Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
File:                     F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer (raw, json)
Hash identifier:          +7SJFTjcvqGYKob5+ceIGAx8iDDIhrzvTPXmvRcj0Ns=
Subject key identifier:   F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37811DCB3263F032996F6B3C4D18B6FD553884B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 04:14:37 +0000
Certificate not after:    Wed 25 Mar 2026 04:19:37 +0000
Subordinate resources:    AS: 267396
                          IP: 45.233.200.0/22
                          IP: 2804:4cd8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:81:1d:cb:32:63:f0:32:99:6f:6b:3c:4d:18:b6:fd:55:38:84:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 04:14:37 2025 GMT
            Not After : Mar 25 04:19:37 2026 GMT
        Subject: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:05:af:71:65:ef:05:81:f5:75:f1:be:b0:
                    3e:28:61:46:50:49:bd:61:54:7e:ef:09:79:bf:11:
                    4a:40:68:5b:35:d4:af:29:ce:3c:03:c5:08:54:68:
                    b1:a7:ed:d0:16:43:dd:d6:c7:7e:33:ce:5a:64:7b:
                    d7:25:39:de:cc:d1:f4:87:c1:36:8b:84:20:de:64:
                    fa:a7:d4:e7:4e:91:56:b3:91:2c:4f:77:40:9f:5a:
                    da:87:94:d7:82:8d:c5:e4:ca:ec:81:69:cb:bb:c8:
                    68:03:78:44:4c:00:ce:1a:3d:fc:22:97:64:c5:c7:
                    07:7f:2b:bc:a2:68:16:6b:e3:e3:ac:88:be:98:1e:
                    70:4c:c9:46:24:12:76:3f:a1:a9:38:f1:98:a0:f7:
                    b2:45:63:12:0f:c2:88:45:96:93:35:12:95:2f:61:
                    e7:7a:03:0b:1a:a6:1d:c5:30:03:c4:58:cc:99:c0:
                    fb:6f:e2:38:4e:fb:7c:ed:54:f9:19:b4:ba:16:b9:
                    b0:db:d0:6e:18:1a:cd:32:90:88:9f:a8:6f:b6:50:
                    2c:20:9a:99:b4:2c:67:c0:1d:be:86:bf:59:8f:13:
                    41:bb:e9:b4:88:40:24:f1:32:b4:f6:c1:d2:d4:c9:
                    b7:a9:8d:9a:76:ae:d3:b2:00:aa:f7:b6:68:d4:fa:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.200.0/22
                IPv6:
                  2804:4cd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267396

    Signature Algorithm: sha256WithRSAEncryption
         91:c3:13:67:d9:70:fc:09:1a:31:18:f4:e3:90:70:75:50:54:
         b7:3b:0c:d3:73:30:c4:86:a3:bb:8e:73:73:05:9e:42:1a:0d:
         91:01:ad:92:38:28:bd:2a:76:15:fd:1b:d1:4f:15:32:45:9e:
         e1:3a:b1:11:66:5c:b0:bc:cb:0d:e1:1b:95:85:fb:7d:f1:37:
         db:0f:fa:ce:52:3f:81:37:db:69:59:69:b1:27:09:e0:86:45:
         f7:24:74:07:e3:42:e9:45:bc:35:85:84:88:13:ab:ba:60:75:
         3c:ec:f3:1b:bc:30:cf:01:91:e7:c8:67:52:5f:a8:e5:0d:f8:
         07:7b:df:52:da:5c:0e:8b:ae:81:69:1d:c7:4b:5d:f3:39:9b:
         de:39:ef:43:7f:a5:9d:e5:b5:16:bb:b5:fc:80:9d:d6:6f:58:
         4a:35:8a:b2:22:00:d5:bd:dc:4b:10:b4:2e:0f:53:fc:94:6f:
         9c:ad:17:5b:81:6e:5b:b3:f1:4a:f9:d8:4b:68:d7:59:f2:92:
         49:cd:40:49:b8:12:ed:be:d4:27:c4:aa:64:02:97:a1:1d:3c:
         30:22:0a:8f:1f:40:bd:09:ad:b4:a9:81:89:ed:f9:aa:09:a1:
         06:91:36:0c:71:57:cd:ff:1f:de:b4:03:92:d4:c0:6d:42:25:
         b8:4b:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:10 2025 by rpki-client