Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
File:                     D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer (raw, json)
Hash identifier:          og7XHCNlM7qjyFJ+eJ1BoDGP1rUkjwzdl9I3gnC7d3Y=
Subject key identifier:   D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F215E0E19A98F05CCABF083EABF11AFF5C2100C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Aug 2025 13:30:07 +0000
Certificate not after:    Tue 18 Aug 2026 13:35:07 +0000
Subordinate resources:    AS: 268640
                          IP: 45.164.196.0/22
                          IP: 2804:5448::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 11:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:21:5e:0e:19:a9:8f:05:cc:ab:f0:83:ea:bf:11:af:f5:c2:10:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 19 13:30:07 2025 GMT
            Not After : Aug 18 13:35:07 2026 GMT
        Subject: CN=D531DF5F1FC99036157857A3BC1208D0D6677AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:be:27:60:5e:71:67:5d:ec:7d:a8:ec:f2:
                    cd:b2:34:c5:35:0c:f8:0d:53:43:e8:54:a4:e0:ee:
                    68:09:81:2c:ba:28:46:bf:46:5e:62:2b:f0:9b:da:
                    dc:15:20:3d:8f:bc:39:63:6f:54:18:26:cf:59:fd:
                    cd:e3:64:35:c0:28:8f:e3:77:39:f5:ab:0b:b5:a7:
                    42:ca:05:03:68:c7:43:13:be:67:56:e5:34:e9:bc:
                    7b:2d:ab:79:97:2c:2d:3f:98:f0:81:6a:06:51:cb:
                    33:94:4d:0e:f5:37:4d:cb:10:52:3f:a0:3b:db:bc:
                    34:16:a0:79:0f:7e:fe:60:bf:9c:03:bf:f1:0b:04:
                    ac:4d:27:56:d0:52:22:9a:09:fb:d5:13:ff:40:f9:
                    ae:a0:72:de:28:8a:f9:0a:75:24:d7:73:8d:cc:17:
                    60:2e:9e:4e:cf:1b:3e:c5:7b:6d:87:b5:2b:58:5a:
                    98:6c:2d:5b:73:29:b8:2c:ee:26:b2:08:aa:49:24:
                    62:b5:1f:a0:f4:aa:7c:84:82:41:6e:47:30:1a:94:
                    09:97:0e:81:9e:a3:65:65:19:28:88:4c:e7:63:63:
                    af:dc:68:c1:4a:af:cc:22:18:8a:b7:5e:67:8e:22:
                    b6:97:81:84:87:a6:85:e3:e2:f4:43:ad:05:0b:12:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.196.0/22
                IPv6:
                  2804:5448::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268640

    Signature Algorithm: sha256WithRSAEncryption
         80:3b:35:1d:e5:10:9f:64:c2:77:7f:84:ff:c6:96:e7:8e:9b:
         e3:0b:bb:90:b8:ee:85:cb:68:4f:65:5a:9d:56:f6:75:6f:3c:
         2b:33:cd:e4:13:f9:1c:0b:43:85:0b:84:75:42:a4:00:ea:f2:
         de:55:ac:3b:72:9c:e5:76:9b:3f:16:84:f6:75:5e:af:a2:cd:
         92:76:dc:fa:ee:8f:e9:bf:00:58:b0:bb:f6:2b:a3:2e:d6:b6:
         9b:3f:5a:06:04:32:98:1d:d5:d4:f9:b1:2f:3d:b2:82:68:14:
         65:18:4f:3d:fa:23:f7:c2:ef:1b:f9:80:1c:f8:e0:f2:fe:f4:
         0e:e2:ac:d8:46:f1:0a:be:16:72:ea:58:88:b2:fd:f0:fd:65:
         4e:1b:73:30:62:13:44:2d:29:bf:f7:bb:44:e0:09:59:bf:87:
         6e:14:4c:f7:fa:4e:80:20:29:93:f9:a8:14:53:4a:1a:f8:70:
         f0:99:84:44:cd:94:5e:92:40:8f:78:83:55:d8:d0:66:b7:dd:
         a3:b0:fb:2e:91:fd:f1:c0:bc:9e:db:c0:55:6e:01:70:f5:00:
         db:62:5a:54:ca:9f:88:27:dc:cf:77:c6:be:13:30:cb:10:f4:
         3d:19:4d:ca:d8:24:ff:90:04:9d:e3:12:84:e3:3d:cc:dd:43:
         ff:f2:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 11:57:19 2025 by rpki-client