Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8174C9AD000FD5B5D370A3A331707606802570C2.cer
File:                     8174C9AD000FD5B5D370A3A331707606802570C2.cer (raw, json)
Hash identifier:          KqJnnuc6iEmgIbxs36A96ws2xQfmbQDTJc+5L1DqBqU=
Subject key identifier:   81:74:C9:AD:00:0F:D5:B5:D3:70:A3:A3:31:70:76:06:80:25:70:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       285BC8612B0D8DD993BB9853DB39BD155A3EE5D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/8174C9AD000FD5B5D370A3A331707606802570C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 May 2025 13:50:53 +0000
Certificate not after:    Fri 29 May 2026 13:55:53 +0000
Subordinate resources:    AS: 266911
                          IP: 45.224.108.0/22
                          IP: 2804:4534::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5b:c8:61:2b:0d:8d:d9:93:bb:98:53:db:39:bd:15:5a:3e:e5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 30 13:50:53 2025 GMT
            Not After : May 29 13:55:53 2026 GMT
        Subject: CN=8174C9AD000FD5B5D370A3A331707606802570C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:6c:e2:f4:62:b1:24:c1:36:0f:7d:24:5a:
                    31:e6:d4:eb:dd:37:c2:e2:b0:53:7e:1a:ef:a4:f7:
                    7b:1d:c6:7e:5d:72:2b:3f:ce:4c:1f:16:55:d4:89:
                    21:60:54:b6:5f:53:c1:1a:a3:d7:c8:d1:2f:6e:88:
                    9e:1d:fb:5f:f4:9d:7d:79:d7:79:e1:e2:7f:e8:95:
                    a8:e4:11:00:a3:9c:f1:c7:ed:90:70:2f:10:53:80:
                    2f:91:7e:2b:c9:9a:9e:1d:e2:48:ab:4e:a1:8a:e7:
                    27:11:31:ab:cb:28:33:ec:45:90:fe:b0:e4:67:03:
                    45:a2:67:7f:49:6c:1f:07:c7:a4:75:21:ef:6f:44:
                    54:89:ab:ac:a7:b3:64:a7:fa:67:94:28:19:b0:c5:
                    2c:ae:be:e5:7c:48:a9:b6:a9:05:ea:80:10:8b:52:
                    1a:d8:5d:c4:ba:1d:9c:64:06:47:54:31:bc:58:44:
                    3b:69:29:ae:01:60:0c:bc:ef:a4:cd:80:8d:36:07:
                    a8:42:f4:0a:09:dd:ea:bd:53:d1:9a:b7:d8:70:5f:
                    f2:13:e6:3f:bf:b5:6a:df:82:c9:a7:f1:a3:cd:64:
                    46:57:f8:b1:a2:57:65:0f:1b:a8:52:07:fc:48:04:
                    05:90:ea:d6:33:5f:b6:a8:d7:25:74:30:1a:d3:84:
                    ed:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:74:C9:AD:00:0F:D5:B5:D3:70:A3:A3:31:70:76:06:80:25:70:C2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/8174C9AD000FD5B5D370A3A331707606802570C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.108.0/22
                IPv6:
                  2804:4534::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266911

    Signature Algorithm: sha256WithRSAEncryption
         66:ff:ee:b4:a5:40:a6:6e:b0:f8:26:9d:81:45:f0:37:28:35:
         8f:27:cf:b5:34:15:9e:dd:b7:bb:5f:90:3f:ae:7d:29:5c:7a:
         05:b7:59:98:9d:f7:63:04:fa:d3:e5:65:27:b4:b8:57:5b:3d:
         50:69:a4:53:1c:a6:ee:75:69:6e:04:5b:2d:b4:71:e9:b0:f8:
         20:3a:26:d3:96:f9:b4:fe:36:10:7e:eb:f2:6a:c0:71:25:02:
         a9:72:a2:3f:75:4c:24:f9:fc:a5:4c:b2:39:b0:5b:19:48:6f:
         a1:bf:a7:ca:df:fd:46:40:bd:e7:06:14:81:7c:b5:74:42:5e:
         63:dd:c6:32:aa:2f:c2:b2:d6:b9:d2:45:3c:68:e2:6e:3d:c9:
         cd:47:71:2b:0d:f7:33:ca:b2:a2:c6:e9:43:97:38:39:b7:5c:
         f2:0d:88:9e:b0:0f:c6:b6:ac:df:1a:e0:31:aa:10:84:90:5e:
         48:26:b1:3b:0d:ec:83:aa:67:6e:ad:51:5e:4b:ce:1c:75:11:
         89:93:6b:9b:12:0f:2a:04:97:ea:ac:cb:35:26:3b:c6:ae:6a:
         91:61:96:5c:81:4a:f3:32:79:66:5a:f9:77:79:e5:be:24:8f:
         7b:bd:e7:15:3c:74:df:6c:f7:9d:99:99:8a:59:1c:80:42:30:
         0e:9b:0f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:25:30 2025 by rpki-client