Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA39C5996F84283A02BC51D85641F7AEAA478480.cer
File:                     FA39C5996F84283A02BC51D85641F7AEAA478480.cer (raw, json)
Hash identifier:          Br1tPiU7RN14xatLdtyFQn+KJzv/AXNiXQUAi+eBe/E=
Subject key identifier:   FA:39:C5:99:6F:84:28:3A:02:BC:51:D8:56:41:F7:AE:AA:47:84:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30A4708D75B2DD5CC99F5D319CD1D01A700B8D39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/FA39C5996F84283A02BC51D85641F7AEAA478480.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Jul 2025 16:33:33 +0000
Certificate not after:    Wed 01 Jul 2026 16:38:33 +0000
Subordinate resources:    AS: 269044
                          IP: 45.178.232.0/22
                          IP: 2804:5e9c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a4:70:8d:75:b2:dd:5c:c9:9f:5d:31:9c:d1:d0:1a:70:0b:8d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  2 16:33:33 2025 GMT
            Not After : Jul  1 16:38:33 2026 GMT
        Subject: CN=FA39C5996F84283A02BC51D85641F7AEAA478480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:78:79:4a:fc:74:db:ce:6a:e8:fd:52:e8:
                    c5:bf:b5:e1:ac:5c:57:38:30:28:b7:ad:f5:01:c2:
                    b3:9b:ec:27:ab:4f:da:54:ca:57:b1:57:58:a1:ec:
                    14:91:08:98:1a:22:a9:27:cb:13:fd:bc:0f:ac:96:
                    5a:16:f7:34:45:df:dc:d4:62:29:70:98:20:25:cf:
                    ae:e7:2b:bd:c5:be:26:fb:27:b9:2e:ed:29:ac:fa:
                    21:68:23:4e:34:36:96:49:76:a2:a6:ed:63:89:17:
                    01:7b:87:7d:72:ba:95:05:ba:e2:2d:e1:5b:e9:c5:
                    4d:56:88:eb:88:8b:c5:d8:15:a3:16:70:bd:03:ce:
                    e7:54:96:91:4c:a2:65:ac:64:ad:02:1a:d0:8f:9b:
                    22:15:c9:31:7f:67:35:18:1a:61:40:7f:8d:21:cb:
                    30:dd:3f:59:89:aa:34:5a:33:fa:a8:2c:ad:72:49:
                    5f:af:2f:2c:fd:54:23:09:72:54:d4:77:39:01:1e:
                    4e:9d:95:93:ec:3d:ec:94:d3:2d:d8:20:68:d9:f8:
                    ba:e0:de:a2:de:e2:a5:15:c5:eb:9c:81:1f:f1:f2:
                    41:32:6b:4a:f5:8e:bb:42:74:38:ad:40:ff:f6:e9:
                    a9:4a:ae:00:a3:8b:d6:96:4a:ab:eb:36:b2:32:af:
                    f3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:39:C5:99:6F:84:28:3A:02:BC:51:D8:56:41:F7:AE:AA:47:84:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/FA39C5996F84283A02BC51D85641F7AEAA478480.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.232.0/22
                IPv6:
                  2804:5e9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269044

    Signature Algorithm: sha256WithRSAEncryption
         07:37:8f:d8:43:94:60:ea:eb:36:80:ab:13:cf:11:88:44:71:
         fe:4c:c6:f9:fa:79:d2:7b:45:07:9d:55:b6:99:2b:f7:e2:8b:
         9b:1c:bb:14:80:19:da:9f:e2:7b:04:b8:ce:14:39:fb:60:78:
         ad:d5:2f:9c:ff:86:15:da:ad:88:53:07:2c:2e:6c:42:90:6d:
         36:9e:d6:a5:16:09:36:81:de:5e:94:f6:3f:07:1b:28:97:2f:
         a1:ab:01:dd:35:eb:54:0e:c5:03:96:2e:69:20:bd:96:9c:9e:
         b7:b9:7f:44:80:54:22:ed:0b:ba:59:a1:53:a8:f4:f8:78:c1:
         a2:73:a3:24:5b:5c:a0:d8:01:77:1c:ab:4b:3e:a0:fb:f7:37:
         04:44:d0:6a:a5:77:e9:e3:ff:19:33:d6:38:26:6e:c7:1b:6e:
         bc:41:ce:2b:d9:ef:d7:b0:ef:f3:70:a4:d4:24:d3:89:04:55:
         07:3f:e3:d0:91:7c:ff:b3:43:a5:77:ca:ff:18:a9:cf:7a:9d:
         99:15:8e:58:38:12:5c:3c:3b:5f:f9:ce:9e:98:c8:40:ce:b8:
         7b:17:bc:f6:b6:89:fd:6a:f3:05:6c:40:0d:64:01:06:8e:05:
         82:a0:a3:e2:9c:10:d9:7c:4d:e6:ed:0c:b5:26:7f:86:2c:a8:
         e7:b3:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:05:50 2025 by rpki-client