Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/500AB3E52FE9AE7EAB5907F6CA881FBF9CA34DD8.cer
File:                     500AB3E52FE9AE7EAB5907F6CA881FBF9CA34DD8.cer (raw, json)
Hash identifier:          c3ks7R6MEKJP/m7wqBFsZ+S2r6yBSRa0uMQyQiQ2f7s=
Subject key identifier:   50:0A:B3:E5:2F:E9:AE:7E:AB:59:07:F6:CA:88:1F:BF:9C:A3:4D:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14ED25CAB1CFC71D44F3508D1287BDA2ADD57CF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4FuRE5Zc7Kaym4Rw7158fvzKeiU6FxtiR7uunTMbDojU/0/500AB3E52FE9AE7EAB5907F6CA881FBF9CA34DD8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4FuRE5Zc7Kaym4Rw7158fvzKeiU6FxtiR7uunTMbDojU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Jul 2025 18:16:29 +0000
Certificate not after:    Wed 01 Jul 2026 18:21:29 +0000
Subordinate resources:    AS: 264210
                          IP: 138.99.200.0/22
                          IP: 2804:243c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ed:25:ca:b1:cf:c7:1d:44:f3:50:8d:12:87:bd:a2:ad:d5:7c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  2 18:16:29 2025 GMT
            Not After : Jul  1 18:21:29 2026 GMT
        Subject: CN=500AB3E52FE9AE7EAB5907F6CA881FBF9CA34DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:8b:8d:ca:a4:98:71:69:ea:2a:ff:47:23:
                    89:81:f1:e6:56:98:e1:05:7a:76:26:c1:df:60:33:
                    d8:8e:7d:4c:09:9f:77:5c:71:f4:a5:43:71:f5:f7:
                    3d:26:70:a2:60:7b:b2:1e:bd:02:fe:90:a0:35:3c:
                    aa:f4:61:c8:68:c0:83:75:20:d1:ed:d0:5b:e0:da:
                    d4:23:3e:98:00:aa:38:22:aa:70:bc:7b:16:97:bc:
                    53:65:39:68:59:9c:8e:e6:d3:61:60:fe:97:29:27:
                    7b:56:48:f5:e6:2f:76:df:f4:87:fb:ec:8d:d5:24:
                    a2:51:75:d9:94:52:35:6b:6f:98:7b:1d:17:00:66:
                    fd:22:46:8a:0d:53:82:93:7c:36:e3:e6:4a:0e:39:
                    d2:0e:52:8a:18:98:60:14:30:e8:1a:8c:a5:20:8c:
                    94:b9:3e:b1:0d:89:b8:2b:d3:ed:39:06:6d:b4:79:
                    ff:87:e1:7a:a1:bc:45:97:13:e2:ff:45:a3:ce:fe:
                    4d:b7:1d:2d:7b:77:3e:9d:78:32:80:a9:66:51:0b:
                    dc:7f:60:86:03:bb:43:07:eb:c1:29:26:70:ba:13:
                    4b:b7:35:ad:30:69:f4:09:0f:c1:87:75:24:b6:94:
                    80:03:06:46:8d:8d:31:e3:af:16:ab:fa:49:31:53:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:0A:B3:E5:2F:E9:AE:7E:AB:59:07:F6:CA:88:1F:BF:9C:A3:4D:D8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4FuRE5Zc7Kaym4Rw7158fvzKeiU6FxtiR7uunTMbDojU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4FuRE5Zc7Kaym4Rw7158fvzKeiU6FxtiR7uunTMbDojU/0/500AB3E52FE9AE7EAB5907F6CA881FBF9CA34DD8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.200.0/22
                IPv6:
                  2804:243c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264210

    Signature Algorithm: sha256WithRSAEncryption
         31:1e:a5:ae:f6:0c:e3:47:32:aa:6b:df:ad:b6:e2:c8:f4:8e:
         6a:09:10:08:23:f2:95:f0:bb:d8:4b:06:db:7d:9f:17:b4:fb:
         bf:b0:a1:57:f6:64:03:7a:88:dd:e1:f8:a6:13:6e:5d:8b:7e:
         49:82:73:b9:89:9d:1b:08:35:33:b1:ec:05:63:c6:33:20:42:
         0d:9f:60:13:da:07:34:5a:57:54:c3:b2:52:85:e5:57:75:45:
         1b:19:ea:a7:93:40:73:3a:bb:b3:74:26:dc:41:72:2c:d3:bd:
         ab:60:1b:50:da:22:25:40:3f:f5:cb:85:90:8b:af:dc:1a:f2:
         d6:b9:12:cc:05:63:34:6b:30:da:fc:f8:17:da:33:30:8c:ea:
         63:ab:02:79:64:d4:1e:ef:b6:3c:ab:62:31:0c:ca:7d:f9:f0:
         96:21:8a:32:ea:63:86:61:5b:cd:b6:d5:cc:98:e8:20:89:29:
         98:fa:a7:8d:c4:22:10:a7:e2:f4:5b:d6:05:82:28:b2:e6:04:
         d1:ad:a5:37:6a:f9:b3:1f:0d:c6:d1:b7:53:91:46:a9:ca:93:
         eb:97:f3:06:cf:75:c8:48:a8:2a:4e:c4:06:80:50:67:2e:b3:
         e6:51:c9:81:c0:a7:5e:af:fd:52:77:ec:63:23:59:51:6a:3c:
         38:66:50:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:07:27 2025 by rpki-client