Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
File:                     32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer (raw, json)
Hash identifier:          ib89xRCMR74BorRxt0xZ0S7xJZ2CH6BfIMekLHSpum8=
Subject key identifier:   32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E992D29258FA644268551BC9F0FAE1701CCD7D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jun 2025 01:00:27 +0000
Certificate not after:    Wed 03 Jun 2026 01:05:27 +0000
Subordinate resources:    AS: 268546
                          IP: 45.169.12.0/22
                          IP: 45.187.120.0/22
                          IP: 138.0.148.0/22
                          IP: 2804:52dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:99:2d:29:25:8f:a6:44:26:85:51:bc:9f:0f:ae:17:01:cc:d7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 01:00:27 2025 GMT
            Not After : Jun  3 01:05:27 2026 GMT
        Subject: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:e6:62:be:0c:40:dd:70:50:4b:ae:6b:29:
                    9a:f0:ae:b2:8b:2c:e2:be:4b:16:b4:d8:6a:42:13:
                    36:61:fb:7d:c6:ce:7f:76:1b:4c:52:3a:c6:e0:ea:
                    53:6a:62:3c:50:7b:67:27:a9:8d:8e:4d:3f:1c:42:
                    4d:e0:74:e1:c6:e8:dd:4f:18:23:34:17:e4:9c:45:
                    ed:ec:a5:c9:b2:7a:51:52:da:1d:00:41:ae:f5:f3:
                    94:76:91:ab:88:68:05:2d:6d:f9:31:2a:53:23:0f:
                    c2:ab:b9:bf:f5:bc:d1:bd:c0:a1:89:76:21:b5:34:
                    95:96:54:50:26:47:91:43:16:4b:32:99:82:65:ca:
                    90:ce:ad:02:51:eb:46:69:98:a7:dc:38:7f:ec:56:
                    0d:98:0c:4c:e4:de:1c:3e:2b:d8:9d:ce:f3:4e:8c:
                    a7:33:43:4c:d8:b3:0c:12:d7:d3:07:98:c5:f3:ed:
                    91:7e:5f:cb:8a:87:db:77:cf:4e:60:68:44:16:f1:
                    31:14:d5:21:02:25:aa:62:fc:d3:40:92:0a:0b:72:
                    52:13:c5:52:7c:95:85:38:ae:c9:28:04:07:2c:43:
                    4a:a6:88:f0:4f:1f:94:af:e7:03:e8:a9:80:df:bf:
                    5f:6b:76:86:51:9f:07:04:10:42:3f:2f:0c:2a:07:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.12.0/22
                  45.187.120.0/22
                  138.0.148.0/22
                IPv6:
                  2804:52dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268546

    Signature Algorithm: sha256WithRSAEncryption
         65:0e:91:1b:52:1b:cd:4a:6f:ee:10:0a:12:60:7f:8a:5d:42:
         9f:87:78:f8:c5:0b:bb:33:04:1d:54:4f:e2:63:cf:98:78:86:
         ae:b9:4a:38:45:6e:c5:d5:03:06:ea:f4:91:4f:5c:d7:7a:ab:
         2c:73:e5:0a:d7:4f:82:d4:2d:78:0b:6e:85:5a:55:0c:7a:6b:
         19:e1:30:76:5d:94:ae:61:69:dd:26:52:ce:d5:96:93:53:7e:
         0f:02:2b:5c:3e:00:46:c2:0d:df:79:ba:4e:00:e1:88:1e:fd:
         39:a0:a3:d7:27:ad:44:68:13:b2:ca:9b:3c:85:47:c3:b2:aa:
         87:64:9c:4e:b4:2c:60:e5:53:2c:de:34:e9:8f:d3:6c:9c:0f:
         26:9b:9f:a5:17:04:48:35:80:e2:96:a5:0b:c3:4b:8b:9f:0b:
         63:ca:65:4a:d0:4a:d7:b2:6b:32:64:28:8d:89:f8:d9:19:04:
         d6:6e:e8:ea:a2:aa:51:90:0d:52:81:6a:aa:38:62:aa:60:ad:
         03:18:95:0d:85:f5:b1:7c:fb:01:86:5e:ab:fe:20:46:d0:ac:
         c9:04:6d:fb:0b:ac:f2:fc:a4:a7:92:1f:86:0b:b1:30:5c:cb:
         91:7a:a0:2d:f3:e3:bf:b2:85:61:c9:5c:67:ef:05:ea:e5:7f:
         f7:11:64:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:03:55 2025 by rpki-client