Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.cer
File:                     C6D22E709DBC61B10238749E2FE09B4DD11E18C6.cer (raw, json)
Hash identifier:          Fif0ZDg8gXJ4MwubtBsBAJsaXiTfEDIBgWPMkVPNyQ8=
Subject key identifier:   C6:D2:2E:70:9D:BC:61:B1:02:38:74:9E:2F:E0:9B:4D:D1:1E:18:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C6AC9A69277106EB3CA341C65F55BDE11C75640
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Mar 2025 14:05:53 +0000
Certificate not after:    Wed 11 Mar 2026 14:10:53 +0000
Subordinate resources:    AS: 265086
                          IP: 170.233.32.0/22
                          IP: 2804:3294::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 02:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6a:c9:a6:92:77:10:6e:b3:ca:34:1c:65:f5:5b:de:11:c7:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 12 14:05:53 2025 GMT
            Not After : Mar 11 14:10:53 2026 GMT
        Subject: CN=C6D22E709DBC61B10238749E2FE09B4DD11E18C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:7a:d7:f3:40:59:6f:29:b2:88:fd:64:d0:
                    37:df:78:ca:2e:14:75:5b:7f:28:64:f9:8f:ef:8c:
                    9c:0f:44:93:41:fd:69:a9:5b:5b:6a:2b:9b:8d:6f:
                    2a:e1:cb:4e:51:16:17:7c:90:1e:b7:c3:9b:f5:f4:
                    c2:9f:e0:57:6d:c1:ed:2e:c1:42:e2:86:c9:c2:0e:
                    44:41:27:a5:89:50:dd:13:19:50:c3:a4:16:2d:6b:
                    ba:e8:80:72:32:fc:90:f3:e6:65:62:f4:86:3d:08:
                    9f:33:ad:2d:ab:16:32:ba:3c:ad:fc:8b:1e:f9:2e:
                    d7:f3:44:03:f4:33:30:d3:91:b9:c2:ae:0a:ac:1a:
                    11:a8:3f:24:66:d4:eb:0a:41:e0:45:07:69:60:07:
                    79:3f:44:19:ca:fa:12:77:af:72:1b:b1:e5:d9:17:
                    85:89:80:34:59:f7:29:7b:7e:f4:56:64:50:ca:b7:
                    e9:66:73:b9:1d:ae:c0:5d:91:b9:c1:2c:a6:ac:27:
                    68:a2:9d:9d:6b:b0:87:d1:e3:9f:47:71:9d:f8:ac:
                    b3:d2:a9:b9:a2:a0:2c:56:d5:f2:82:ea:41:f0:78:
                    84:fc:25:e1:16:25:fb:57:71:14:eb:a4:a9:e9:40:
                    87:a6:a1:ba:ca:41:d6:60:4d:6d:d8:2f:0e:e1:59:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:D2:2E:70:9D:BC:61:B1:02:38:74:9E:2F:E0:9B:4D:D1:1E:18:C6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.32.0/22
                IPv6:
                  2804:3294::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265086

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:1b:00:c8:2a:0c:fb:ef:36:0c:de:3d:36:ce:5c:60:2c:
         4f:36:d1:66:c9:55:0a:28:11:de:41:e3:6a:ba:2e:34:8f:0c:
         07:c7:7e:9e:cb:dc:22:02:81:de:68:b8:c1:eb:c6:b9:a4:ba:
         e4:ba:d3:34:d2:47:30:0e:b9:8f:d6:a1:d8:4c:71:c8:5c:c1:
         ab:70:87:39:2a:5c:7c:77:4b:26:76:c3:b5:62:51:b1:a5:96:
         74:4f:c8:0e:d0:2b:0a:79:8e:1e:28:88:3a:4f:17:fe:9a:b4:
         77:2f:65:2b:4b:45:11:26:1f:80:42:27:44:b5:be:6a:63:29:
         66:de:86:2a:45:46:99:2a:39:33:02:e5:45:0b:5d:33:52:56:
         55:bf:0f:34:7f:f0:b8:54:d9:d7:1f:de:d7:2b:72:75:f1:82:
         79:00:5b:2c:84:d8:0d:23:2c:37:a7:95:93:c7:7f:a0:9a:93:
         78:e3:da:c1:8c:bb:36:29:60:20:55:04:53:4a:40:be:52:55:
         09:e5:da:93:01:c8:5e:27:bf:01:08:4d:b6:ef:25:d8:b5:43:
         ce:00:09:6b:a4:ba:43:85:c6:18:69:c2:ba:f2:40:65:a4:cd:
         86:c9:e7:08:bd:53:43:11:0d:89:d7:99:02:69:d6:a1:13:78:
         e1:9c:ce:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:07:53 2025 by rpki-client