Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D46C2BE32C6EE35D255355DA5ADF257982E486F8.cer
File:                     D46C2BE32C6EE35D255355DA5ADF257982E486F8.cer (raw, json)
Hash identifier:          nl21RN+TrMDuXy7N01LcEbVo3NpNjum8N3b3lxC7Mio=
Subject key identifier:   D4:6C:2B:E3:2C:6E:E3:5D:25:53:55:DA:5A:DF:25:79:82:E4:86:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       41C50BED8DD9A52515F18CB3A9F21F6D47CC7043
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/D46C2BE32C6EE35D255355DA5ADF257982E486F8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Aug 2025 19:43:20 +0000
Certificate not after:    Thu 27 Aug 2026 19:48:20 +0000
Subordinate resources:    AS: 273713
                          IP: 2804:8b20::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c5:0b:ed:8d:d9:a5:25:15:f1:8c:b3:a9:f2:1f:6d:47:cc:70:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 28 19:43:20 2025 GMT
            Not After : Aug 27 19:48:20 2026 GMT
        Subject: CN=D46C2BE32C6EE35D255355DA5ADF257982E486F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:66:0f:12:03:0b:7e:21:6e:f1:42:16:78:
                    27:98:51:9d:81:11:7b:de:87:62:df:c1:b9:8a:81:
                    b2:3c:a5:a0:7b:16:c3:c0:77:79:2f:e3:fa:7c:49:
                    81:29:9d:44:b3:bc:19:2e:5b:21:88:59:b0:a0:65:
                    c9:5b:08:b4:27:64:c2:50:a1:94:6e:62:e1:f1:42:
                    e2:d9:86:80:4b:53:30:77:d7:3b:ea:93:79:7a:d3:
                    a3:eb:15:72:69:68:7a:63:08:22:f0:1e:e7:36:96:
                    4d:92:39:4a:57:86:37:cd:3a:e2:9e:a0:eb:15:16:
                    4d:2f:70:0f:22:60:f5:8a:1e:c6:d5:fd:bc:f8:b0:
                    24:da:48:66:c8:55:3e:e9:a7:c3:5f:6f:fa:22:cb:
                    02:74:a9:5b:25:d3:05:5c:9c:46:c1:8e:8d:0f:6b:
                    7e:61:37:26:ef:53:af:75:02:96:29:e0:85:eb:0d:
                    5e:00:10:b9:91:1f:65:e4:29:3d:c5:01:ab:18:0f:
                    b3:26:ec:c7:9b:21:bf:1e:7d:63:17:e4:9d:8c:f3:
                    70:bc:86:2c:55:91:6a:12:80:76:6d:64:8b:eb:cd:
                    0d:ce:ff:5d:3a:92:1f:bc:af:60:46:11:aa:ea:aa:
                    6b:66:f5:59:17:bf:c8:ff:e0:51:cc:50:3d:e8:a5:
                    0c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:6C:2B:E3:2C:6E:E3:5D:25:53:55:DA:5A:DF:25:79:82:E4:86:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/D46C2BE32C6EE35D255355DA5ADF257982E486F8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273713

    Signature Algorithm: sha256WithRSAEncryption
         4d:93:38:e6:f2:14:06:33:c6:de:16:5a:b5:d0:74:19:86:c5:
         62:40:50:93:ac:82:59:1f:ff:ab:f8:ed:59:c3:63:f9:9b:3b:
         c0:b8:b9:bd:dc:1f:01:39:09:84:a5:a9:bf:c1:63:25:c7:76:
         8a:13:04:dc:54:25:94:ce:73:e9:b1:59:7c:75:0f:a8:01:a5:
         a4:a1:a2:a9:2d:f0:71:2f:81:d6:ad:09:1e:26:3b:b4:d3:48:
         96:0f:b4:5e:14:59:04:c0:e3:34:3d:ff:e6:91:a0:80:1e:dc:
         79:fd:19:ea:e9:0b:1a:9e:27:80:5f:94:df:04:6c:50:74:bb:
         76:de:96:1f:ea:f2:90:60:54:61:cc:68:9b:33:e7:ae:af:98:
         5a:ec:11:d5:03:fe:23:95:a8:1b:8d:b8:fd:01:9d:29:28:fa:
         03:96:6b:ad:08:ee:c7:26:b4:b5:e9:e7:c5:09:28:b0:66:13:
         a1:62:c1:d8:e9:2e:91:f2:8e:cc:e0:e5:ee:4d:ca:ca:b3:b2:
         c4:9d:1e:df:af:f0:ef:96:f3:0c:f8:8e:3b:7d:fb:cf:5b:a4:
         c8:0d:f7:8a:5f:7b:82:19:8b:e0:9c:75:7e:01:23:ba:6b:4e:
         f2:8b:58:28:4f:ae:f3:7f:97:00:24:d1:4f:23:4d:0b:5b:71:
         79:bb:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 04:46:31 2025 by rpki-client