Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
File:                     A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer (raw, json)
Hash identifier:          vCklGTefZVKtY+hEqSS2Ontv10D4YwPtr1rSqUiB11c=
Subject key identifier:   A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0BC303EB47F6282B12B4E832534E02D8C53E1E56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:24 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:24 +0000
Subordinate resources:    AS: 271754
                          IP: 2804:8080::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 09:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c3:03:eb:47:f6:28:2b:12:b4:e8:32:53:4e:02:d8:c5:3e:1e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:24 2025 GMT
            Not After : Mar  4 18:40:24 2026 GMT
        Subject: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:8c:73:42:ba:04:b0:2f:61:35:93:44:68:
                    eb:aa:0d:4c:5c:bd:37:c0:8f:fc:e4:22:12:72:6c:
                    1f:f3:a6:8c:5a:85:51:44:be:38:54:a7:fb:e3:c3:
                    ae:dc:be:fb:c2:da:41:44:2e:cd:5e:c5:c4:a9:61:
                    a1:7d:18:b4:96:b7:3d:8d:d5:d8:8b:2c:5f:2c:57:
                    43:ec:78:76:52:8a:61:4b:25:f6:00:9a:55:54:48:
                    7a:99:87:2a:c0:57:2a:16:c2:5f:2c:ad:77:9f:78:
                    b2:39:74:38:93:68:f8:5f:c9:21:76:fe:23:53:82:
                    52:0e:34:bc:a6:a6:d5:79:bb:55:d6:a5:77:13:1a:
                    e7:56:be:c5:a3:5d:64:38:65:23:01:82:ac:ff:4b:
                    71:a1:ed:56:17:05:3e:4e:fd:c6:e5:ef:b9:5b:f7:
                    77:e7:50:75:82:26:a7:16:38:e3:1b:a0:4f:4d:16:
                    08:02:73:ee:90:e0:f0:01:ef:98:08:43:66:0c:48:
                    d2:41:4c:e0:17:67:23:4d:5d:bb:9b:d4:0c:9e:f5:
                    aa:01:2f:a1:a5:5d:03:4b:0b:06:a2:c8:8c:fb:56:
                    1d:53:af:c8:d1:b9:12:91:c4:00:22:d9:76:cf:b5:
                    dc:bf:98:f3:f8:f5:52:dc:86:6d:ab:0a:64:56:73:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271754

    Signature Algorithm: sha256WithRSAEncryption
         bd:e5:a4:83:ff:9b:ff:6c:98:21:e7:00:74:f1:8b:63:a0:54:
         b4:34:71:42:0d:98:72:11:be:e3:8c:74:76:d5:89:5c:ff:5e:
         bf:31:e5:45:7b:e9:b8:1f:98:9d:ff:17:13:f1:f0:1f:3d:6f:
         d7:80:f9:bd:3b:a2:9c:39:5b:7e:80:8b:21:ab:52:53:43:16:
         7b:55:24:f5:94:5c:74:dc:fa:71:01:76:27:ec:c0:d4:cf:20:
         31:39:3f:b0:63:66:b3:f9:64:7c:55:23:65:b8:7e:ac:c7:0c:
         66:3b:4f:7e:6c:80:1b:52:f1:cb:43:3c:16:b8:69:d2:2c:ef:
         0f:7e:6f:53:14:c9:9e:6c:fd:e8:bc:f1:a4:ca:9f:f1:cc:61:
         56:ac:87:2b:40:17:c9:10:74:f9:27:3d:c4:e8:64:9f:04:62:
         56:85:96:1b:fc:7e:d1:ed:a4:54:b9:a8:03:6c:01:86:7e:1b:
         b9:e4:e6:08:06:9f:3f:85:e2:2d:de:78:4e:23:20:48:8a:ce:
         6c:eb:42:c3:ca:68:5f:b1:54:9c:a8:bf:76:f3:69:16:9c:19:
         33:d6:e0:ab:89:fd:6d:0b:d0:62:16:87:3d:ba:25:a5:e0:62:
         6f:7a:34:cf:ea:45:44:15:75:9e:c0:96:6f:6d:f1:10:cd:61:
         10:39:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:57:08 2025 by rpki-client