Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer
File:                     67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer (raw, json)
Hash identifier:          PBtWKODqaJ0gNiC4LQ0AfePXVy5hbLMuoQbmf+AFwdw=
Subject key identifier:   67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       263C34D5766595A8045EE1391D4E2FB427F2D7DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Jul 2025 16:55:24 +0000
Certificate not after:    Wed 01 Jul 2026 17:00:24 +0000
Subordinate resources:    AS: 263567
                          IP: 179.109.32.0/20
                          IP: 2804:f24::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 00:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3c:34:d5:76:65:95:a8:04:5e:e1:39:1d:4e:2f:b4:27:f2:d7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  2 16:55:24 2025 GMT
            Not After : Jul  1 17:00:24 2026 GMT
        Subject: CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:8d:dc:1d:3f:11:e6:76:7d:03:32:5f:54:
                    df:43:65:14:eb:bb:fe:7f:65:69:45:04:c8:2f:b2:
                    7b:b9:7c:d7:4d:b6:66:b6:45:76:3f:64:df:77:3c:
                    0f:a1:13:c7:4e:80:3d:56:b4:68:58:c3:08:d5:f9:
                    29:3f:a8:70:e4:88:f5:8c:55:fc:1d:96:16:16:32:
                    3e:b1:09:71:70:03:15:59:dc:0f:c6:80:a7:c6:76:
                    69:ec:fa:de:57:3d:03:fe:b6:e9:8c:6b:26:a1:3b:
                    15:ba:e4:7a:18:23:b8:a6:8c:6b:43:f9:f0:cb:7e:
                    31:c8:93:8e:83:e5:41:d5:78:d9:be:f7:95:63:f2:
                    b5:a0:7f:89:de:23:03:a3:7a:2d:bf:75:69:b8:34:
                    89:b8:8a:0f:df:d2:1d:e8:67:bb:e6:24:28:5c:3f:
                    5f:fd:01:e4:33:f0:fe:5e:df:aa:4b:36:92:66:bd:
                    88:a8:01:fc:08:aa:2f:3b:29:c7:59:ab:19:7b:5c:
                    32:09:be:65:08:90:50:d9:a7:3d:72:bf:54:33:9f:
                    7a:ca:47:aa:59:ee:a2:e5:cf:a8:0c:cb:e1:74:4f:
                    6d:36:ea:16:4d:3a:dd:99:f4:66:60:f1:38:c3:ec:
                    85:18:83:e8:15:07:a0:b4:bb:b3:2d:9d:61:b7:78:
                    68:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.32.0/20
                IPv6:
                  2804:f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263567

    Signature Algorithm: sha256WithRSAEncryption
         b5:87:23:a7:d6:ef:54:f5:3c:5d:23:6c:52:97:89:9c:1f:f5:
         a3:bb:b7:2f:94:9c:e0:74:12:2f:43:86:57:93:74:90:b7:9f:
         67:13:0b:b9:f5:61:6e:d3:93:78:bf:9f:96:6a:7b:9f:e5:cb:
         25:25:5d:fd:13:b0:18:83:11:60:ff:11:5c:42:b9:8c:55:d2:
         d3:84:b6:3a:74:0e:ed:05:29:ba:0a:4c:10:76:1f:fe:9e:c3:
         82:72:d0:ec:c5:88:a1:68:af:fc:22:2c:83:3d:d6:17:0f:a5:
         4e:6b:a6:dd:63:8e:90:d2:22:ee:c3:89:aa:c6:8e:90:00:fe:
         94:83:f8:34:22:65:ae:bd:dd:cc:0b:2c:71:c4:5c:73:a5:04:
         c7:dd:31:94:cf:25:d7:f8:a9:df:7a:d9:f3:60:31:ea:18:53:
         37:5d:33:23:80:d4:75:9e:f0:9c:a0:05:4e:68:29:6c:22:8b:
         37:87:00:b9:ec:63:f9:3e:de:c8:79:a4:ed:49:78:99:fe:4e:
         1b:7f:d1:81:49:2a:05:5f:0d:2d:92:1b:0f:6b:da:9c:d3:84:
         c6:a2:99:4e:e0:62:c9:d8:5a:20:b2:f6:a2:d5:f2:5f:a2:59:
         b3:05:54:86:41:ae:c5:ad:46:85:06:9b:c5:ee:43:3d:1f:77:
         fb:70:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:52:35 2025 by rpki-client