Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer
File:                     3A546F3625A8CE1F69122E8BD80769CC991FC593.cer (raw, json)
Hash identifier:          fylkU5NacUKeNLztIzd6yjthm+9wO5VoGfo5DFCV5IQ=
Subject key identifier:   3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       490B416D632D45A4DB250119EDE787DC367B36BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Apr 2025 01:50:41 +0000
Certificate not after:    Thu 09 Apr 2026 01:55:41 +0000
Subordinate resources:    AS: 52781
                          IP: 177.200.48.0/20
                          IP: 2804:24d4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 12:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0b:41:6d:63:2d:45:a4:db:25:01:19:ed:e7:87:dc:36:7b:36:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 10 01:50:41 2025 GMT
            Not After : Apr  9 01:55:41 2026 GMT
        Subject: CN=3A546F3625A8CE1F69122E8BD80769CC991FC593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b7:df:c5:c6:60:82:4d:0d:fe:d1:7a:4a:8c:
                    bc:cc:49:2f:ad:77:a9:d4:86:6e:80:11:23:7a:6a:
                    c4:0c:b9:76:74:ec:c0:b5:ec:6f:80:67:2d:5f:64:
                    ed:7e:6e:91:95:61:a6:5c:d0:03:a5:a5:2b:f7:13:
                    9f:c8:00:d4:71:f5:1a:86:ce:9e:c8:d2:bc:4c:ec:
                    a9:d7:07:e1:c5:a7:14:20:1c:00:dc:bb:3a:c3:e4:
                    33:cc:03:b9:23:c2:b4:67:93:68:15:81:de:18:bc:
                    04:04:24:0d:6a:64:29:3e:b0:52:bb:0b:bf:bd:02:
                    1e:f1:0d:48:67:bc:36:42:39:dc:10:d9:51:f5:bf:
                    d2:46:69:37:e2:64:4d:37:14:00:62:b0:3d:08:f7:
                    b4:3d:d1:ca:d6:14:8b:fa:ac:75:db:63:2a:8e:76:
                    55:87:2d:cf:e8:0b:20:bd:9a:bd:ba:67:27:89:ad:
                    6e:70:e7:97:24:a4:4b:6b:20:cc:62:61:6b:cf:88:
                    5c:1e:19:be:b0:23:8e:f3:81:6c:94:44:5f:52:20:
                    d4:42:2f:d4:68:2e:eb:34:58:fa:b6:70:45:ba:20:
                    41:4a:34:1d:62:20:53:ed:e6:43:3c:d7:16:5e:c8:
                    3d:48:61:b8:e1:b4:50:2c:c0:f1:55:57:15:2d:cf:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.48.0/20
                IPv6:
                  2804:24d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52781

    Signature Algorithm: sha256WithRSAEncryption
         90:5e:cb:19:f6:c6:38:63:a7:74:7c:43:d8:06:85:66:27:54:
         d8:8a:ff:38:56:c1:f8:de:dd:46:9b:f9:2d:be:a9:39:3f:77:
         7c:54:d5:36:6b:01:cb:6e:4e:b7:72:e6:a3:38:4f:c5:e2:f9:
         92:3d:29:05:92:49:72:1c:49:73:ad:7e:bc:be:53:71:9e:90:
         d3:63:7b:1f:50:2b:0a:fa:b1:2c:0c:26:a3:8e:43:1f:8a:db:
         89:39:6f:6e:01:28:fc:fd:0b:0b:04:54:60:59:46:72:62:2d:
         00:dd:c5:b1:d2:3b:05:d7:ef:19:9b:3b:ed:59:88:55:84:50:
         57:af:fa:6b:f3:3a:3e:0b:d1:0c:3e:06:84:8d:74:c6:6d:84:
         54:e7:b9:f5:98:1b:af:e3:c1:6f:7f:28:ba:ca:11:16:e4:ec:
         27:16:f7:d1:75:1b:fa:33:00:cc:bd:f4:4b:ef:f3:5e:96:1b:
         7f:e0:42:2a:4a:9c:79:82:4a:28:be:37:c6:f5:4e:1d:05:10:
         84:90:2c:aa:f3:ac:b6:41:df:9b:a3:de:56:95:fb:dc:89:38:
         27:67:b8:09:98:87:58:27:81:5d:df:61:2d:21:6a:e4:9a:5b:
         1c:96:3a:ce:6c:89:3a:33:53:b3:ca:9e:2c:a2:3c:9e:9a:92:
         6b:65:83:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:20:45 2025 by rpki-client