Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/696E3FEDBA4FE282FF8D8A56921AAA726298331C.cer
File:                     696E3FEDBA4FE282FF8D8A56921AAA726298331C.cer (raw, json)
Hash identifier:          myBgyQ8zjhzYzzdos88SKCJnGdwXb3t/j3jz4flat6M=
Subject key identifier:   69:6E:3F:ED:BA:4F:E2:82:FF:8D:8A:56:92:1A:AA:72:62:98:33:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       473E2FFB79F40215A9FEE8B942CEF0CE65018F39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/696E3FEDBA4FE282FF8D8A56921AAA726298331C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Apr 2025 17:44:49 +0000
Certificate not after:    Wed 08 Apr 2026 17:49:49 +0000
Subordinate resources:    AS: 271297
                          IP: 45.229.136.0/24
                          IP: 192.231.175.0/24
                          IP: 2804:794c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 03:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3e:2f:fb:79:f4:02:15:a9:fe:e8:b9:42:ce:f0:ce:65:01:8f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  9 17:44:49 2025 GMT
            Not After : Apr  8 17:49:49 2026 GMT
        Subject: CN=696E3FEDBA4FE282FF8D8A56921AAA726298331C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4e:1d:86:b3:a1:17:0a:19:85:73:7a:93:91:
                    7a:eb:6c:ae:9c:76:ea:29:4e:91:52:0a:37:06:c4:
                    1e:1c:f1:82:02:5c:5f:59:e1:6a:ed:76:55:14:48:
                    8d:bf:37:48:dc:01:83:91:42:f3:2a:1b:80:d5:e1:
                    ee:c5:e5:e2:25:92:ad:71:82:bc:ff:ad:a3:6c:03:
                    e1:0c:97:ed:cc:7b:3f:ea:91:b0:a8:21:ef:c8:ea:
                    d2:30:08:f8:6f:6e:7f:89:af:15:c6:33:4d:e5:d1:
                    6b:00:27:5f:85:ae:50:85:31:62:95:5e:e4:b9:2a:
                    73:6b:57:32:a2:6a:76:5d:d9:74:3c:35:d1:42:d0:
                    d4:9e:6b:f2:ca:fb:e5:99:77:37:2e:ba:a9:c2:d9:
                    a8:a1:cf:90:ef:84:b1:05:29:d8:1b:3e:d6:ff:91:
                    e7:fd:e3:a3:3b:a1:b8:8c:b8:a2:fe:a1:1f:8f:04:
                    33:d2:4f:b9:08:05:f5:fe:9a:5d:7d:74:25:bf:d3:
                    f4:1f:07:62:6e:b6:29:33:ac:07:41:f5:4a:d3:b2:
                    f4:b8:45:33:f1:28:dc:4f:0b:fc:7a:f4:b4:67:1d:
                    e6:48:a9:4f:cd:51:6e:2f:d7:70:8e:ee:11:20:33:
                    e5:90:8b:81:ea:d8:35:99:31:6b:f2:29:b9:82:d0:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:6E:3F:ED:BA:4F:E2:82:FF:8D:8A:56:92:1A:AA:72:62:98:33:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/696E3FEDBA4FE282FF8D8A56921AAA726298331C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.136.0/24
                  192.231.175.0/24
                IPv6:
                  2804:794c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271297

    Signature Algorithm: sha256WithRSAEncryption
         81:01:82:33:c1:a1:55:7b:e9:c5:e8:19:37:ec:05:d8:d0:b1:
         2b:7d:25:ce:8f:8c:ac:91:c9:98:2b:2d:8b:28:b6:f9:be:e4:
         3d:6f:16:e4:6a:13:47:e7:f8:19:92:ae:e2:0c:6e:9c:6b:0e:
         d0:de:cd:b2:25:8b:2d:96:54:42:8d:4c:9e:90:7d:ef:1d:0b:
         65:4d:e3:9b:aa:ed:8a:35:d5:42:77:58:06:c5:f9:3c:fc:ed:
         94:05:84:51:60:98:fa:06:f4:3b:37:4f:e8:84:95:4b:90:3b:
         0f:1e:33:f5:2b:74:88:2c:59:b7:41:7e:22:1e:2f:0a:01:42:
         ae:0d:c8:9c:5d:1a:45:c7:85:f3:6c:97:e3:4d:35:29:5e:6c:
         e3:4d:fb:81:ac:1d:a1:95:44:bd:3f:f9:7f:20:b5:4b:e0:ac:
         ed:41:a3:4a:cd:2c:1e:dd:84:e6:b2:50:e6:d8:9c:ab:e8:4a:
         4b:15:e9:c7:4c:13:4e:87:6e:0b:d7:13:94:f1:44:bf:52:19:
         8c:76:4c:9f:6f:8d:c6:8d:2f:9b:50:58:a7:2d:07:b9:e8:65:
         e1:2f:69:9c:fc:d4:b2:35:e1:36:c2:f4:ab:eb:06:31:ff:87:
         86:cb:a1:9f:ef:ce:0b:64:ef:fe:9a:c6:46:a2:a6:61:d2:bb:
         27:cf:6d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:28:59 2025 by rpki-client