Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
File:                     4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer (raw, json)
Hash identifier:          tD884Mt8UpppmLHN2+JjaBiBO4BUPT5mXhL3O9ZwZ3s=
Subject key identifier:   44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58313B65810126BCCBC5C9ABC52D0226B9AF8BCA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 May 2025 03:07:35 +0000
Certificate not after:    Wed 27 May 2026 03:12:35 +0000
Subordinate resources:    AS: 263988
                          IP: 138.255.188.0/22
                          IP: 2804:28f0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:31:3b:65:81:01:26:bc:cb:c5:c9:ab:c5:2d:02:26:b9:af:8b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 28 03:07:35 2025 GMT
            Not After : May 27 03:12:35 2026 GMT
        Subject: CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:a4:67:fe:5d:75:bd:06:cd:38:c7:47:f3:
                    f3:ca:f7:cf:14:84:be:58:9a:02:69:04:ed:33:36:
                    4e:74:5b:2c:90:ba:90:3d:10:28:80:3b:5a:18:86:
                    bd:e6:ed:a7:3d:e0:cd:cb:4b:19:6a:53:91:cd:e1:
                    1b:24:6b:4c:1b:04:bd:29:bb:70:63:86:24:41:83:
                    8a:89:36:1c:5f:1e:6b:a1:f9:ec:d5:db:06:d3:51:
                    c7:a5:24:9a:95:68:29:86:44:8e:f0:7a:f6:f1:4f:
                    3f:d4:4a:82:44:ff:b6:84:07:00:31:cb:c0:d2:90:
                    e2:79:99:67:b5:b0:28:fd:01:b2:88:9c:d6:47:b9:
                    2c:58:a8:24:e3:0b:b1:26:8a:5d:2e:6c:d4:94:6b:
                    0f:49:d5:c7:b7:7b:0c:e3:b7:d5:79:86:dd:36:9a:
                    82:54:4c:8f:81:10:c7:04:e5:5b:3e:20:ef:27:3b:
                    4b:2a:21:db:c5:d4:74:c1:b4:47:f4:a5:df:ad:ba:
                    d7:72:21:e9:af:38:08:dc:7f:ce:23:64:54:57:fa:
                    22:ff:b5:62:53:ab:15:e7:c9:e0:fd:b8:ee:54:7e:
                    92:d8:35:97:7b:b6:b4:87:96:d4:d8:ba:be:1e:6a:
                    a3:91:a6:d4:4a:c2:f2:91:62:29:2b:5a:9f:dc:80:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.188.0/22
                IPv6:
                  2804:28f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263988

    Signature Algorithm: sha256WithRSAEncryption
         d5:e3:e5:e5:cd:15:ea:a6:70:36:c5:4b:d8:9b:c8:1e:26:a9:
         a1:c9:ff:dd:3e:3c:1e:6d:10:f4:c5:44:2d:96:1a:16:5d:25:
         99:36:14:e2:69:21:df:9d:63:ae:43:73:fb:4d:ee:3e:69:61:
         f9:12:d5:b0:d7:76:e6:17:71:27:0e:4c:77:79:80:9c:68:3b:
         57:db:e4:ae:9d:e5:f9:82:52:59:0c:eb:8b:e4:7f:f5:a9:17:
         d8:23:15:7d:1a:24:c8:17:66:70:ed:c8:59:4d:5a:0b:78:ea:
         d0:1b:1d:32:0c:a4:53:78:e6:e6:a3:3a:53:5a:53:0b:e0:25:
         39:9b:21:14:8c:e2:1c:1c:df:1c:ff:f9:9d:05:6b:5e:22:8d:
         28:2f:89:2e:c7:6b:7c:2c:77:05:78:db:74:4b:9e:3a:85:20:
         30:2e:fd:47:8a:fb:74:b6:df:dc:ae:60:e3:d8:53:1b:36:3d:
         09:ea:0b:50:b5:51:ee:82:ce:15:dc:25:ab:23:37:3b:8b:f8:
         50:0d:e3:5e:cf:9f:6f:f8:31:68:c6:cb:15:13:82:a8:89:da:
         fc:bf:a6:3b:24:3e:17:56:df:53:8f:6e:c8:cf:91:51:6f:14:
         76:22:20:69:25:af:2f:47:d3:7d:9e:28:20:b6:a7:a9:c6:4c:
         6b:1c:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:15:34 2025 by rpki-client