Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.cer
File:                     7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.cer (raw, json)
Hash identifier:          LVnG6rSefhzNF2SQoSH+WYAmHlOv54pNU90ouufsMS8=
Subject key identifier:   7C:CB:30:60:46:AE:AE:0E:16:E8:91:3E:33:AF:6D:6E:C6:D2:F3:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A14067C434ADE04436FB7C2D754101ACF32E35D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Mar 2025 17:20:22 +0000
Certificate not after:    Tue 10 Mar 2026 17:25:22 +0000
Subordinate resources:    AS: 53094
                          IP: 143.208.68.0/22
                          IP: 187.102.16.0/20
                          IP: 2804:2a80::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:14:06:7c:43:4a:de:04:43:6f:b7:c2:d7:54:10:1a:cf:32:e3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 11 17:20:22 2025 GMT
            Not After : Mar 10 17:25:22 2026 GMT
        Subject: CN=7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:a4:54:a2:ec:e8:93:29:0b:c0:ed:15:2c:
                    bb:9d:49:2e:52:f7:c5:92:61:bc:3d:19:2b:5c:38:
                    49:0b:28:1c:b8:96:68:d8:c8:3c:5c:6b:b4:72:39:
                    5d:3b:dd:40:c5:60:dd:06:73:78:93:bf:7a:31:56:
                    ae:d2:26:44:67:bb:17:de:b3:5e:96:94:c7:da:33:
                    72:d8:26:09:11:44:38:23:72:04:4e:7a:d6:8f:ec:
                    c7:48:65:d0:69:7d:e2:09:74:5c:3b:4f:82:4d:fe:
                    5b:6d:0f:80:e4:62:4e:bb:5f:26:eb:7e:77:36:ae:
                    2f:61:5f:fa:d8:59:88:0d:6a:84:a5:a6:bf:5f:60:
                    f5:d6:85:f6:f8:f5:f9:ec:a2:9a:97:b6:2a:e7:a8:
                    c3:1b:68:be:2b:ed:1c:2d:22:17:91:19:7b:b6:03:
                    98:ba:6c:62:99:f5:96:d0:15:e9:74:a4:52:1d:60:
                    c5:80:99:50:d8:2b:34:c0:eb:10:39:3e:cb:dd:d7:
                    2b:fe:01:f1:1b:67:1d:f7:54:2e:c5:fe:9b:48:e0:
                    c5:b0:8c:c9:13:d2:c3:89:01:8b:15:8d:c5:0a:d5:
                    c0:09:1c:ff:8c:2c:6e:35:be:63:b8:e5:61:10:12:
                    d6:7d:57:c6:ae:c5:44:41:c4:bb:7e:f1:6d:f6:d1:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:CB:30:60:46:AE:AE:0E:16:E8:91:3E:33:AF:6D:6E:C6:D2:F3:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.68.0/22
                  187.102.16.0/20
                IPv6:
                  2804:2a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53094

    Signature Algorithm: sha256WithRSAEncryption
         c6:26:b5:57:5a:77:ac:02:9e:5a:aa:ea:96:20:6e:33:ea:d1:
         7b:ad:4b:f8:ee:f2:dc:40:0e:44:92:61:21:64:e3:83:12:de:
         07:7b:ce:11:d0:71:5e:2b:d2:a2:ae:33:71:01:cd:86:7e:39:
         a3:50:bf:bd:18:a6:b6:be:ee:fc:61:2a:a7:9c:00:6a:77:0b:
         bf:0a:52:4d:b6:f3:9e:82:13:6f:85:66:c1:1c:5b:ea:8e:ef:
         fe:fd:ab:26:cd:cb:77:a4:c6:85:e5:07:fc:0f:de:9f:8c:25:
         0a:62:0b:23:13:1e:29:1d:73:3c:d3:57:e4:e1:b6:2d:3d:6b:
         c2:92:d4:0c:99:09:ff:5e:33:1b:17:bb:e4:bc:e9:60:76:d3:
         72:fb:bb:d5:4d:62:c7:d2:7b:0c:52:70:34:2e:5f:70:99:25:
         5a:aa:89:bb:6c:7b:64:e8:56:16:c6:0b:b0:33:bd:de:6e:47:
         6a:4d:ed:35:7e:cc:20:fa:49:c5:03:82:80:41:9b:0b:28:0c:
         8c:f4:18:c3:88:37:d5:48:76:67:3d:2e:9e:0d:26:ca:e6:fc:
         bc:31:ae:ff:bb:cb:37:a8:10:03:6c:0c:f5:25:71:51:bc:e7:
         18:4d:55:a2:7e:73:92:4d:a0:b6:a5:53:7d:b2:b3:66:a0:f2:
         5e:93:5d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:58:44 2025 by rpki-client