Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3EF633923A51B56E1376665FA9A269A157B419AF.cer
File:                     3EF633923A51B56E1376665FA9A269A157B419AF.cer (raw, json)
Hash identifier:          PB4/PbYJoCGG45cqP3C0sFQ6xGj36S9znLeaKzwEdko=
Subject key identifier:   3E:F6:33:92:3A:51:B5:6E:13:76:66:5F:A9:A2:69:A1:57:B4:19:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49A6B22E8391A80C03D37C954373F2061E1973C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3EF633923A51B56E1376665FA9A269A157B419AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Aug 2025 06:19:12 +0000
Certificate not after:    Thu 27 Aug 2026 06:24:12 +0000
Subordinate resources:    AS: 271103
                          IP: 179.42.0.0/22
                          IP: 2804:7650::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a6:b2:2e:83:91:a8:0c:03:d3:7c:95:43:73:f2:06:1e:19:73:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 28 06:19:12 2025 GMT
            Not After : Aug 27 06:24:12 2026 GMT
        Subject: CN=3EF633923A51B56E1376665FA9A269A157B419AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:7a:aa:9f:1c:d5:d0:b5:f6:e7:a7:c9:d0:
                    c7:80:45:0d:f6:89:90:d2:54:18:e7:19:da:a4:19:
                    13:f7:ac:76:b1:82:d1:0a:16:f8:1d:bf:6d:35:39:
                    e4:ae:13:b7:41:bb:62:2b:6b:ab:73:4f:68:c9:22:
                    55:81:d7:dc:49:ad:4f:e1:11:d7:02:d6:3b:81:26:
                    a0:b3:0e:b4:16:4f:3a:b8:7a:93:13:84:be:cd:7e:
                    80:b4:f1:05:eb:e0:c0:6a:18:69:8b:f7:dd:13:8e:
                    87:02:99:2a:50:eb:92:5f:86:ee:f1:97:1c:03:ed:
                    18:ff:89:d6:98:8f:9e:ec:54:50:31:8f:7f:15:87:
                    01:2a:85:67:63:ef:15:34:4a:04:ff:ce:c9:ae:9d:
                    91:d4:34:4d:ab:e1:86:a6:32:77:d5:67:d9:7e:ee:
                    ef:23:9c:91:57:1d:55:d7:5b:a4:1a:b0:03:5a:c5:
                    95:65:59:d0:c7:fd:55:06:a4:70:5c:e8:ba:32:0d:
                    2b:5e:43:ff:96:db:c6:d6:11:77:7a:11:ae:b5:c0:
                    79:0c:d5:ca:ce:e1:c7:6a:f1:13:02:45:89:49:59:
                    6a:95:2b:d1:bb:56:8d:f3:c0:60:d3:f7:c7:9d:88:
                    6a:bd:88:24:a9:9e:09:13:bf:2f:56:de:01:20:07:
                    5b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:F6:33:92:3A:51:B5:6E:13:76:66:5F:A9:A2:69:A1:57:B4:19:AF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3EF633923A51B56E1376665FA9A269A157B419AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.0.0/22
                IPv6:
                  2804:7650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271103

    Signature Algorithm: sha256WithRSAEncryption
         81:d9:09:15:4f:df:b5:93:06:19:33:4d:a5:88:f1:07:64:19:
         86:45:b5:4d:1a:20:8a:a9:ec:99:eb:03:65:4f:f6:9b:37:66:
         93:24:39:ea:7b:62:e6:dc:de:e3:ce:8a:96:ce:2a:65:fa:4f:
         be:88:84:6a:a2:49:5c:14:56:aa:9d:d9:3e:72:65:90:c3:e9:
         3b:08:8e:6e:78:55:f0:1a:15:15:e6:dd:3d:b4:82:ea:c7:4f:
         94:d5:55:14:44:40:fc:e4:dd:c4:61:3b:96:08:97:5c:38:90:
         c5:2a:63:03:88:2f:db:66:64:4b:76:52:bc:35:65:c8:7c:cc:
         fe:e0:dd:22:ce:2a:c4:6d:fe:97:b7:17:f5:19:cd:d2:16:bd:
         74:82:1c:3d:36:f4:76:9a:dc:0d:aa:47:90:ed:35:0f:c5:be:
         00:13:3e:dd:b9:c2:55:30:ea:ac:54:05:b6:61:4b:6f:b4:ff:
         5d:d8:57:6a:9a:1b:53:7b:84:cb:59:95:c4:5f:69:5c:1a:34:
         60:4b:3e:57:df:23:59:7f:d1:61:85:53:c7:6b:41:09:35:fa:
         38:2e:cd:fb:84:78:fd:a7:93:68:56:93:d2:cc:5e:09:02:35:
         7c:1a:66:3f:7a:4a:8f:87:aa:35:5b:de:4f:5d:47:df:89:80:
         62:23:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:24:53 2025 by rpki-client