8AA1D6190278
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 15:20:07 +0000
Certificate not after:    Fri 06 Mar 2026 15:25:07 +0000
Subordinate resources:    AS: 267083
                          IP: 45.228.244.0/22
                          IP: 2804:47e4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:40:82:30:55:4b:84:74:7f:c0:ba:09:9d:4c:8a:a1:d6:19:02:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 15:20:07 2025 GMT
            Not After : Mar  6 15:25:07 2026 GMT
        Subject: CN=1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:95:38:4f:e8:66:f5:c0:9f:ab:9a:9b:6a:ae:
                    cf:ab:09:68:12:ac:c1:71:fb:10:6a:fc:69:7c:1a:
                    6a:b6:b1:6d:dc:82:d9:2b:66:fc:e4:a0:e0:0b:ff:
                    ab:90:13:d0:fe:1a:fd:f0:8d:22:00:83:53:fd:2f:
                    a1:e4:cf:58:fc:1a:cc:f2:74:e4:cc:11:25:0b:0a:
                    4f:68:21:fa:1a:67:d3:98:7b:73:31:e8:31:db:19:
                    c3:1b:1b:ac:e1:59:a1:33:e1:bd:49:6d:85:0d:4f:
                    06:56:85:07:af:2f:c5:14:3b:13:46:d5:59:7a:e5:
                    da:ca:4f:94:04:e2:a9:69:51:58:16:9c:96:43:ad:
                    11:b4:44:b1:13:87:cf:19:a6:c8:89:64:04:49:2d:
                    20:09:41:4c:51:25:67:26:20:28:bf:bc:c9:18:00:
                    59:5a:ae:df:90:bf:d3:c7:43:16:8d:36:20:44:04:
                    bf:40:43:60:58:61:1e:71:e4:4b:e7:25:ec:af:9c:
                    a9:d0:1e:8e:7f:34:42:4f:f1:bf:da:69:46:e9:11:
                    63:e6:5f:b1:bc:fa:c9:e9:86:45:b9:86:6e:d3:7f:
                    2a:13:e3:b8:48:dd:1b:b6:8b:76:ed:3c:a6:01:af:
                    97:b7:f9:48:d1:cc:eb:e9:e6:e4:1c:80:17:09:2e:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.244.0/22
                IPv6:
                  2804:47e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267083

    Signature Algorithm: sha256WithRSAEncryption
         83:eb:b1:fb:5c:0e:74:eb:fd:40:c7:46:9d:f5:c4:51:6f:06:
         a0:67:71:27:f9:4d:9f:bf:7b:b5:a6:8b:31:ab:78:05:d1:75:
         86:16:9d:3d:f8:85:f0:91:7c:aa:f9:64:84:a4:c3:ae:a8:86:
         fc:8b:e3:2c:4d:0a:2e:db:4f:54:61:8d:be:7a:ac:81:bf:2a:
         6f:20:c1:f9:fd:96:f6:56:2a:5f:6a:32:67:8c:7f:a3:d6:65:
         1d:1a:af:48:51:f4:f8:8f:56:c8:63:4e:f8:e7:70:2e:38:78:
         f0:b4:23:ef:2d:19:63:14:e8:8c:93:84:cd:78:ff:e4:35:21:
         13:ef:5b:6b:23:58:d4:07:0d:a5:ec:2b:ae:d3:7c:75:74:db:
         e0:17:2c:da:bf:5f:ae:9f:07:3f:a2:2a:86:6b:7a:67:9d:39:
         68:40:4e:c0:a9:ba:39:a2:85:b1:27:87:61:b3:47:85:13:ed:
         2a:d7:fc:2a:6d:2e:00:0d:a6:a6:4d:21:9e:e3:02:ca:3a:0a:
         26:a2:59:3a:ea:5f:f8:66:06:14:7c:c2:cd:c3:fb:6f:93:ce:
         c3:b5:b4:fe:0b:4d:a4:26:1c:13:b2:c9:2b:93:f7:9e:d3:91:
         91:f4:2c:0c:dc:c4:0e:7c:ee:dd:b5:1e:3e:12:03:da:e4:ab:
         6c:82:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:38 2025 by rpki-client