Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA704690C0BE55D2FE25A9C58E4C5266F585493B.cer
File:                     AA704690C0BE55D2FE25A9C58E4C5266F585493B.cer (raw, json)
Hash identifier:          7rwLh+s+LG7KxQ+JVvN70qc4FzZpJBSqKx0RUuXjePo=
Subject key identifier:   AA:70:46:90:C0:BE:55:D2:FE:25:A9:C5:8E:4C:52:66:F5:85:49:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       356B4493FF72B84325ABB661A5AE94CC8DC81B50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Aug 2025 16:18:28 +0000
Certificate not after:    Sat 22 Aug 2026 16:23:28 +0000
Subordinate resources:    AS: 272245
                          IP: 2804:8430::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6b:44:93:ff:72:b8:43:25:ab:b6:61:a5:ae:94:cc:8d:c8:1b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 23 16:18:28 2025 GMT
            Not After : Aug 22 16:23:28 2026 GMT
        Subject: CN=AA704690C0BE55D2FE25A9C58E4C5266F585493B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:d1:da:af:23:b0:82:b5:51:b0:3a:7b:60:
                    cb:b3:e4:42:be:96:b8:5b:d8:f9:9d:30:50:8e:d9:
                    63:67:c3:3e:9e:59:bc:7a:4d:a1:f0:ee:1c:a1:4c:
                    90:dd:0d:02:a9:aa:75:bc:40:8d:ae:96:8e:76:e0:
                    7b:40:c9:57:e5:b7:86:d9:b1:58:34:0b:dc:1c:1d:
                    23:e5:7c:d7:4f:3c:d2:32:c2:75:9e:f7:0a:2a:65:
                    09:8f:13:5b:6b:16:08:b1:82:1f:56:14:63:b5:aa:
                    72:44:3f:c3:13:ca:62:3e:23:6e:a0:11:0b:6e:1e:
                    9e:45:e4:d0:fe:3f:3a:65:55:e1:a5:c2:4d:6a:68:
                    43:74:4e:55:47:81:ad:68:6a:45:29:33:9a:e3:ba:
                    01:62:34:d6:f3:47:63:63:79:7a:38:44:1c:03:8c:
                    26:e6:2d:0c:41:a6:a0:a4:74:30:68:de:4f:00:fd:
                    df:22:a0:1b:e4:05:04:86:70:85:c6:4e:ca:24:f7:
                    84:df:20:9d:93:f0:e0:c5:d0:4e:ae:85:31:19:b1:
                    63:6f:05:0c:94:88:9e:fd:d5:2d:2b:ce:c6:cf:fc:
                    ef:be:b4:e1:58:c5:c3:c8:f4:71:dc:98:4c:c8:27:
                    d3:5c:e3:44:03:0e:a9:a3:8a:91:ac:7f:a0:3a:d1:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:70:46:90:C0:BE:55:D2:FE:25:A9:C5:8E:4C:52:66:F5:85:49:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8430::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272245

    Signature Algorithm: sha256WithRSAEncryption
         52:2f:55:6b:82:6c:52:78:7d:b9:e4:4f:54:6e:fa:87:56:66:
         51:ca:ca:34:06:20:d4:3c:4f:bc:93:8f:76:ba:b3:e1:97:74:
         01:92:0c:e4:22:e5:03:95:da:54:74:27:06:34:29:6d:1b:b7:
         ba:92:68:29:ad:86:36:77:ac:bc:ea:9b:2a:09:ab:ed:7a:86:
         7e:06:3e:c9:12:fc:7a:0b:18:b5:fe:dc:5d:8d:04:93:07:1e:
         15:47:92:39:d0:9b:31:9d:c8:0b:87:5c:3d:37:f0:d2:7c:a8:
         52:83:be:65:cc:de:ac:89:fe:32:b2:12:60:f8:47:49:d4:fc:
         95:5e:f0:ec:76:c9:de:c5:f3:b8:f8:39:31:54:2f:cb:93:15:
         c6:f9:2a:41:bc:9d:a9:fd:1c:ca:95:a0:9d:6d:f8:90:ff:69:
         71:8a:8a:ad:61:5b:b4:56:20:8f:f6:d3:6f:f1:18:03:9f:ca:
         c4:6e:dd:3e:67:f2:e4:1a:5a:42:6a:47:30:7d:75:14:28:f0:
         ba:0a:cd:09:45:95:bf:0b:3b:f6:4c:b8:98:2b:c1:c5:07:c2:
         50:7d:f4:f2:71:7b:a6:30:c8:cf:f5:e0:27:f7:33:b3:57:90:
         36:b6:08:2f:ed:c4:39:f7:c1:5d:c1:5e:ea:b1:27:55:e5:f2:
         b6:78:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:01:31 2025 by rpki-client