Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
File:                     4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer (raw, json)
Hash identifier:          HAbgCoh2Jldr/KsnDASJVRw1Z35Y6HZY6M8A9eY+72o=
Subject key identifier:   41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5CD9B94E9EB32CC4A338FFF2C3E5AABECE062161
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jun 2025 17:01:19 +0000
Certificate not after:    Wed 03 Jun 2026 17:06:19 +0000
Subordinate resources:    AS: 263656
                          IP: 168.197.76.0/22
                          IP: 177.52.144.0/21
                          IP: 177.66.28.0/22
                          IP: 200.215.160.0/22
                          IP: 201.139.84.0/22
                          IP: 2804:10fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d9:b9:4e:9e:b3:2c:c4:a3:38:ff:f2:c3:e5:aa:be:ce:06:21:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 17:01:19 2025 GMT
            Not After : Jun  3 17:06:19 2026 GMT
        Subject: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:59:69:7b:69:69:bb:4c:fd:ae:f3:24:03:
                    4b:74:0e:f9:75:cf:bb:56:a6:e6:05:5d:9d:82:7c:
                    b1:0e:0a:ec:3f:41:1e:00:02:ec:48:41:a7:b3:0c:
                    dd:c4:7e:f9:43:7e:da:97:3d:17:a3:e0:01:12:56:
                    90:4f:1b:af:82:8a:49:1f:bf:61:e7:e9:0d:00:71:
                    66:24:c3:4f:88:14:24:d2:5b:2d:c9:27:b9:5b:cf:
                    2a:0d:e5:c4:34:b6:87:91:55:3a:e8:b9:5e:20:ba:
                    60:b0:b4:a7:f6:a5:08:91:ab:d2:9d:56:8c:7d:77:
                    0d:3c:fa:ee:6e:b9:d1:d3:9b:d8:f3:17:78:7e:f9:
                    40:f5:0e:99:c8:40:98:99:da:4e:2e:c1:14:9c:9d:
                    63:3e:53:c1:69:76:53:4a:a1:cd:b9:1b:c4:c8:49:
                    b9:9a:b4:31:96:97:3c:9c:3a:45:59:48:e4:bc:e5:
                    67:4f:54:a0:c7:b6:ab:23:f6:c4:c0:ec:d1:f1:4a:
                    0f:5a:b4:1a:a6:ff:9d:77:a0:41:19:91:19:13:73:
                    40:c1:fd:80:41:e8:0d:73:80:6c:e9:36:01:34:9d:
                    2c:91:d5:e9:70:86:09:50:c1:41:73:ef:69:4c:f7:
                    6c:3b:d2:70:db:60:48:c0:b9:fa:42:d5:f2:e3:fd:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.76.0/22
                  177.52.144.0/21
                  177.66.28.0/22
                  200.215.160.0/22
                  201.139.84.0/22
                IPv6:
                  2804:10fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263656

    Signature Algorithm: sha256WithRSAEncryption
         7e:b2:36:87:8b:06:54:ed:b5:19:a9:5c:81:cb:7e:01:3b:9f:
         d9:d8:4d:f7:31:55:06:18:ea:a5:8f:7d:2e:a3:e3:29:10:ce:
         91:48:0d:83:30:12:9c:fb:c0:9b:44:67:72:b7:e2:07:8b:57:
         02:b4:01:9e:d6:c4:8c:18:3b:1a:3a:bd:2c:d0:80:13:dc:d4:
         3d:f6:f6:d5:de:23:db:4b:c3:7c:fa:ee:3f:cf:56:4a:e5:8f:
         f2:05:e9:cc:a3:af:1b:89:f6:88:50:a5:30:34:08:19:13:db:
         ea:63:52:c9:c3:0e:96:de:ce:c4:34:8d:e2:4c:d8:d0:e5:7f:
         56:fc:b5:00:5b:01:e1:20:d0:e9:5d:1a:04:8d:1c:a8:b4:8f:
         c1:d8:ab:14:1a:63:d8:6f:b6:ac:1e:4b:c3:97:b2:34:7d:b8:
         79:9d:66:eb:1a:84:91:28:c0:f5:b2:00:fc:5b:65:a9:ec:58:
         06:ec:04:8b:33:92:a4:c2:00:52:0a:1b:db:1e:10:c7:bb:b7:
         fc:d7:ac:8f:00:af:66:24:12:78:df:b5:2a:5a:de:96:12:72:
         ef:c8:79:67:57:05:e8:57:af:ad:6d:07:ef:e3:fb:25:bb:47:
         f5:9a:be:d5:51:d7:ac:35:8e:1f:af:40:ae:8c:8a:6e:33:c7:
         88:bf:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:17:13 2025 by rpki-client