Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.cer
File:                     C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.cer (raw, json)
Hash identifier:          +VDlFbG43ZupgPSsJRQTq+7JrVHY0ORtlKMtkMPWrZc=
Subject key identifier:   C4:BF:0E:4B:A3:A6:41:F6:1C:3E:98:DB:7B:2D:36:16:12:AB:E6:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E6213575235CE2EC2413C3253329009FF9697CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jun 2025 15:49:55 +0000
Certificate not after:    Wed 03 Jun 2026 15:54:55 +0000
Subordinate resources:    AS: 272245
                          IP: 2804:8430::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:62:13:57:52:35:ce:2e:c2:41:3c:32:53:32:90:09:ff:96:97:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 15:49:55 2025 GMT
            Not After : Jun  3 15:54:55 2026 GMT
        Subject: CN=C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:d8:b4:80:3a:da:22:c6:36:f7:43:06:a7:
                    c7:22:db:89:43:06:9c:48:dd:28:bb:ae:eb:c2:8c:
                    87:4f:f3:6a:b7:31:38:0d:95:9c:e1:a2:ae:42:9c:
                    33:37:b6:c6:4c:d0:af:d9:43:43:3a:07:7e:95:77:
                    b6:23:65:47:1f:cd:d0:c1:e9:67:5d:c7:c2:42:d4:
                    ca:1a:bc:a1:1f:9a:d6:e9:d3:59:ee:86:25:44:f8:
                    c3:94:90:ab:92:c6:bf:a5:41:4b:92:f9:34:52:58:
                    98:e4:30:72:a5:22:99:ed:e1:e0:50:87:bb:39:86:
                    1a:68:19:44:f2:2f:da:53:de:9c:26:14:dd:4d:04:
                    df:d2:b2:7b:38:33:d7:a6:1a:de:24:3c:f6:6e:25:
                    06:1a:fb:fe:d8:17:51:f0:c8:2f:d9:03:55:43:6f:
                    b7:26:41:fd:94:cf:21:79:10:67:ad:64:e3:37:61:
                    a9:8d:92:fe:53:d6:19:26:8f:8a:5f:04:17:8d:ac:
                    6b:41:74:c5:5d:c2:38:d3:5c:03:de:be:7b:62:54:
                    10:d3:65:94:11:ca:04:d5:5c:26:e1:5e:52:d5:21:
                    bb:e1:5e:84:cd:72:58:c5:b1:a5:81:f8:9b:5e:78:
                    53:c5:4f:ba:9f:0a:db:3f:47:f3:66:c3:29:c4:ac:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:BF:0E:4B:A3:A6:41:F6:1C:3E:98:DB:7B:2D:36:16:12:AB:E6:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/C4BF0E4BA3A641F61C3E98DB7B2D361612ABE6A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8430::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272245

    Signature Algorithm: sha256WithRSAEncryption
         ba:1e:12:d8:fd:01:2f:32:74:2e:8c:d7:ca:63:d6:ad:e8:20:
         96:10:54:f2:68:78:60:52:3b:09:b9:02:b1:31:3c:db:a1:09:
         67:39:e6:41:34:c8:c1:46:f0:41:ca:e2:5d:64:98:17:24:64:
         68:e4:e0:9f:1f:4e:a6:97:d7:22:4d:c5:d8:c8:bf:d1:78:f4:
         39:7f:1c:0e:5d:8e:9e:89:5d:4c:80:ab:19:f7:15:51:13:a9:
         5f:3e:69:d9:7a:c1:4b:6b:aa:1a:02:1c:c4:0d:01:f5:aa:6f:
         20:08:80:b4:94:17:84:c1:84:b9:a5:86:c2:12:8d:14:09:54:
         84:68:51:d3:3d:c7:47:13:a7:bc:7e:24:c5:ef:7d:ce:f5:34:
         05:59:36:40:b3:ab:54:4f:af:4f:34:4b:cb:2e:d6:da:60:33:
         96:09:2f:7d:d8:2e:6c:44:ff:f2:70:a7:96:d0:80:3a:c7:69:
         5f:2e:3f:f1:13:c6:c3:a1:eb:07:8e:a8:96:8e:03:ed:b7:3d:
         3f:66:d1:4f:45:f1:32:45:eb:e1:4e:88:e7:30:8d:5b:53:d5:
         da:a3:5b:7b:7b:2c:74:bc:01:18:0b:8f:af:08:c9:f4:67:c9:
         43:45:fc:3d:22:08:40:1d:17:63:22:24:6e:dd:48:21:41:4f:
         f1:9f:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:12:30 2025 by rpki-client