Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ADF401935A5874E3102919A63C65BE4EAF80AF70.cer
File:                     ADF401935A5874E3102919A63C65BE4EAF80AF70.cer (raw, json)
Hash identifier:          J5GZhKkyKd1cA67M7iAKbI6PWszuByZTdubTHcwzLLs=
Subject key identifier:   AD:F4:01:93:5A:58:74:E3:10:29:19:A6:3C:65:BE:4E:AF:80:AF:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6308E2AA08CF1258F143B66E43E7F2C24EFF3EBE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/1/ADF401935A5874E3102919A63C65BE4EAF80AF70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 13:01:27 +0000
Certificate not after:    Thu 05 Mar 2026 13:06:27 +0000
Subordinate resources:    AS: 271236
                          IP: 201.54.180.0/22
                          IP: 2804:7858::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Apr 2025 14:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:08:e2:aa:08:cf:12:58:f1:43:b6:6e:43:e7:f2:c2:4e:ff:3e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 13:01:27 2025 GMT
            Not After : Mar  5 13:06:27 2026 GMT
        Subject: CN=ADF401935A5874E3102919A63C65BE4EAF80AF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:0b:c3:b2:4e:fd:0f:c0:c0:ba:3a:84:22:
                    80:44:6e:75:ac:49:39:de:8e:76:36:57:0b:7f:28:
                    62:c5:a1:48:aa:3a:0d:0d:0a:49:05:cb:a5:ef:a9:
                    6e:83:84:98:9d:a4:17:88:b1:5b:5c:d1:77:3a:c2:
                    fa:de:13:8b:06:0f:5d:2d:0e:9f:dd:e1:92:2f:8a:
                    f7:f5:ca:e6:e1:6b:a8:bb:81:82:e5:1a:95:1f:b8:
                    40:9e:5c:f8:06:2d:dd:23:a8:5f:b3:03:8a:d9:ff:
                    db:d6:4c:67:b5:0d:5f:8a:6d:06:56:40:80:99:cc:
                    fa:bb:b4:b2:cc:39:d5:7e:b4:32:02:cd:22:fb:a6:
                    6c:ad:70:04:24:cd:ac:75:ab:e2:a4:79:6f:46:bf:
                    24:85:31:48:f9:73:0e:8f:91:08:8f:59:b1:23:2d:
                    89:e2:0c:2f:8a:a0:58:f2:cd:e6:58:ff:78:e5:98:
                    02:7e:b3:20:75:29:3a:b7:db:8e:20:22:ca:fa:92:
                    43:5f:e0:25:76:66:61:7b:83:61:68:dc:a6:a7:c0:
                    77:22:8c:62:2a:6f:49:bc:6c:c5:81:d9:05:d9:89:
                    3e:58:79:93:0a:9d:33:6e:db:ae:54:4d:c7:07:f2:
                    84:70:30:d2:9c:28:09:18:6d:66:a0:85:66:f3:06:
                    be:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:F4:01:93:5A:58:74:E3:10:29:19:A6:3C:65:BE:4E:AF:80:AF:70
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/1/ADF401935A5874E3102919A63C65BE4EAF80AF70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.180.0/22
                IPv6:
                  2804:7858::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271236

    Signature Algorithm: sha256WithRSAEncryption
         63:a3:f1:3c:d4:30:2a:8a:08:3c:24:e9:9e:94:62:ac:73:49:
         a1:d9:a3:6b:29:8e:bd:87:10:65:03:ae:72:b3:23:67:17:61:
         a7:13:aa:7f:e3:1e:70:ab:41:25:fa:9f:53:55:f1:2a:2c:94:
         ef:bf:07:ea:db:74:49:2a:00:55:f7:d8:d2:15:7c:c6:14:b6:
         2f:29:b2:a5:0c:45:63:58:36:d1:d2:fe:66:e7:ba:93:5a:ef:
         5e:b5:70:b7:d4:5e:d9:e0:3a:17:2b:6d:13:d4:10:c3:1a:de:
         cb:d1:a3:f1:c1:77:eb:fb:58:39:c3:2a:24:a5:83:eb:bc:76:
         5e:94:78:7b:c1:50:8b:87:21:95:a4:b9:27:96:0b:12:5d:fa:
         ed:46:21:4a:dd:4e:fd:9e:88:2b:6a:d5:c5:ca:59:36:dd:a2:
         9d:c2:c5:a8:42:9f:b5:3e:49:dd:39:52:fb:2e:83:ff:19:8d:
         b5:1d:7c:e7:fd:bb:fc:fa:60:1f:cd:6e:80:63:f4:6f:74:8c:
         56:c4:f1:1a:bc:59:2a:97:16:4b:e3:6a:54:f9:40:1e:aa:09:
         9e:96:93:79:84:b3:7c:6a:03:12:06:e7:92:bf:a0:51:fc:d6:
         c7:30:80:79:41:a8:98:ba:b2:75:3a:56:f9:6c:7b:af:14:2e:
         28:3e:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:14 2025 by rpki-client