Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer
File:                     A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer (raw, json)
Hash identifier:          fWq1ZNQI6+BOnJT2zz47WTTrNwQi2QxL902IgMgJj48=
Subject key identifier:   A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2118B2FA4FADB4D0C6EC088CAE78C482A9B6357D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jun 2025 14:17:37 +0000
Certificate not after:    Wed 03 Jun 2026 14:22:37 +0000
Subordinate resources:    AS: 264236
                          IP: 138.117.88.0/22
                          IP: 168.90.36.0/22
                          IP: 2804:24a8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 17:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:18:b2:fa:4f:ad:b4:d0:c6:ec:08:8c:ae:78:c4:82:a9:b6:35:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 14:17:37 2025 GMT
            Not After : Jun  3 14:22:37 2026 GMT
        Subject: CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:02:78:f8:16:8e:09:87:d2:fe:c4:3b:58:69:
                    c0:eb:c5:b6:8f:84:80:c8:3f:d1:3f:c2:8d:12:b9:
                    bd:9a:19:fd:ad:f8:9a:fa:fd:ed:63:2d:51:97:c9:
                    18:bf:0d:a8:4c:d9:22:01:0f:78:fd:6e:da:23:c6:
                    70:39:71:02:0a:01:83:4b:5a:f1:7d:6f:72:90:77:
                    29:a5:00:05:7a:a8:9a:f5:e3:1a:24:45:df:b3:80:
                    ab:4e:0e:2d:49:53:94:94:ce:d7:c4:d2:08:e9:a2:
                    ca:d5:9b:90:4e:15:d3:1b:2d:32:11:cc:47:f5:b4:
                    36:7c:fc:e7:10:39:a3:b9:6c:b3:fe:2d:2f:2a:46:
                    5a:f3:72:68:6c:76:13:05:7c:42:b4:b5:ba:6d:50:
                    5c:36:16:c3:42:ca:d3:16:5f:55:be:bc:05:0a:59:
                    58:5e:9d:24:97:b3:f5:c6:34:9e:bc:eb:7c:a3:21:
                    17:30:57:a1:d8:c9:bd:2c:90:09:4e:77:96:23:f2:
                    4e:61:2c:8c:28:2d:dc:7e:49:e4:28:62:8b:eb:ce:
                    49:68:11:c8:90:df:cc:17:60:27:b3:c0:6f:dc:7a:
                    47:cd:40:9d:48:2b:52:20:72:12:b6:15:3a:15:28:
                    a0:40:5d:2b:cf:90:13:41:f4:c2:4a:18:28:1e:05:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.88.0/22
                  168.90.36.0/22
                IPv6:
                  2804:24a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264236

    Signature Algorithm: sha256WithRSAEncryption
         3d:49:32:51:fe:e6:fd:c9:0e:d5:96:bf:87:83:3e:89:64:9b:
         84:04:ec:df:54:1e:9a:12:a4:94:8c:f0:1f:98:d5:6a:50:63:
         4f:8f:d9:e2:1c:73:bb:4c:95:29:53:3f:fc:94:4c:a5:74:c2:
         2c:bf:c6:09:b2:d9:76:6a:e0:2f:7d:0e:63:1a:38:9a:e8:eb:
         bc:a4:86:2a:f5:f1:03:73:ee:55:fe:e2:15:73:72:31:89:ed:
         7e:75:43:c7:b2:f6:28:54:01:dd:ce:db:44:8e:99:da:0a:17:
         63:33:2b:d9:c6:c5:06:30:d3:7e:8b:d3:45:9a:6c:2c:2b:f9:
         63:2b:fc:81:80:19:aa:59:1b:56:25:fc:70:a3:50:1e:7c:9c:
         68:51:f3:1a:b1:e3:f1:b7:41:3b:21:1f:16:1b:fb:55:26:bd:
         d0:a1:fc:88:65:59:13:a0:8e:0d:46:c5:d3:56:0d:6d:4e:83:
         7e:e3:bd:bb:04:c9:67:bf:ea:41:1c:cc:97:e4:bd:42:fc:20:
         e9:d9:83:d1:50:0e:4c:b6:27:f0:03:97:fb:59:35:a8:ad:2b:
         ce:f6:fa:9d:52:a1:4e:07:c1:2b:1f:d7:d1:e3:d9:ae:1c:05:
         1c:6e:56:eb:5e:6a:54:b4:76:23:6e:32:da:34:3e:fb:be:65:
         e4:db:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:25:10 2025 by rpki-client