Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.cer
File:                     80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.cer (raw, json)
Hash identifier:          0tSrytflnUZxZyoxL0xwACqfEFWyezYuxqntBT4sHXo=
Subject key identifier:   80:C2:02:64:AF:C5:25:D5:C8:E6:3C:70:9C:E7:AB:E0:ED:AF:C9:F1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A981B533260A9E190F2D3AC281EB1D8AD707ECE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Aug 2025 18:10:43 +0000
Certificate not after:    Mon 03 Aug 2026 18:15:43 +0000
Subordinate resources:    AS: 263369
                          IP: 191.37.176.0/21
                          IP: 2804:150c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 11:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:98:1b:53:32:60:a9:e1:90:f2:d3:ac:28:1e:b1:d8:ad:70:7e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  4 18:10:43 2025 GMT
            Not After : Aug  3 18:15:43 2026 GMT
        Subject: CN=80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4f:52:5b:9d:c8:19:e3:bd:a7:c4:78:b7:d9:
                    8f:16:34:6f:58:7a:e5:1e:e3:5c:61:4d:7d:ea:02:
                    66:32:0d:e3:b7:5c:68:3a:62:06:a6:ef:e9:8f:c5:
                    ed:c2:39:12:75:10:69:bc:9f:1f:78:d6:d6:88:73:
                    3e:85:58:11:d1:6e:db:ac:7b:4c:58:e0:70:e2:fb:
                    2c:14:21:43:5f:b6:a7:ae:c0:3f:45:35:17:43:89:
                    8b:a2:91:11:c6:52:1a:e2:df:be:27:d3:81:83:0d:
                    93:b9:d5:a8:96:54:18:7e:3a:c4:44:eb:30:d2:05:
                    4b:d1:2d:2d:d9:9e:34:68:f5:36:0d:ae:d7:30:c4:
                    ac:6b:99:e4:c4:b0:b4:fd:bd:4e:87:15:40:83:09:
                    6d:4b:06:5a:e9:2d:8e:58:9d:8e:56:12:a8:cb:95:
                    24:03:4e:91:1e:6e:a9:98:5d:e9:e3:9c:40:88:2f:
                    0d:ce:51:f1:19:91:06:04:46:b5:59:b6:a5:c3:9c:
                    32:8d:39:e2:b4:2d:5b:dc:77:fd:cc:6f:cb:1a:97:
                    05:9b:35:bc:44:ed:60:69:e5:ad:2a:d7:14:07:4f:
                    4d:1b:c9:5e:9a:03:24:e7:88:0e:c7:64:5a:e0:69:
                    30:ab:40:a6:04:7d:62:10:1c:5e:3b:90:11:fd:a9:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:C2:02:64:AF:C5:25:D5:C8:E6:3C:70:9C:E7:AB:E0:ED:AF:C9:F1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.176.0/21
                IPv6:
                  2804:150c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263369

    Signature Algorithm: sha256WithRSAEncryption
         11:de:fe:6c:79:e9:af:7e:b2:e7:f5:34:1d:57:77:c5:e4:05:
         eb:7a:54:b0:fe:2d:0e:55:64:c3:2d:da:a9:f4:40:ea:0c:53:
         b8:6a:f0:6d:16:cb:e1:ab:68:58:ed:5e:9f:59:83:24:8c:b0:
         d9:70:71:4a:4d:89:a5:17:d4:2e:a5:0c:0a:ca:fa:f6:0c:5c:
         f9:cf:e7:8a:c4:e4:94:9b:62:5d:d0:b5:53:74:e0:18:f2:97:
         59:12:40:b9:fc:8b:9a:93:2f:0c:b2:05:c6:e8:c2:70:53:c0:
         02:03:dc:b6:ff:fa:c7:ab:4a:39:51:aa:af:0e:ea:b7:d1:12:
         7c:be:24:47:30:00:5e:d1:ac:1f:f7:03:68:32:80:f8:6c:02:
         f1:ad:62:da:fd:e3:2d:6f:6e:1f:97:ce:16:a8:f3:39:a3:9c:
         47:8b:c7:8d:33:d7:34:3d:1a:c2:b3:c9:18:d4:17:9a:ef:7b:
         73:95:9e:df:10:1e:96:75:ef:43:31:92:07:44:55:ad:55:0a:
         d1:66:cb:67:d8:1c:53:23:8f:5d:32:1b:52:c4:ed:50:af:86:
         b0:6f:95:0f:77:30:35:60:1c:b2:61:06:44:9a:bc:08:53:79:
         80:f8:72:d4:1c:8e:25:c1:cf:54:e8:dc:b6:61:10:c5:8c:81:
         54:61:5a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 11:58:20 2025 by rpki-client