Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5CFFDF2DE946FDF3083B6F51D432A74406AC.cer
File:                     9ACE5CFFDF2DE946FDF3083B6F51D432A74406AC.cer (raw, json)
Hash identifier:          R/TZ8OZr/e1XQwsDNoglMFO5vZvpaa1huGVdHUFo1qs=
Subject key identifier:   9A:CE:5C:FF:DF:2D:E9:46:FD:F3:08:3B:6F:51:D4:32:A7:44:06:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5530861E816EF0784D02F9AE4C44653EA963CC79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/9ACE5CFFDF2DE946FDF3083B6F51D432A74406AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 May 2025 18:54:22 +0000
Certificate not after:    Fri 15 May 2026 18:59:22 +0000
Subordinate resources:    AS: 266250
                          IP: 45.6.208.0/22
                          IP: 2804:3d0c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 05:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:30:86:1e:81:6e:f0:78:4d:02:f9:ae:4c:44:65:3e:a9:63:cc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 16 18:54:22 2025 GMT
            Not After : May 15 18:59:22 2026 GMT
        Subject: CN=9ACE5CFFDF2DE946FDF3083B6F51D432A74406AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6f:d9:57:5f:46:5d:b5:c0:7b:ae:b5:f3:68:
                    80:15:14:3c:4b:bc:53:ff:cf:e8:f6:13:85:fb:eb:
                    a2:b8:34:78:80:82:d8:25:6e:6d:bb:57:6a:64:9e:
                    25:8c:2a:13:0d:0e:da:03:c4:f1:f7:f1:52:1b:09:
                    b3:43:2c:f6:31:6d:81:7b:c2:19:c8:f0:f8:88:e5:
                    c6:f1:89:5a:05:94:2f:82:d4:13:81:be:70:f4:05:
                    c2:4d:da:a7:96:8a:8b:07:85:e8:21:7e:8a:14:34:
                    15:9e:01:2b:53:5a:fa:39:1d:de:2c:ef:79:10:6f:
                    de:48:22:53:76:a5:4a:76:51:e4:c7:d1:57:f8:89:
                    e2:dc:a5:07:0e:14:f2:e3:5e:33:3b:d7:1e:a2:39:
                    81:59:79:2d:00:64:1d:46:6b:13:71:cc:10:f5:1b:
                    0a:93:20:7f:c2:6b:da:2d:a0:cd:81:08:0a:ed:ab:
                    a5:08:1d:69:8d:a2:51:b3:1f:90:46:09:8f:18:8a:
                    04:47:f9:56:ce:95:a0:ab:13:3f:30:23:2d:53:b3:
                    10:c4:64:b8:b7:47:34:23:8b:17:d9:91:e9:7a:0c:
                    ef:f7:c3:c8:08:86:27:41:a2:13:08:e9:d7:17:82:
                    2d:7d:4c:2a:16:0d:fe:7c:d3:27:34:6f:f0:48:8b:
                    fd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:CE:5C:FF:DF:2D:E9:46:FD:F3:08:3B:6F:51:D4:32:A7:44:06:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/9ACE5CFFDF2DE946FDF3083B6F51D432A74406AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.208.0/22
                IPv6:
                  2804:3d0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266250

    Signature Algorithm: sha256WithRSAEncryption
         16:e2:55:56:cb:01:6b:f2:90:4e:a1:4d:cc:94:f0:6b:b4:e6:
         be:38:66:0f:03:90:7b:77:52:eb:e7:7d:53:f2:78:f8:dd:ca:
         2f:56:65:e7:bf:89:06:22:c9:c6:ed:6c:0d:bb:c3:4e:13:37:
         33:da:ea:e8:f8:8d:d3:1c:3a:cd:2c:29:db:b8:02:d7:8e:da:
         aa:a7:d6:28:e2:79:34:e6:1c:26:f7:cf:6e:65:1d:ff:15:e4:
         0c:5f:c1:7f:0b:2e:7f:c4:90:38:3f:c1:be:da:97:65:41:1f:
         12:2a:17:7b:e6:e2:cb:01:e4:09:3c:1e:1c:cf:ce:fb:3a:1c:
         5b:64:2e:52:52:e0:67:64:18:80:00:bd:c6:78:eb:ea:f9:2e:
         03:6f:5c:87:de:93:16:67:ff:bd:08:02:b4:df:54:fa:5c:6a:
         54:cd:05:56:6e:15:85:d4:25:2d:f7:8f:98:7b:73:3a:4a:9e:
         18:c9:47:78:dc:88:f1:c0:68:f1:6e:1e:d2:15:ae:74:7b:cf:
         80:a2:6d:5c:22:dd:bc:8a:b1:d9:40:ae:8a:16:8f:1b:7d:d8:
         76:89:0e:c0:90:10:15:db:14:58:58:6e:3d:0f:bf:7a:40:59:
         b8:e1:c6:8e:37:44:4b:54:10:bd:9f:34:b0:23:6f:f9:65:ff:
         68:b3:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:01:48 2025 by rpki-client