Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer
File:                     2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer (raw, json)
Hash identifier:          3EyUXanpf6s4JTBEvFYGqL2ZwIgWzOrWcR+uJ5S0qq8=
Subject key identifier:   2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       38AA8B0886A23FED1153850B1D9FBDFE545293EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 May 2025 22:38:11 +0000
Certificate not after:    Thu 14 May 2026 22:43:11 +0000
Subordinate resources:    AS: 263571
                          IP: 177.55.88.0/22
                          IP: 2804:f38::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 05:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:aa:8b:08:86:a2:3f:ed:11:53:85:0b:1d:9f:bd:fe:54:52:93:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 15 22:38:11 2025 GMT
            Not After : May 14 22:43:11 2026 GMT
        Subject: CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:40:9e:3f:45:cd:9e:40:73:1f:51:f8:fc:1d:
                    15:81:e2:a6:6d:72:48:70:c6:c5:c0:af:78:3e:9c:
                    76:3a:c9:68:a1:57:62:78:d0:63:3f:3c:e9:8a:e1:
                    10:48:99:54:03:b5:16:b3:dc:ef:81:81:4d:7c:7b:
                    3f:f1:f4:f6:61:ff:b0:91:dd:1d:e0:dc:a0:e8:9b:
                    3f:7c:d7:7f:f7:1d:de:72:b5:a8:bf:8c:a8:1e:a1:
                    d6:41:88:24:0f:6b:7b:0a:d8:80:bb:88:99:32:fe:
                    ec:f1:cb:4b:f4:c5:00:88:ff:e3:8f:4b:c5:e3:44:
                    d7:ff:57:99:71:95:6c:5f:af:0f:c5:dd:f1:2e:8d:
                    a4:cd:3c:50:e0:65:31:19:79:cd:fe:6e:25:0b:1e:
                    bb:ec:46:c3:f7:61:e8:05:b7:6d:a3:29:08:13:73:
                    31:bd:3f:d7:6e:b7:a9:5d:cc:98:f2:36:c3:1d:ca:
                    21:ed:3e:63:6f:b8:ef:bc:cc:e8:34:d2:62:22:0b:
                    1d:ef:47:68:e7:ba:db:7b:1f:f9:a8:3f:64:11:b5:
                    fd:88:5f:f2:cb:3e:92:c1:44:ba:10:42:eb:48:5b:
                    40:b2:e8:ba:2b:f2:97:f9:6d:17:39:5e:2b:b7:70:
                    f6:f1:2e:2b:01:6c:a7:98:c7:ea:e8:de:34:a5:52:
                    66:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.88.0/22
                IPv6:
                  2804:f38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263571

    Signature Algorithm: sha256WithRSAEncryption
         72:99:ed:f1:24:8a:24:5d:16:49:7a:07:89:cd:11:83:3b:d5:
         6e:a0:74:6d:b4:49:75:8d:d0:08:9c:23:10:8a:fc:43:80:f7:
         26:e1:c5:a4:15:4e:25:b1:9c:5d:3e:9a:c6:d9:e1:07:8d:b4:
         94:d2:94:15:d5:8a:5a:60:c4:02:a0:7d:9d:82:06:b5:9e:57:
         0d:d5:28:2a:21:69:5d:78:51:fc:72:1e:5b:43:c5:fc:9a:e6:
         9d:13:7c:52:f6:73:45:0c:48:81:ad:59:8b:6e:c6:b5:a4:02:
         88:87:8c:57:82:04:0e:fc:64:32:b0:23:c4:61:67:9c:5c:57:
         4b:b9:96:ef:11:69:c2:37:4d:f9:74:b8:c9:b1:34:a4:09:bd:
         8c:7b:d8:ba:ba:3b:49:ff:9e:78:51:33:cb:33:6b:0e:a8:0a:
         51:01:03:1a:16:38:76:86:a1:79:f0:cb:37:8b:91:cd:78:7a:
         6d:a2:68:ff:f2:c2:d4:46:1e:74:09:ea:1c:a2:d9:80:a4:f3:
         b1:3e:51:ec:04:1f:c1:29:3d:98:41:29:0f:eb:c7:78:24:76:
         0a:b9:08:69:b4:76:fe:03:5c:7e:f6:9c:0a:1f:8c:ba:12:e9:
         23:72:78:2d:82:80:81:3f:dd:34:36:84:c4:fa:3d:3d:68:7e:
         5f:14:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:16:11 2025 by rpki-client