Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
File:                     30FE93C29B2D9E965F52FCED04760810A240E9E1.cer (raw, json)
Hash identifier:          J/8xecMlB2z0XI1NJRbjOi+eH/yBWMShspz+bTyAweQ=
Subject key identifier:   30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       397E21C236CC1B2EDA199C68292826534C014D83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 08:00:15 +0000
Certificate not after:    Fri 06 Mar 2026 08:05:15 +0000
Subordinate resources:    AS: 53246
                          IP: 170.150.40.0/22
                          IP: 177.21.96.0/19
                          IP: 191.242.160.0/20
                          IP: 2804:358::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7e:21:c2:36:cc:1b:2e:da:19:9c:68:29:28:26:53:4c:01:4d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 08:00:15 2025 GMT
            Not After : Mar  6 08:05:15 2026 GMT
        Subject: CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:ee:5a:83:89:9d:da:69:83:ab:07:51:94:
                    ff:68:72:fa:ed:15:c1:06:91:e6:51:d0:de:8c:de:
                    b3:1a:42:b3:d9:02:eb:7a:f3:6a:7c:88:b5:b9:3d:
                    3b:71:8e:0d:99:54:1c:43:21:8b:25:5b:64:1d:e2:
                    00:66:78:dd:df:e8:b8:46:98:4c:ae:da:30:d7:3d:
                    69:5c:98:dc:d9:ba:da:40:9c:31:d0:56:0c:73:36:
                    37:c8:41:b0:9a:06:50:7a:b8:a9:04:9b:09:6d:80:
                    d2:df:25:78:fb:03:eb:87:af:8e:67:45:c6:44:5e:
                    cf:36:f1:03:1a:02:df:b2:00:96:34:e0:be:45:ff:
                    81:0e:ba:e8:3c:14:f5:3b:96:55:a9:af:8f:1a:0e:
                    79:9d:08:f0:be:95:81:b2:e3:9f:97:3e:ef:fb:46:
                    2c:b8:55:a6:66:c0:74:c2:aa:c8:54:44:82:40:8b:
                    49:d4:c9:ea:82:f5:ee:63:78:e9:08:b7:4c:1c:ba:
                    04:5b:48:ef:db:b4:59:51:e2:da:b3:b4:cb:8e:ef:
                    83:eb:90:91:7f:44:30:83:72:10:0a:6b:53:b0:16:
                    da:16:74:60:9f:f1:cb:e3:4e:ab:9d:45:91:d2:72:
                    a7:bd:4b:70:b8:36:a0:af:e6:3c:43:7a:51:29:ae:
                    3f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.40.0/22
                  177.21.96.0/19
                  191.242.160.0/20
                IPv6:
                  2804:358::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53246

    Signature Algorithm: sha256WithRSAEncryption
         02:98:9b:74:77:1b:31:92:a4:77:df:7e:cb:63:20:f2:98:ba:
         99:a9:f6:40:09:bb:16:ec:39:83:9e:ca:09:3a:91:f7:e3:1d:
         79:a0:fd:f9:69:93:47:2b:49:50:f1:f5:d5:01:12:82:66:1c:
         53:61:cd:1d:a5:df:ff:67:dc:8f:94:d7:83:97:1e:7e:99:7f:
         59:4d:4e:36:14:63:09:55:73:e6:2b:86:13:88:cd:e4:2c:43:
         86:3b:07:7d:3f:2b:d5:c8:df:1e:67:d7:f3:8e:93:41:8f:62:
         87:fe:0c:68:6b:29:12:ff:3e:14:e6:5a:7a:88:1f:2b:ca:39:
         af:c4:04:e2:84:2e:37:56:ec:89:d8:77:93:ab:a8:a6:a3:27:
         93:e9:ce:fc:6b:ad:fd:9d:83:be:de:72:ed:9c:4d:9e:ba:0e:
         92:7a:8a:c0:a5:9e:84:bd:e8:00:6a:57:60:c3:0d:7d:61:8a:
         cf:51:a0:33:83:f0:df:1c:3c:e5:f9:05:e8:dc:84:39:df:03:
         07:97:02:87:0d:91:11:0d:7f:60:e1:31:65:24:9c:73:89:4d:
         6e:7a:5a:86:b3:ab:5e:8c:34:80:99:c4:e8:a5:e7:aa:b9:f2:
         53:2e:55:3c:22:cc:11:fb:89:cd:66:e2:ca:11:1a:c0:53:e7:
         0c:ca:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:43:43 2025 by rpki-client