Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.cer
File:                     2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.cer (raw, json)
Hash identifier:          hPYlCvURwA4GIuB7lN5XvhjB4hmnt2b7f7DJyMBXKcA=
Subject key identifier:   2F:65:51:3E:9B:A3:C6:CA:0E:D4:70:DE:03:A6:E1:E3:04:EC:97:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2CFC51ECEB64F095BFE5004863AEB2B0E80D5153
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Feb 2025 13:39:36 +0000
Certificate not after:    Wed 11 Feb 2026 13:44:36 +0000
Subordinate resources:    AS: 273360
                          IP: 201.54.185.0/24
                          IP: 2804:8d7c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fc:51:ec:eb:64:f0:95:bf:e5:00:48:63:ae:b2:b0:e8:0d:51:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 12 13:39:36 2025 GMT
            Not After : Feb 11 13:44:36 2026 GMT
        Subject: CN=2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:26:b5:6d:6b:91:e1:1f:5a:17:02:2e:56:
                    03:3b:0b:32:52:bf:48:4b:08:01:03:6e:ce:75:a6:
                    0a:48:7c:08:89:3e:a7:dc:fc:bd:4d:1f:65:a3:03:
                    c7:af:2e:b2:c1:83:7e:05:1f:f6:1f:4f:53:0b:e5:
                    61:fb:04:10:49:56:21:52:1c:3a:bc:16:a9:53:f0:
                    32:25:d2:34:b4:06:57:9f:4a:40:dd:76:17:78:f7:
                    be:4c:70:27:c6:ff:ae:74:16:04:2e:76:61:7e:1d:
                    32:9d:9d:0e:c9:7d:b0:2f:9d:0f:c1:eb:39:4e:0d:
                    38:05:01:ef:05:96:16:28:34:40:63:6f:bd:c6:10:
                    f4:4d:18:ab:ef:e0:45:d5:b9:2e:eb:a8:cf:fa:6f:
                    83:3f:bb:0b:1e:21:2b:ac:ba:9e:b6:69:89:26:c7:
                    23:58:47:68:10:bb:2e:cf:be:65:62:fe:fb:00:6c:
                    9f:2e:07:3d:d5:59:e4:11:3c:51:c7:32:79:b5:3b:
                    f9:bc:61:78:78:10:04:a2:24:59:b7:e6:a1:b2:b6:
                    fe:e0:f0:1d:48:ed:b0:f2:bf:b3:1b:02:c7:ef:4f:
                    da:26:fe:8c:3f:08:fb:96:ec:9e:2a:ef:de:42:54:
                    c9:ba:24:ad:e9:63:39:02:98:93:d5:5a:79:1c:d6:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:65:51:3E:9B:A3:C6:CA:0E:D4:70:DE:03:A6:E1:E3:04:EC:97:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.185.0/24
                IPv6:
                  2804:8d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273360

    Signature Algorithm: sha256WithRSAEncryption
         cf:9e:49:b7:ae:aa:b4:df:c5:a8:55:b0:3c:7d:44:c2:46:fc:
         e4:a9:f0:8a:93:14:f1:04:c0:4d:eb:f5:1f:eb:c5:97:b2:de:
         5a:89:9d:16:e3:70:cc:e3:ad:85:94:c4:77:59:ff:f0:7d:2f:
         51:0e:d9:df:38:cb:d3:78:ae:ed:f5:bc:16:b9:30:bf:71:ec:
         12:9e:fb:ae:92:79:ac:da:11:ad:6e:7e:49:18:ec:65:05:e7:
         4c:05:50:45:f8:c0:67:33:0e:64:9a:74:5a:9b:76:22:ab:d6:
         4c:9b:7e:a3:e6:a2:80:88:dd:a0:23:8b:aa:58:de:3d:3a:d5:
         3b:85:00:73:a6:7e:e8:15:95:52:7a:a9:59:a7:bb:98:d4:e2:
         b9:c4:83:a5:7e:d1:54:7e:8e:99:5c:bf:7b:cc:b0:6c:ad:fb:
         a5:76:72:e5:e5:c0:fa:60:6c:ba:63:fe:8c:f5:ec:86:42:c9:
         d7:0a:e5:90:f3:58:7a:cf:3d:ea:b9:a4:79:12:ed:f6:08:79:
         42:07:fc:82:3f:72:d0:c6:a4:6b:d4:ff:b3:38:07:d3:7e:54:
         16:d1:48:c1:eb:6a:3a:08:e9:67:98:95:89:e9:22:da:e0:23:
         a4:ef:33:50:e2:d6:6a:63:22:06:03:6c:b1:c9:e8:11:46:5b:
         86:34:5d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:34:57 2025 by rpki-client